aws-iam-data 0.0.141 → 0.0.143

package/dist/data/json/changelog.json

@@ -1,4 +1,27 @@
 [
+    {
+        "dateOfChange": "2024-01-25",
+        "addedServices": [],
+        "removedServices": [],
+        "addedActions": {
+            "Amazon Inspector2": [
+                "inspector2:CreateCisScanConfiguration",
+                "inspector2:DeleteCisScanConfiguration",
+                "inspector2:GetCisScanReport",
+                "inspector2:GetCisScanResultDetails",
+                "inspector2:ListCisScanConfigurations",
+                "inspector2:ListCisScanResultsAggregatedByChecks",
+                "inspector2:ListCisScanResultsAggregatedByTargetResource",
+                "inspector2:ListCisScans",
+                "inspector2:SendCisSessionHealth",
+                "inspector2:SendCisSessionTelemetry",
+                "inspector2:StartCisSession",
+                "inspector2:StopCisSession",
+                "inspector2:UpdateCisScanConfiguration"
+            ]
+        },
+        "removedActions": {}
+    },
     {
         "dateOfChange": "2024-01-23",
         "addedServices": [],

package/dist/data/json/iam.json

@@ -3592,49 +3592,49 @@
             {
                 "name": "backend",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend.html",
-                "arnPattern": "arn:${Partition}:amplifybackend:${Region}:${Account}:backend/${AppId}",
+                "arnPattern": "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}",
                 "conditionKeys": []
             },
             {
                 "name": "environment",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-api-backendenvironmentname-details.html",
-                "arnPattern": "arn:${Partition}:amplifybackend:${Region}:${Account}:backend/${AppId}/environments",
+                "arnPattern": "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/environments",
                 "conditionKeys": []
             },
             {
                 "name": "api",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-api.html",
-                "arnPattern": "arn:${Partition}:amplifybackend:${Region}:${Account}:backend/${AppId}/api",
+                "arnPattern": "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/api",
                 "conditionKeys": []
             },
             {
                 "name": "auth",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-auth.html",
-                "arnPattern": "arn:${Partition}:amplifybackend:${Region}:${Account}:backend/${AppId}/auth",
+                "arnPattern": "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/auth",
                 "conditionKeys": []
             },
             {
                 "name": "job",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-job-backendenvironmentname.html",
-                "arnPattern": "arn:${Partition}:amplifybackend:${Region}:${Account}:backend/${AppId}/job",
+                "arnPattern": "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/job",
                 "conditionKeys": []
             },
             {
                 "name": "config",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-config.html",
-                "arnPattern": "arn:${Partition}:amplifybackend:${Region}:${Account}:backend/${AppId}/config/*",
+                "arnPattern": "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/config/*",
                 "conditionKeys": []
             },
             {
                 "name": "token",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-token.html",
-                "arnPattern": "arn:${Partition}:amplifybackend:${Region}:${Account}:backend/${AppId}/token",
+                "arnPattern": "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/token",
                 "conditionKeys": []
             },
             {
                 "name": "storage",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/amplify-admin-ui/latest/APIReference/backend-appid-storage.html",
-                "arnPattern": "arn:${Partition}:amplifybackend:${Region}:${Account}:backend/${AppId}/storage",
+                "arnPattern": "arn:${Partition}:amplifybackend:${Region}:${Account}:/backend/${AppId}/storage",
                 "conditionKeys": []
             }
         ],
@@ -23769,7 +23769,7 @@
             },
             {
                 "name": "restoreTestingPlan",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/restore-testing-plans.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/restore-testing.html",
                 "arnPattern": "arn:${Partition}:backup:${Region}:${Account}:restore-testing-plan:${RestoreTestingPlanName}-${RestoreTestingPlanId}",
                 "conditionKeys": [
                     "aws:ResourceTag/${TagKey}"
@@ -132687,7 +132687,9 @@
                             "aws:TagKeys",
                             "elasticmapreduce:RequestTag/${TagKey}"
                         ],
-                        "dependentActions": []
+                        "dependentActions": [
+                            "iam:PassRole"
+                        ]
                     }
                 ]
             },
@@ -176318,6 +176320,31 @@
                     }
                 ]
             },
+            {
+                "name": "CreateCisScanConfiguration",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_CreateCisScanConfiguration.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create and define the settings for a CIS scan configuration",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "CIS Scan Configuration",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}",
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "CreateFilter",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_CreateFilter.html",
@@ -176372,6 +176399,29 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteCisScanConfiguration",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_DeleteCisScanConfiguration.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a CIS scan configuration",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "CIS Scan Configuration",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DeleteFilter",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_DeleteFilter.html",
@@ -176477,6 +176527,36 @@
                     }
                 ]
             },
+            {
+                "name": "GetCisScanReport",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetCisScanReport.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve a report containing information about completed CIS scans",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetCisScanResultDetails",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetCisScanResultDetails.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve information about all details pertaining to one CIS scan and one targeted resource",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetConfiguration",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetConfiguration.html",
@@ -176597,6 +176677,66 @@
                     }
                 ]
             },
+            {
+                "name": "ListCisScanConfigurations",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCisScanConfigurations.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve information about all CIS scan configurations",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListCisScanResultsAggregatedByChecks",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCisScanResultsAggregatedByChecks.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve information about all checks pertaining to one CIS scan",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListCisScanResultsAggregatedByTargetResource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCisScanResultsAggregatedByTargetResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve information about all resources pertaining to one CIS scan",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListCisScans",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCisScans.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve information about completed CIS scans",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListCoverage",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListCoverage.html",
@@ -176762,6 +176902,66 @@
                     }
                 ]
             },
+            {
+                "name": "SendCisSessionHealth",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_SendCisSessionHealth.html",
+                "permissionOnly": false,
+                "description": "Grants permission to send CIS health for a CIS scan",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "SendCisSessionTelemetry",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_SendCisSessionTelemetry.html",
+                "permissionOnly": false,
+                "description": "Grants permission to send CIS telemetry for a CIS scan",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "StartCisSession",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_StartCisSession.html",
+                "permissionOnly": false,
+                "description": "Grants permission to start a CIS scan session",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "StopCisSession",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_StopCisSession.html",
+                "permissionOnly": false,
+                "description": "Grants permission to stop a CIS scan session",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "TagResource",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_TagResource.html",
@@ -176769,6 +176969,22 @@
                 "description": "Grants permission to add or update the tags for an Amazon Inspector resource",
                 "accessLevel": "Tagging",
                 "resourceTypes": [
+                    {
+                        "resourceType": "CIS Scan Configuration",
+                        "required": false,
+                        "conditionKeys": [
+                            "inspector2:Cis Scan Configuration"
+                        ],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "Filter",
+                        "required": false,
+                        "conditionKeys": [
+                            "inspector2:Filter"
+                        ],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "",
                         "required": false,
@@ -176788,16 +177004,56 @@
                 "description": "Grants permission to remove tags from an Amazon Inspector resource",
                 "accessLevel": "Tagging",
                 "resourceTypes": [
+                    {
+                        "resourceType": "CIS Scan Configuration",
+                        "required": false,
+                        "conditionKeys": [
+                            "inspector2:Cis Scan Configuration"
+                        ],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "Filter",
+                        "required": false,
+                        "conditionKeys": [
+                            "inspector2:Filter"
+                        ],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}",
                             "aws:TagKeys"
                         ],
                         "dependentActions": []
                     }
                 ]
             },
+            {
+                "name": "UpdateCisScanConfiguration",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateCisScanConfiguration.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update the settings for a CIS scan configuration",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "CIS Scan Configuration",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "UpdateConfiguration",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateConfiguration.html",
@@ -176912,6 +177168,14 @@
                 "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html",
                 "arnPattern": "arn:${Partition}:inspector2:${Region}:${Account}:finding/${FindingId}",
                 "conditionKeys": []
+            },
+            {
+                "name": "CIS Scan Configuration",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html",
+                "arnPattern": "arn:${Partition}:inspector2:${Region}:${Account}:owner/${OwnerId}/cis-configuration/${CISScanConfigurationId}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             }
         ],
         "conditionKeys": [
@@ -260424,18 +260688,6 @@
                 "description": "Grants permission to view database proxy target details",
                 "accessLevel": "List",
                 "resourceTypes": [
-                    {
-                        "resourceType": "cluster",
-                        "required": true,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "db",
-                        "required": true,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
                     {
                         "resourceType": "proxy",
                         "required": true,
@@ -292531,7 +292783,9 @@
                     {
                         "resourceType": "",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "sagemaker:SearchVisibilityCondition/${FilterKey}"
+                        ],
                         "dependentActions": []
                     }
                 ]
@@ -294423,6 +294677,12 @@
                 "description": "Filters access by the root access associated with the resource in the request",
                 "type": "String"
             },
+            {
+                "name": "sagemaker:SearchVisibilityCondition/${FilterKey}",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys",
+                "description": "Limits the results of your search request to the resources that you can access. ${FilterKey} is a key that the VisibilityConditions configuration presents in the Search request",
+                "type": "String"
+            },
             {
                 "name": "sagemaker:ServerlessMaxConcurrency",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys",

package/dist/data/json/metadata.json

@@ -12572,7 +12572,7 @@
             "name": "Amazon Inspector2",
             "servicePrefix": "inspector2",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoninspector2.html",
-            "actionsCount": 46,
+            "actionsCount": 59,
             "actions": [
                 "AssociateMember",
                 "BatchGetAccountStatus",
@@ -12583,9 +12583,11 @@
                 "BatchUpdateMemberEc2DeepInspectionStatus",
                 "CancelFindingsReport",
                 "CancelSbomExport",
+                "CreateCisScanConfiguration",
                 "CreateFilter",
                 "CreateFindingsReport",
                 "CreateSbomExport",
+                "DeleteCisScanConfiguration",
                 "DeleteFilter",
                 "DescribeOrganizationConfiguration",
                 "Disable",
@@ -12593,6 +12595,8 @@
                 "DisassociateMember",
                 "Enable",
                 "EnableDelegatedAdminAccount",
+                "GetCisScanReport",
+                "GetCisScanResultDetails",
                 "GetConfiguration",
                 "GetDelegatedAdminAccount",
                 "GetEc2DeepInspectionConfiguration",
@@ -12601,6 +12605,10 @@
                 "GetMember",
                 "GetSbomExport",
                 "ListAccountPermissions",
+                "ListCisScanConfigurations",
+                "ListCisScanResultsAggregatedByChecks",
+                "ListCisScanResultsAggregatedByTargetResource",
+                "ListCisScans",
                 "ListCoverage",
                 "ListCoverageStatistics",
                 "ListDelegatedAdminAccounts",
@@ -12612,8 +12620,13 @@
                 "ListUsageTotals",
                 "ResetEncryptionKey",
                 "SearchVulnerabilities",
+                "SendCisSessionHealth",
+                "SendCisSessionTelemetry",
+                "StartCisSession",
+                "StopCisSession",
                 "TagResource",
                 "UntagResource",
+                "UpdateCisScanConfiguration",
                 "UpdateConfiguration",
                 "UpdateEc2DeepInspectionConfiguration",
                 "UpdateEncryptionKey",
@@ -12621,10 +12634,11 @@
                 "UpdateOrgEc2DeepInspectionConfiguration",
                 "UpdateOrganizationConfiguration"
             ],
-            "resourceTypesCount": 2,
+            "resourceTypesCount": 3,
             "resourceTypes": [
                 "Filter",
-                "Finding"
+                "Finding",
+                "CIS Scan Configuration"
             ],
             "conditionKeysCount": 3,
             "conditionKeys": [
@@ -21379,7 +21393,7 @@
                 "shared-model-event",
                 "sagemaker-catalog"
             ],
-            "conditionKeysCount": 48,
+            "conditionKeysCount": 49,
             "conditionKeys": [
                 "aws:RequestTag/${TagKey}",
                 "aws:ResourceTag/${TagKey}",
@@ -21418,6 +21432,7 @@
                 "sagemaker:ResourceTag/",
                 "sagemaker:ResourceTag/${TagKey}",
                 "sagemaker:RootAccess",
+                "sagemaker:SearchVisibilityCondition/${FilterKey}",
                 "sagemaker:ServerlessMaxConcurrency",
                 "sagemaker:ServerlessMemorySize",
                 "sagemaker:SpaceSharingType",

package/dist/data/json/reports.json

@@ -2,15 +2,15 @@
     "Actions by type": [
         {
             "key": "Write Actions",
-            "value": 9028
+            "value": 9035
         },
         {
-            "key": "Read Actions",
-            "value": 4401
+            "key": "List Actions",
+            "value": 2627
         },
         {
-            "key": "List Actions",
-            "value": 2622
+            "key": "Read Actions",
+            "value": 4402
         },
         {
             "key": "Permissions Actions",
@@ -410,11 +410,11 @@
         },
         {
             "key": "Total number of distinct resource ARNS",
-            "value": 1674
+            "value": 1675
         },
         {
             "key": "Total number of distinct condition keys",
-            "value": 872
+            "value": 875
         }
     ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aws-iam-data",
-  "version": "0.0.141",
+  "version": "0.0.143",
   "description": "Provides AWS IAM data gathered from the official AWS IAM docs as a convenient npm package that can be used in other OSS projects.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",