aws-iam-data 0.0.269 → 0.0.271

package/dist/data/json/changelog.json

@@ -1,4 +1,36 @@
 [
+    {
+        "dateOfChange": "2024-09-19",
+        "addedServices": [],
+        "removedServices": [],
+        "addedActions": {
+            "AWS IoT": [
+                "iot:AssociateSbomWithPackageVersion",
+                "iot:DisassociateSbomFromPackageVersion",
+                "iot:ListSbomValidationResults"
+            ],
+            "Amazon S3 Express": [
+                "s3express:GetEncryptionConfiguration",
+                "s3express:PutEncryptionConfiguration"
+            ]
+        },
+        "removedActions": {}
+    },
+    {
+        "dateOfChange": "2024-09-18",
+        "addedServices": [],
+        "removedServices": [],
+        "addedActions": {
+            "AWS Lambda": [
+                "lambda:DeleteResourcePolicy",
+                "lambda:GetPublicAccessBlockConfig",
+                "lambda:GetResourcePolicy",
+                "lambda:PutPublicAccessBlockConfig",
+                "lambda:PutResourcePolicy"
+            ]
+        },
+        "removedActions": {}
+    },
     {
         "dateOfChange": "2024-09-17",
         "addedServices": [],

package/dist/data/json/iam.json

@@ -3521,7 +3521,9 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [],
-                        "dependentActions": []
+                        "dependentActions": [
+                            "s3:ListAllMyBuckets"
+                        ]
                     }
                 ]
             },
@@ -190160,6 +190162,23 @@
                     }
                 ]
             },
+            {
+                "name": "AssociateSbomWithPackageVersion",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/iot/latest/apireference/API_AssociateSbomWithPackageVersion.html",
+                "permissionOnly": false,
+                "description": "Grants permission to associate SBOM files to a package version",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "packageversion",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": [
+                            "iot:GetIndexingConfiguration"
+                        ]
+                    }
+                ]
+            },
             {
                 "name": "AssociateTargetsWithJob",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/iot/latest/apireference/API_AssociateTargetsWithJob.html",
@@ -190861,7 +190880,8 @@
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": [
-                            "iot:GetIndexingConfiguration"
+                            "iot:GetIndexingConfiguration",
+                            "s3:GetObjectVersion"
                         ]
                     },
                     {
@@ -192388,6 +192408,21 @@
                     }
                 ]
             },
+            {
+                "name": "DisassociateSbomFromPackageVersion",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/iot/latest/apireference/API_DisassociateSbomFromPackageVersion.html",
+                "permissionOnly": false,
+                "description": "Grants permission to disassociate SBOM files from a package version",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "packageversion",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "EnableTopicRule",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/iot/latest/apireference/API_EnableTopicRule.html",
@@ -193360,6 +193395,21 @@
                     }
                 ]
             },
+            {
+                "name": "ListSbomValidationResults",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListSbomValidationResults.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list SBOM validation results of a package version",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "packageversion",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListScheduledAudits",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/iot/latest/apireference/API_ListScheduledAudits.html",
@@ -194897,7 +194947,8 @@
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": [
-                            "iot:GetIndexingConfiguration"
+                            "iot:GetIndexingConfiguration",
+                            "s3:GetObjectVersion"
                         ]
                     },
                     {
@@ -214967,6 +215018,23 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteResourcePolicy",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/lambda/latest/dg/API_DeleteResourcePolicy.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete the resource-based policy for an AWS Lambda function, version, or alias",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "function",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": [
+                            "lambda:RemovePermission"
+                        ]
+                    }
+                ]
+            },
             {
                 "name": "DisableReplication",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/lambda-edge-permissions.html",
@@ -215245,6 +215313,38 @@
                     }
                 ]
             },
+            {
+                "name": "GetPublicAccessBlockConfig",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/lambda/latest/dg/API_GetPublicAccessBlockConfig.html",
+                "permissionOnly": false,
+                "description": "Grants permission to view the PublicAccessBlockConfig of an AWS Lambda function",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "function",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetResourcePolicy",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/lambda/latest/dg/API_GetResourcePolicy.html",
+                "permissionOnly": false,
+                "description": "Grants permission to view the resource-based policy for an AWS Lambda function, version, or alias",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "function",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": [
+                            "lambda:GetPolicy"
+                        ]
+                    }
+                ]
+            },
             {
                 "name": "GetRuntimeManagementConfig",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/lambda/latest/dg/API_GetRuntimeManagementConfig.html",
@@ -215636,6 +215736,39 @@
                     }
                 ]
             },
+            {
+                "name": "PutPublicAccessBlockConfig",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/lambda/latest/dg/API_PutPublicAccessBlockConfig.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update the PublicAccessBlockConfig of an AWS Lambda function",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "function",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "PutResourcePolicy",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/lambda/latest/dg/API_PutResourcePolicy.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update the resource-based policy for an AWS Lambda function, version, or alias",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "function",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": [
+                            "lambda:AddPermission",
+                            "lambda:RemovePermission"
+                        ]
+                    }
+                ]
+            },
             {
                 "name": "PutRuntimeManagementConfig",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/lambda/latest/dg/API_PutRuntimeManagementConfig.html",
@@ -299956,7 +300089,9 @@
                             "s3express:ResourceAccount",
                             "s3express:signatureversion",
                             "s3express:TlsVersion",
-                            "s3express:x-amz-content-sha256"
+                            "s3express:x-amz-content-sha256",
+                            "s3express:x-amz-server-side-encryption",
+                            "s3express:x-amz-server-side-encryption-aws-kms-key-id"
                         ],
                         "dependentActions": []
                     }
@@ -300072,6 +300207,33 @@
                     }
                 ]
             },
+            {
+                "name": "GetEncryptionConfiguration",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketEncryption.html",
+                "permissionOnly": false,
+                "description": "Grants permission to return the default encryption configuration for a directory bucket",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "bucket",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "s3express:authType",
+                            "s3express:ResourceAccount",
+                            "s3express:signatureversion",
+                            "s3express:TlsVersion",
+                            "s3express:x-amz-content-sha256"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListAllMyDirectoryBuckets",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListDirectoryBuckets.html",
@@ -300119,12 +300281,39 @@
                         "dependentActions": []
                     }
                 ]
+            },
+            {
+                "name": "PutEncryptionConfiguration",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketEncryption.html",
+                "permissionOnly": false,
+                "description": "Grants permission to set the encryption configuration for a directory bucket",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "bucket",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "s3express:authType",
+                            "s3express:ResourceAccount",
+                            "s3express:signatureversion",
+                            "s3express:TlsVersion",
+                            "s3express:x-amz-content-sha256"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
             }
         ],
         "resourceTypes": [
             {
                 "name": "bucket",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-zonal-buckets.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-security-iam.html",
                 "arnPattern": "arn:${Partition}:s3express:${Region}:${Account}:bucket/${BucketName}",
                 "conditionKeys": []
             }
@@ -300177,6 +300366,18 @@
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/bucket-policy-s3-sigv4-conditions.html",
                 "description": "Filters access by unsigned content in your bucket",
                 "type": "String"
+            },
+            {
+                "name": "s3express:x-amz-server-side-encryption",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-data-protection.html",
+                "description": "Filters access by server-side encryption",
+                "type": "String"
+            },
+            {
+                "name": "s3express:x-amz-server-side-encryption-aws-kms-key-id",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-UsingKMSEncryption.html#s3-express-require-sse-kms",
+                "description": "Filters access by AWS KMS customer managed key for server-side encryption",
+                "type": "ARN"
             }
         ]
     },

package/dist/data/json/metadata.json

@@ -13492,11 +13492,12 @@
             "name": "AWS IoT",
             "servicePrefix": "iot",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html",
-            "actionsCount": 271,
+            "actionsCount": 274,
             "actions": [
                 "AcceptCertificateTransfer",
                 "AddThingToBillingGroup",
                 "AddThingToThingGroup",
+                "AssociateSbomWithPackageVersion",
                 "AssociateTargetsWithJob",
                 "AttachPolicy",
                 "AttachPrincipalPolicy",
@@ -13619,6 +13620,7 @@
                 "DetachSecurityProfile",
                 "DetachThingPrincipal",
                 "DisableTopicRule",
+                "DisassociateSbomFromPackageVersion",
                 "EnableTopicRule",
                 "GetBehaviorModelTrainingSummaries",
                 "GetBucketsAggregation",
@@ -13683,6 +13685,7 @@
                 "ListRelatedResourcesForAuditFinding",
                 "ListRetainedMessages",
                 "ListRoleAliases",
+                "ListSbomValidationResults",
                 "ListScheduledAudits",
                 "ListSecurityProfiles",
                 "ListSecurityProfilesForTarget",
@@ -15333,7 +15336,7 @@
             "name": "AWS Lambda",
             "servicePrefix": "lambda",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awslambda.html",
-            "actionsCount": 70,
+            "actionsCount": 75,
             "actions": [
                 "AddLayerVersionPermission",
                 "AddPermission",
@@ -15352,6 +15355,7 @@
                 "DeleteFunctionUrlConfig",
                 "DeleteLayerVersion",
                 "DeleteProvisionedConcurrencyConfig",
+                "DeleteResourcePolicy",
                 "DisableReplication",
                 "EnableReplication",
                 "GetAccountSettings",
@@ -15369,6 +15373,8 @@
                 "GetLayerVersionPolicy",
                 "GetPolicy",
                 "GetProvisionedConcurrencyConfig",
+                "GetPublicAccessBlockConfig",
+                "GetResourcePolicy",
                 "GetRuntimeManagementConfig",
                 "InvokeAsync",
                 "InvokeFunction",
@@ -15392,6 +15398,8 @@
                 "PutFunctionEventInvokeConfig",
                 "PutFunctionRecursionConfig",
                 "PutProvisionedConcurrencyConfig",
+                "PutPublicAccessBlockConfig",
+                "PutResourcePolicy",
                 "PutRuntimeManagementConfig",
                 "RemoveLayerVersionPermission",
                 "RemovePermission",
@@ -21840,21 +21848,23 @@
             "name": "Amazon S3 Express",
             "servicePrefix": "s3express",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3express.html",
-            "actionsCount": 7,
+            "actionsCount": 9,
             "actions": [
                 "CreateBucket",
                 "CreateSession",
                 "DeleteBucket",
                 "DeleteBucketPolicy",
                 "GetBucketPolicy",
+                "GetEncryptionConfiguration",
                 "ListAllMyDirectoryBuckets",
-                "PutBucketPolicy"
+                "PutBucketPolicy",
+                "PutEncryptionConfiguration"
             ],
             "resourceTypesCount": 1,
             "resourceTypes": [
                 "bucket"
             ],
-            "conditionKeysCount": 8,
+            "conditionKeysCount": 10,
             "conditionKeys": [
                 "s3express:LocationName",
                 "s3express:ResourceAccount",
@@ -21863,7 +21873,9 @@
                 "s3express:authType",
                 "s3express:signatureAge",
                 "s3express:signatureversion",
-                "s3express:x-amz-content-sha256"
+                "s3express:x-amz-content-sha256",
+                "s3express:x-amz-server-side-encryption",
+                "s3express:x-amz-server-side-encryption-aws-kms-key-id"
             ]
         },
         {

package/dist/data/json/reports.json

@@ -2,19 +2,19 @@
     "Actions by type": [
         {
             "key": "Read Actions",
-            "value": 4630
+            "value": 4633
         },
         {
             "key": "List Actions",
-            "value": 2795
+            "value": 2796
         },
         {
             "key": "Permissions Actions",
-            "value": 294
+            "value": 297
         },
         {
             "key": "Write Actions",
-            "value": 9532
+            "value": 9535
         }
     ],
     "Longest action names": [
@@ -68,6 +68,10 @@
             "key": "route53:ChangeResourceRecordSetsNormalizedRecordNames",
             "value": 53
         },
+        {
+            "key": "s3express:x-amz-server-side-encryption-aws-kms-key-id",
+            "value": 53
+        },
         {
             "key": "vpc-lattice-svcs:RequestQueryString/${QueryStringKey}",
             "value": 53
@@ -95,10 +99,6 @@
         {
             "key": "amplifyuibuilder:ComponentResourceEnvironmentName",
             "value": 49
-        },
-        {
-            "key": "codestar-connections:ProviderPermissionsRequired",
-            "value": 48
         }
     ],
     "Longest service prefixes": [
@@ -242,7 +242,7 @@
         },
         {
             "key": "AWS IoT",
-            "value": 271
+            "value": 274
         },
         {
             "key": "Amazon Connect",
@@ -414,7 +414,7 @@
         },
         {
             "key": "Total number of distinct condition keys",
-            "value": 940
+            "value": 942
         }
     ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aws-iam-data",
-  "version": "0.0.269",
+  "version": "0.0.271",
   "description": "Provides AWS IAM data gathered from the official AWS IAM docs as a convenient npm package that can be used in other OSS projects.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",