aws-iam-data 0.0.453 → 0.0.455
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -1,4 +1,15 @@
|
|
|
1
1
|
[
|
|
2
|
+
{
|
|
3
|
+
"dateOfChange": "2025-09-26",
|
|
4
|
+
"addedServices": [],
|
|
5
|
+
"removedServices": [],
|
|
6
|
+
"addedActions": {
|
|
7
|
+
"Amazon Elastic Container Service": [
|
|
8
|
+
"ecs:PutSystemLogEvents"
|
|
9
|
+
]
|
|
10
|
+
},
|
|
11
|
+
"removedActions": {}
|
|
12
|
+
},
|
|
2
13
|
{
|
|
3
14
|
"dateOfChange": "2025-09-23",
|
|
4
15
|
"addedServices": [],
|
package/dist/data/json/iam.json
CHANGED
|
@@ -155108,6 +155108,33 @@
|
|
|
155108
155108
|
}
|
|
155109
155109
|
]
|
|
155110
155110
|
},
|
|
155111
|
+
{
|
|
155112
|
+
"name": "PutSystemLogEvents",
|
|
155113
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_PutSystemLogEvents.html",
|
|
155114
|
+
"permissionOnly": false,
|
|
155115
|
+
"description": "Grants permission to collect system logs from the container instances",
|
|
155116
|
+
"accessLevel": "Write",
|
|
155117
|
+
"resourceTypes": [
|
|
155118
|
+
{
|
|
155119
|
+
"resourceType": "cluster",
|
|
155120
|
+
"required": true,
|
|
155121
|
+
"conditionKeys": [
|
|
155122
|
+
"aws:ResourceTag/${TagKey}"
|
|
155123
|
+
],
|
|
155124
|
+
"dependentActions": []
|
|
155125
|
+
},
|
|
155126
|
+
{
|
|
155127
|
+
"resourceType": "container-instance",
|
|
155128
|
+
"required": true,
|
|
155129
|
+
"conditionKeys": [
|
|
155130
|
+
"aws:ResourceTag/${TagKey}",
|
|
155131
|
+
"ecs:cluster",
|
|
155132
|
+
"ecs:capacity-provider"
|
|
155133
|
+
],
|
|
155134
|
+
"dependentActions": []
|
|
155135
|
+
}
|
|
155136
|
+
]
|
|
155137
|
+
},
|
|
155111
155138
|
{
|
|
155112
155139
|
"name": "RegisterContainerInstance",
|
|
155113
155140
|
"apiReferenceUrl": "https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_RegisterContainerInstance.html",
|
|
@@ -206698,6 +206725,15 @@
|
|
|
206698
206725
|
"required": true,
|
|
206699
206726
|
"conditionKeys": [],
|
|
206700
206727
|
"dependentActions": []
|
|
206728
|
+
},
|
|
206729
|
+
{
|
|
206730
|
+
"resourceType": "",
|
|
206731
|
+
"required": false,
|
|
206732
|
+
"conditionKeys": [
|
|
206733
|
+
"aws:RequestTag/${TagKey}",
|
|
206734
|
+
"aws:TagKeys"
|
|
206735
|
+
],
|
|
206736
|
+
"dependentActions": []
|
|
206701
206737
|
}
|
|
206702
206738
|
]
|
|
206703
206739
|
},
|
|
@@ -241117,6 +241153,30 @@
|
|
|
241117
241153
|
"kms:EncryptionContext:${EncryptionContextKey}",
|
|
241118
241154
|
"kms:EncryptionContextKeys",
|
|
241119
241155
|
"kms:RecipientAttestation:ImageSha384",
|
|
241156
|
+
"kms:RecipientAttestation:NitroTPMPCR0",
|
|
241157
|
+
"kms:RecipientAttestation:NitroTPMPCR1",
|
|
241158
|
+
"kms:RecipientAttestation:NitroTPMPCR2",
|
|
241159
|
+
"kms:RecipientAttestation:NitroTPMPCR3",
|
|
241160
|
+
"kms:RecipientAttestation:NitroTPMPCR4",
|
|
241161
|
+
"kms:RecipientAttestation:NitroTPMPCR5",
|
|
241162
|
+
"kms:RecipientAttestation:NitroTPMPCR6",
|
|
241163
|
+
"kms:RecipientAttestation:NitroTPMPCR7",
|
|
241164
|
+
"kms:RecipientAttestation:NitroTPMPCR8",
|
|
241165
|
+
"kms:RecipientAttestation:NitroTPMPCR9",
|
|
241166
|
+
"kms:RecipientAttestation:NitroTPMPCR10",
|
|
241167
|
+
"kms:RecipientAttestation:NitroTPMPCR11",
|
|
241168
|
+
"kms:RecipientAttestation:NitroTPMPCR12",
|
|
241169
|
+
"kms:RecipientAttestation:NitroTPMPCR13",
|
|
241170
|
+
"kms:RecipientAttestation:NitroTPMPCR14",
|
|
241171
|
+
"kms:RecipientAttestation:NitroTPMPCR15",
|
|
241172
|
+
"kms:RecipientAttestation:NitroTPMPCR16",
|
|
241173
|
+
"kms:RecipientAttestation:NitroTPMPCR17",
|
|
241174
|
+
"kms:RecipientAttestation:NitroTPMPCR18",
|
|
241175
|
+
"kms:RecipientAttestation:NitroTPMPCR19",
|
|
241176
|
+
"kms:RecipientAttestation:NitroTPMPCR20",
|
|
241177
|
+
"kms:RecipientAttestation:NitroTPMPCR21",
|
|
241178
|
+
"kms:RecipientAttestation:NitroTPMPCR22",
|
|
241179
|
+
"kms:RecipientAttestation:NitroTPMPCR23",
|
|
241120
241180
|
"kms:RecipientAttestation:PCR0",
|
|
241121
241181
|
"kms:RecipientAttestation:PCR1",
|
|
241122
241182
|
"kms:RecipientAttestation:PCR2",
|
|
@@ -241247,6 +241307,30 @@
|
|
|
241247
241307
|
"kms:CallerAccount",
|
|
241248
241308
|
"kms:KeyAgreementAlgorithm",
|
|
241249
241309
|
"kms:RecipientAttestation:ImageSha384",
|
|
241310
|
+
"kms:RecipientAttestation:NitroTPMPCR0",
|
|
241311
|
+
"kms:RecipientAttestation:NitroTPMPCR1",
|
|
241312
|
+
"kms:RecipientAttestation:NitroTPMPCR2",
|
|
241313
|
+
"kms:RecipientAttestation:NitroTPMPCR3",
|
|
241314
|
+
"kms:RecipientAttestation:NitroTPMPCR4",
|
|
241315
|
+
"kms:RecipientAttestation:NitroTPMPCR5",
|
|
241316
|
+
"kms:RecipientAttestation:NitroTPMPCR6",
|
|
241317
|
+
"kms:RecipientAttestation:NitroTPMPCR7",
|
|
241318
|
+
"kms:RecipientAttestation:NitroTPMPCR8",
|
|
241319
|
+
"kms:RecipientAttestation:NitroTPMPCR9",
|
|
241320
|
+
"kms:RecipientAttestation:NitroTPMPCR10",
|
|
241321
|
+
"kms:RecipientAttestation:NitroTPMPCR11",
|
|
241322
|
+
"kms:RecipientAttestation:NitroTPMPCR12",
|
|
241323
|
+
"kms:RecipientAttestation:NitroTPMPCR13",
|
|
241324
|
+
"kms:RecipientAttestation:NitroTPMPCR14",
|
|
241325
|
+
"kms:RecipientAttestation:NitroTPMPCR15",
|
|
241326
|
+
"kms:RecipientAttestation:NitroTPMPCR16",
|
|
241327
|
+
"kms:RecipientAttestation:NitroTPMPCR17",
|
|
241328
|
+
"kms:RecipientAttestation:NitroTPMPCR18",
|
|
241329
|
+
"kms:RecipientAttestation:NitroTPMPCR19",
|
|
241330
|
+
"kms:RecipientAttestation:NitroTPMPCR20",
|
|
241331
|
+
"kms:RecipientAttestation:NitroTPMPCR21",
|
|
241332
|
+
"kms:RecipientAttestation:NitroTPMPCR22",
|
|
241333
|
+
"kms:RecipientAttestation:NitroTPMPCR23",
|
|
241250
241334
|
"kms:RecipientAttestation:PCR0",
|
|
241251
241335
|
"kms:RecipientAttestation:PCR1",
|
|
241252
241336
|
"kms:RecipientAttestation:PCR2",
|
|
@@ -241492,6 +241576,30 @@
|
|
|
241492
241576
|
"kms:EncryptionContext:${EncryptionContextKey}",
|
|
241493
241577
|
"kms:EncryptionContextKeys",
|
|
241494
241578
|
"kms:RecipientAttestation:ImageSha384",
|
|
241579
|
+
"kms:RecipientAttestation:NitroTPMPCR0",
|
|
241580
|
+
"kms:RecipientAttestation:NitroTPMPCR1",
|
|
241581
|
+
"kms:RecipientAttestation:NitroTPMPCR2",
|
|
241582
|
+
"kms:RecipientAttestation:NitroTPMPCR3",
|
|
241583
|
+
"kms:RecipientAttestation:NitroTPMPCR4",
|
|
241584
|
+
"kms:RecipientAttestation:NitroTPMPCR5",
|
|
241585
|
+
"kms:RecipientAttestation:NitroTPMPCR6",
|
|
241586
|
+
"kms:RecipientAttestation:NitroTPMPCR7",
|
|
241587
|
+
"kms:RecipientAttestation:NitroTPMPCR8",
|
|
241588
|
+
"kms:RecipientAttestation:NitroTPMPCR9",
|
|
241589
|
+
"kms:RecipientAttestation:NitroTPMPCR10",
|
|
241590
|
+
"kms:RecipientAttestation:NitroTPMPCR11",
|
|
241591
|
+
"kms:RecipientAttestation:NitroTPMPCR12",
|
|
241592
|
+
"kms:RecipientAttestation:NitroTPMPCR13",
|
|
241593
|
+
"kms:RecipientAttestation:NitroTPMPCR14",
|
|
241594
|
+
"kms:RecipientAttestation:NitroTPMPCR15",
|
|
241595
|
+
"kms:RecipientAttestation:NitroTPMPCR16",
|
|
241596
|
+
"kms:RecipientAttestation:NitroTPMPCR17",
|
|
241597
|
+
"kms:RecipientAttestation:NitroTPMPCR18",
|
|
241598
|
+
"kms:RecipientAttestation:NitroTPMPCR19",
|
|
241599
|
+
"kms:RecipientAttestation:NitroTPMPCR20",
|
|
241600
|
+
"kms:RecipientAttestation:NitroTPMPCR21",
|
|
241601
|
+
"kms:RecipientAttestation:NitroTPMPCR22",
|
|
241602
|
+
"kms:RecipientAttestation:NitroTPMPCR23",
|
|
241495
241603
|
"kms:RecipientAttestation:PCR0",
|
|
241496
241604
|
"kms:RecipientAttestation:PCR1",
|
|
241497
241605
|
"kms:RecipientAttestation:PCR2",
|
|
@@ -241554,6 +241662,30 @@
|
|
|
241554
241662
|
"kms:EncryptionContext:${EncryptionContextKey}",
|
|
241555
241663
|
"kms:EncryptionContextKeys",
|
|
241556
241664
|
"kms:RecipientAttestation:ImageSha384",
|
|
241665
|
+
"kms:RecipientAttestation:NitroTPMPCR0",
|
|
241666
|
+
"kms:RecipientAttestation:NitroTPMPCR1",
|
|
241667
|
+
"kms:RecipientAttestation:NitroTPMPCR2",
|
|
241668
|
+
"kms:RecipientAttestation:NitroTPMPCR3",
|
|
241669
|
+
"kms:RecipientAttestation:NitroTPMPCR4",
|
|
241670
|
+
"kms:RecipientAttestation:NitroTPMPCR5",
|
|
241671
|
+
"kms:RecipientAttestation:NitroTPMPCR6",
|
|
241672
|
+
"kms:RecipientAttestation:NitroTPMPCR7",
|
|
241673
|
+
"kms:RecipientAttestation:NitroTPMPCR8",
|
|
241674
|
+
"kms:RecipientAttestation:NitroTPMPCR9",
|
|
241675
|
+
"kms:RecipientAttestation:NitroTPMPCR10",
|
|
241676
|
+
"kms:RecipientAttestation:NitroTPMPCR11",
|
|
241677
|
+
"kms:RecipientAttestation:NitroTPMPCR12",
|
|
241678
|
+
"kms:RecipientAttestation:NitroTPMPCR13",
|
|
241679
|
+
"kms:RecipientAttestation:NitroTPMPCR14",
|
|
241680
|
+
"kms:RecipientAttestation:NitroTPMPCR15",
|
|
241681
|
+
"kms:RecipientAttestation:NitroTPMPCR16",
|
|
241682
|
+
"kms:RecipientAttestation:NitroTPMPCR17",
|
|
241683
|
+
"kms:RecipientAttestation:NitroTPMPCR18",
|
|
241684
|
+
"kms:RecipientAttestation:NitroTPMPCR19",
|
|
241685
|
+
"kms:RecipientAttestation:NitroTPMPCR20",
|
|
241686
|
+
"kms:RecipientAttestation:NitroTPMPCR21",
|
|
241687
|
+
"kms:RecipientAttestation:NitroTPMPCR22",
|
|
241688
|
+
"kms:RecipientAttestation:NitroTPMPCR23",
|
|
241557
241689
|
"kms:RecipientAttestation:PCR0",
|
|
241558
241690
|
"kms:RecipientAttestation:PCR1",
|
|
241559
241691
|
"kms:RecipientAttestation:PCR2",
|
|
@@ -241688,6 +241820,30 @@
|
|
|
241688
241820
|
"required": false,
|
|
241689
241821
|
"conditionKeys": [
|
|
241690
241822
|
"kms:RecipientAttestation:ImageSha384",
|
|
241823
|
+
"kms:RecipientAttestation:NitroTPMPCR0",
|
|
241824
|
+
"kms:RecipientAttestation:NitroTPMPCR1",
|
|
241825
|
+
"kms:RecipientAttestation:NitroTPMPCR2",
|
|
241826
|
+
"kms:RecipientAttestation:NitroTPMPCR3",
|
|
241827
|
+
"kms:RecipientAttestation:NitroTPMPCR4",
|
|
241828
|
+
"kms:RecipientAttestation:NitroTPMPCR5",
|
|
241829
|
+
"kms:RecipientAttestation:NitroTPMPCR6",
|
|
241830
|
+
"kms:RecipientAttestation:NitroTPMPCR7",
|
|
241831
|
+
"kms:RecipientAttestation:NitroTPMPCR8",
|
|
241832
|
+
"kms:RecipientAttestation:NitroTPMPCR9",
|
|
241833
|
+
"kms:RecipientAttestation:NitroTPMPCR10",
|
|
241834
|
+
"kms:RecipientAttestation:NitroTPMPCR11",
|
|
241835
|
+
"kms:RecipientAttestation:NitroTPMPCR12",
|
|
241836
|
+
"kms:RecipientAttestation:NitroTPMPCR13",
|
|
241837
|
+
"kms:RecipientAttestation:NitroTPMPCR14",
|
|
241838
|
+
"kms:RecipientAttestation:NitroTPMPCR15",
|
|
241839
|
+
"kms:RecipientAttestation:NitroTPMPCR16",
|
|
241840
|
+
"kms:RecipientAttestation:NitroTPMPCR17",
|
|
241841
|
+
"kms:RecipientAttestation:NitroTPMPCR18",
|
|
241842
|
+
"kms:RecipientAttestation:NitroTPMPCR19",
|
|
241843
|
+
"kms:RecipientAttestation:NitroTPMPCR20",
|
|
241844
|
+
"kms:RecipientAttestation:NitroTPMPCR21",
|
|
241845
|
+
"kms:RecipientAttestation:NitroTPMPCR22",
|
|
241846
|
+
"kms:RecipientAttestation:NitroTPMPCR23",
|
|
241691
241847
|
"kms:RecipientAttestation:PCR0",
|
|
241692
241848
|
"kms:RecipientAttestation:PCR1",
|
|
241693
241849
|
"kms:RecipientAttestation:PCR2",
|
|
@@ -242634,16 +242790,160 @@
|
|
|
242634
242790
|
"description": "Filters access to the API operations based on the image hash in the attestation document in the request",
|
|
242635
242791
|
"type": "String"
|
|
242636
242792
|
},
|
|
242793
|
+
{
|
|
242794
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR0",
|
|
242795
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242796
|
+
"description": "Filters access by the platform configuration register (PCR) 0 in the attestation document in the request. PCR0 is a contiguous measure of core system firmware executable code",
|
|
242797
|
+
"type": "String"
|
|
242798
|
+
},
|
|
242799
|
+
{
|
|
242800
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR1",
|
|
242801
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242802
|
+
"description": "Filters access by the platform configuration register (PCR) 1 in the attestation document in the request. PCR1 is a contiguous measure of core system firmware data/host platform configuration, typically including serial and model numbers",
|
|
242803
|
+
"type": "String"
|
|
242804
|
+
},
|
|
242805
|
+
{
|
|
242806
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR10",
|
|
242807
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242808
|
+
"description": "Filters access by the platform configuration register (PCR) 10 in the attestation document in the request. PCR10 is a contiguous measure of protection of the IMA measurement log",
|
|
242809
|
+
"type": "String"
|
|
242810
|
+
},
|
|
242811
|
+
{
|
|
242812
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR11",
|
|
242813
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242814
|
+
"description": "Filters access by the platform configuration register (PCR) 11 in the attestation document in the request. PCR11 is a contiguous measure of all components of unified kernel images (UKIs)",
|
|
242815
|
+
"type": "String"
|
|
242816
|
+
},
|
|
242817
|
+
{
|
|
242818
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR12",
|
|
242819
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242820
|
+
"description": "Filters access by the platform configuration register (PCR) 12 in the attestation document in the request. PCR12 is a contiguous measure of kernel command line, system credentials and system configuration images",
|
|
242821
|
+
"type": "String"
|
|
242822
|
+
},
|
|
242823
|
+
{
|
|
242824
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR13",
|
|
242825
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242826
|
+
"description": "Filters access by the platform configuration register (PCR) 13 in the attestation document in the request. PCR13 is a contiguous measure of all system extension images for the initrd",
|
|
242827
|
+
"type": "String"
|
|
242828
|
+
},
|
|
242829
|
+
{
|
|
242830
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR14",
|
|
242831
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242832
|
+
"description": "Filters access by the platform configuration register (PCR) 14 in the attestation document in the request. PCR14 is a contiguous measure of \"MOK\" certificates and hashes",
|
|
242833
|
+
"type": "String"
|
|
242834
|
+
},
|
|
242835
|
+
{
|
|
242836
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR15",
|
|
242837
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242838
|
+
"description": "Filters access by the platform configuration register (PCR) 15 in the attestation document in the request. PCR15 is a contiguous measure of root file system volume encryption key",
|
|
242839
|
+
"type": "String"
|
|
242840
|
+
},
|
|
242841
|
+
{
|
|
242842
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR16",
|
|
242843
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242844
|
+
"description": "Filters access by the platform configuration register (PCR) 16 in the attestation document in the request. PCR16 is a custom PCR that can be defined by the user for specific use cases",
|
|
242845
|
+
"type": "String"
|
|
242846
|
+
},
|
|
242847
|
+
{
|
|
242848
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR17",
|
|
242849
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242850
|
+
"description": "Filters access by the platform configuration register (PCR) 17 in the attestation document in the request. PCR17 is a custom PCR that can be defined by the user for specific use cases",
|
|
242851
|
+
"type": "String"
|
|
242852
|
+
},
|
|
242853
|
+
{
|
|
242854
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR18",
|
|
242855
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242856
|
+
"description": "Filters access by the platform configuration register (PCR) 18 in the attestation document in the request. PCR18 is a custom PCR that can be defined by the user for specific use cases",
|
|
242857
|
+
"type": "String"
|
|
242858
|
+
},
|
|
242859
|
+
{
|
|
242860
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR19",
|
|
242861
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242862
|
+
"description": "Filters access by the platform configuration register (PCR) 19 in the attestation document in the request. PCR19 is a custom PCR that can be defined by the user for specific use cases",
|
|
242863
|
+
"type": "String"
|
|
242864
|
+
},
|
|
242865
|
+
{
|
|
242866
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR2",
|
|
242867
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242868
|
+
"description": "Filters access by the platform configuration register (PCR) 2 in the attestation document in the request. PCR2 is a contiguous measure of extended or pluggable executable code, including option ROMs on pluggable hardware",
|
|
242869
|
+
"type": "String"
|
|
242870
|
+
},
|
|
242871
|
+
{
|
|
242872
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR20",
|
|
242873
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242874
|
+
"description": "Filters access by the platform configuration register (PCR) 20 in the attestation document in the request. PCR20 is a custom PCR that can be defined by the user for specific use cases",
|
|
242875
|
+
"type": "String"
|
|
242876
|
+
},
|
|
242877
|
+
{
|
|
242878
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR21",
|
|
242879
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242880
|
+
"description": "Filters access by the platform configuration register (PCR) 21 in the attestation document in the request. PCR21 is a custom PCR that can be defined by the user for specific use cases",
|
|
242881
|
+
"type": "String"
|
|
242882
|
+
},
|
|
242883
|
+
{
|
|
242884
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR22",
|
|
242885
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242886
|
+
"description": "Filters access by the platform configuration register (PCR) 22 in the attestation document in the request. PCR22 is a custom PCR that can be defined by the user for specific use cases",
|
|
242887
|
+
"type": "String"
|
|
242888
|
+
},
|
|
242889
|
+
{
|
|
242890
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR23",
|
|
242891
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242892
|
+
"description": "Filters access by the platform configuration register (PCR) 23 in the attestation document in the request. PCR23 is a custom PCR that can be defined by the user for specific use cases",
|
|
242893
|
+
"type": "String"
|
|
242894
|
+
},
|
|
242895
|
+
{
|
|
242896
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR3",
|
|
242897
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242898
|
+
"description": "Filters access by the platform configuration register (PCR) 3 in the attestation document in the request. PCR3 is a contiguous measure of extended or pluggable firmware data, including information about pluggable hardware",
|
|
242899
|
+
"type": "String"
|
|
242900
|
+
},
|
|
242901
|
+
{
|
|
242902
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR4",
|
|
242903
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242904
|
+
"description": "Filters access by the platform configuration register (PCR) 4 in the attestation document in the request. PCR4 is a contiguous measure of boot loader and additional drivers, including binaries and extensions loaded by the boot loader",
|
|
242905
|
+
"type": "String"
|
|
242906
|
+
},
|
|
242907
|
+
{
|
|
242908
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR5",
|
|
242909
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242910
|
+
"description": "Filters access by the platform configuration register (PCR) 5 in the attestation document in the request. PCR5 is a contiguous measure of GPT/Partition table",
|
|
242911
|
+
"type": "String"
|
|
242912
|
+
},
|
|
242913
|
+
{
|
|
242914
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR6",
|
|
242915
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242916
|
+
"description": "Filters access by the platform configuration register (PCR) 6 in the attestation document in the request. PCR6 is a custom PCR that can be defined by the user for specific use cases",
|
|
242917
|
+
"type": "String"
|
|
242918
|
+
},
|
|
242919
|
+
{
|
|
242920
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR7",
|
|
242921
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242922
|
+
"description": "Filters access by the platform configuration register (PCR) 7 in the attestation document in the request. PCR7 is a contiguous measure of SecureBoot state",
|
|
242923
|
+
"type": "String"
|
|
242924
|
+
},
|
|
242925
|
+
{
|
|
242926
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR8",
|
|
242927
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242928
|
+
"description": "Filters access by the platform configuration register (PCR) 8 in the attestation document in the request. PCR8 is a contiguous measure of commands and kernel command line",
|
|
242929
|
+
"type": "String"
|
|
242930
|
+
},
|
|
242931
|
+
{
|
|
242932
|
+
"name": "kms:RecipientAttestation:NitroTPMPCR9",
|
|
242933
|
+
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs",
|
|
242934
|
+
"description": "Filters access by the platform configuration register (PCR) 9 in the attestation document in the request. PCR9 is a contiguous measure of all files read (including kernel image)",
|
|
242935
|
+
"type": "String"
|
|
242936
|
+
},
|
|
242637
242937
|
{
|
|
242638
242938
|
"name": "kms:RecipientAttestation:PCR0",
|
|
242639
242939
|
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs",
|
|
242640
|
-
"description": "Filters access by the platform configuration register (PCR) 0 in the attestation document. PCR0 is a contiguous measure of the contents of the enclave image file, without the section data",
|
|
242940
|
+
"description": "Filters access by the platform configuration register (PCR) 0 in the attestation document in the request. PCR0 is a contiguous measure of the contents of the enclave image file, without the section data",
|
|
242641
242941
|
"type": "String"
|
|
242642
242942
|
},
|
|
242643
242943
|
{
|
|
242644
242944
|
"name": "kms:RecipientAttestation:PCR1",
|
|
242645
242945
|
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs",
|
|
242646
|
-
"description": "Filters access by the platform configuration register (PCR) 1 in the attestation document. PCR1 is a contiguous measurement of the Linux kernel and bootstrap data",
|
|
242946
|
+
"description": "Filters access by the platform configuration register (PCR) 1 in the attestation document in the request. PCR1 is a contiguous measurement of the Linux kernel and bootstrap data",
|
|
242647
242947
|
"type": "String"
|
|
242648
242948
|
},
|
|
242649
242949
|
{
|
|
@@ -242709,7 +243009,7 @@
|
|
|
242709
243009
|
{
|
|
242710
243010
|
"name": "kms:RecipientAttestation:PCR2",
|
|
242711
243011
|
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs",
|
|
242712
|
-
"description": "Filters access by the platform configuration register (PCR) 2 in the attestation document. PCR2 is a contiguous, in-order measurement of the user applications, without the boot ramfs",
|
|
243012
|
+
"description": "Filters access by the platform configuration register (PCR) 2 in the attestation document in the request. PCR2 is a contiguous, in-order measurement of the user applications, without the boot ramfs",
|
|
242713
243013
|
"type": "String"
|
|
242714
243014
|
},
|
|
242715
243015
|
{
|
|
@@ -242775,7 +243075,7 @@
|
|
|
242775
243075
|
{
|
|
242776
243076
|
"name": "kms:RecipientAttestation:PCR3",
|
|
242777
243077
|
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs",
|
|
242778
|
-
"description": "Filters access by the platform configuration register (PCR) 3 in the attestation document. PCR3 is a contiguous measurement of the IAM role assigned to the parent instance",
|
|
243078
|
+
"description": "Filters access by the platform configuration register (PCR) 3 in the attestation document in the request. PCR3 is a contiguous measurement of the IAM role assigned to the parent instance",
|
|
242779
243079
|
"type": "String"
|
|
242780
243080
|
},
|
|
242781
243081
|
{
|
|
@@ -242793,7 +243093,7 @@
|
|
|
242793
243093
|
{
|
|
242794
243094
|
"name": "kms:RecipientAttestation:PCR4",
|
|
242795
243095
|
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs",
|
|
242796
|
-
"description": "Filters access by the platform configuration register (PCR) 4 in the attestation document. PCR4 is a contiguous measurement of the ID of the parent instance",
|
|
243096
|
+
"description": "Filters access by the platform configuration register (PCR) 4 in the attestation document in the request. PCR4 is a contiguous measurement of the ID of the parent instance",
|
|
242797
243097
|
"type": "String"
|
|
242798
243098
|
},
|
|
242799
243099
|
{
|
|
@@ -242811,13 +243111,13 @@
|
|
|
242811
243111
|
{
|
|
242812
243112
|
"name": "kms:RecipientAttestation:PCR7",
|
|
242813
243113
|
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs",
|
|
242814
|
-
"description": "Filters access by platform configuration register (PCR) 7 in the attestation document in the request. PCR7 is a custom PCR that can be defined by the user for specific use cases",
|
|
243114
|
+
"description": "Filters access by the platform configuration register (PCR) 7 in the attestation document in the request. PCR7 is a custom PCR that can be defined by the user for specific use cases",
|
|
242815
243115
|
"type": "String"
|
|
242816
243116
|
},
|
|
242817
243117
|
{
|
|
242818
243118
|
"name": "kms:RecipientAttestation:PCR8",
|
|
242819
243119
|
"apiReferenceUrl": "https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs",
|
|
242820
|
-
"description": "Filters access by the platform configuration register (PCR) 8 in the attestation document. PCR8 is a measure of the signing certificate specified for the enclave image file",
|
|
243120
|
+
"description": "Filters access by the platform configuration register (PCR) 8 in the attestation document in the request. PCR8 is a measure of the signing certificate specified for the enclave image file",
|
|
242821
243121
|
"type": "String"
|
|
242822
243122
|
},
|
|
242823
243123
|
{
|
|
@@ -288254,6 +288554,14 @@
|
|
|
288254
288554
|
"required": false,
|
|
288255
288555
|
"conditionKeys": [],
|
|
288256
288556
|
"dependentActions": []
|
|
288557
|
+
},
|
|
288558
|
+
{
|
|
288559
|
+
"resourceType": "",
|
|
288560
|
+
"required": false,
|
|
288561
|
+
"conditionKeys": [
|
|
288562
|
+
"organizations:PolicyType"
|
|
288563
|
+
],
|
|
288564
|
+
"dependentActions": []
|
|
288257
288565
|
}
|
|
288258
288566
|
]
|
|
288259
288567
|
},
|
|
@@ -288413,7 +288721,8 @@
|
|
|
288413
288721
|
"required": false,
|
|
288414
288722
|
"conditionKeys": [
|
|
288415
288723
|
"aws:TagKeys",
|
|
288416
|
-
"aws:RequestTag/${TagKey}"
|
|
288724
|
+
"aws:RequestTag/${TagKey}",
|
|
288725
|
+
"organizations:PolicyType"
|
|
288417
288726
|
],
|
|
288418
288727
|
"dependentActions": []
|
|
288419
288728
|
}
|
|
@@ -288460,7 +288769,8 @@
|
|
|
288460
288769
|
"resourceType": "",
|
|
288461
288770
|
"required": false,
|
|
288462
288771
|
"conditionKeys": [
|
|
288463
|
-
"aws:TagKeys"
|
|
288772
|
+
"aws:TagKeys",
|
|
288773
|
+
"organizations:PolicyType"
|
|
288464
288774
|
],
|
|
288465
288775
|
"dependentActions": []
|
|
288466
288776
|
}
|
|
@@ -10523,7 +10523,7 @@
|
|
|
10523
10523
|
"name": "Amazon Elastic Container Service",
|
|
10524
10524
|
"servicePrefix": "ecs",
|
|
10525
10525
|
"authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerservice.html",
|
|
10526
|
-
"actionsCount":
|
|
10526
|
+
"actionsCount": 63,
|
|
10527
10527
|
"actions": [
|
|
10528
10528
|
"CreateCapacityProvider",
|
|
10529
10529
|
"CreateCluster",
|
|
@@ -10566,6 +10566,7 @@
|
|
|
10566
10566
|
"PutAccountSettingDefault",
|
|
10567
10567
|
"PutAttributes",
|
|
10568
10568
|
"PutClusterCapacityProviders",
|
|
10569
|
+
"PutSystemLogEvents",
|
|
10569
10570
|
"RegisterContainerInstance",
|
|
10570
10571
|
"RegisterTaskDefinition",
|
|
10571
10572
|
"RunTask",
|
|
@@ -16787,7 +16788,7 @@
|
|
|
16787
16788
|
"alias",
|
|
16788
16789
|
"key"
|
|
16789
16790
|
],
|
|
16790
|
-
"conditionKeysCount":
|
|
16791
|
+
"conditionKeysCount": 94,
|
|
16791
16792
|
"conditionKeys": [
|
|
16792
16793
|
"aws:RequestTag/${TagKey}",
|
|
16793
16794
|
"aws:ResourceTag/${TagKey}",
|
|
@@ -16816,6 +16817,30 @@
|
|
|
16816
16817
|
"kms:PrimaryRegion",
|
|
16817
16818
|
"kms:ReEncryptOnSameKey",
|
|
16818
16819
|
"kms:RecipientAttestation:ImageSha384",
|
|
16820
|
+
"kms:RecipientAttestation:NitroTPMPCR0",
|
|
16821
|
+
"kms:RecipientAttestation:NitroTPMPCR1",
|
|
16822
|
+
"kms:RecipientAttestation:NitroTPMPCR10",
|
|
16823
|
+
"kms:RecipientAttestation:NitroTPMPCR11",
|
|
16824
|
+
"kms:RecipientAttestation:NitroTPMPCR12",
|
|
16825
|
+
"kms:RecipientAttestation:NitroTPMPCR13",
|
|
16826
|
+
"kms:RecipientAttestation:NitroTPMPCR14",
|
|
16827
|
+
"kms:RecipientAttestation:NitroTPMPCR15",
|
|
16828
|
+
"kms:RecipientAttestation:NitroTPMPCR16",
|
|
16829
|
+
"kms:RecipientAttestation:NitroTPMPCR17",
|
|
16830
|
+
"kms:RecipientAttestation:NitroTPMPCR18",
|
|
16831
|
+
"kms:RecipientAttestation:NitroTPMPCR19",
|
|
16832
|
+
"kms:RecipientAttestation:NitroTPMPCR2",
|
|
16833
|
+
"kms:RecipientAttestation:NitroTPMPCR20",
|
|
16834
|
+
"kms:RecipientAttestation:NitroTPMPCR21",
|
|
16835
|
+
"kms:RecipientAttestation:NitroTPMPCR22",
|
|
16836
|
+
"kms:RecipientAttestation:NitroTPMPCR23",
|
|
16837
|
+
"kms:RecipientAttestation:NitroTPMPCR3",
|
|
16838
|
+
"kms:RecipientAttestation:NitroTPMPCR4",
|
|
16839
|
+
"kms:RecipientAttestation:NitroTPMPCR5",
|
|
16840
|
+
"kms:RecipientAttestation:NitroTPMPCR6",
|
|
16841
|
+
"kms:RecipientAttestation:NitroTPMPCR7",
|
|
16842
|
+
"kms:RecipientAttestation:NitroTPMPCR8",
|
|
16843
|
+
"kms:RecipientAttestation:NitroTPMPCR9",
|
|
16819
16844
|
"kms:RecipientAttestation:PCR0",
|
|
16820
16845
|
"kms:RecipientAttestation:PCR1",
|
|
16821
16846
|
"kms:RecipientAttestation:PCR10",
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
"Actions by type": [
|
|
3
3
|
{
|
|
4
4
|
"key": "Write Actions",
|
|
5
|
-
"value":
|
|
5
|
+
"value": 10599
|
|
6
6
|
},
|
|
7
7
|
{
|
|
8
8
|
"key": "Read Actions",
|
|
@@ -414,7 +414,7 @@
|
|
|
414
414
|
},
|
|
415
415
|
{
|
|
416
416
|
"key": "Total number of distinct condition keys",
|
|
417
|
-
"value":
|
|
417
|
+
"value": 1256
|
|
418
418
|
}
|
|
419
419
|
]
|
|
420
420
|
}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "aws-iam-data",
|
|
3
|
-
"version": "0.0.
|
|
3
|
+
"version": "0.0.455",
|
|
4
4
|
"description": "Provides AWS IAM data gathered from the official AWS IAM docs as a convenient npm package that can be used in other OSS projects.",
|
|
5
5
|
"main": "./dist/index.js",
|
|
6
6
|
"types": "./dist/index.d.ts",
|