aws-iam-data 0.0.477 → 0.0.478

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -416,7 +416,7 @@
416
416
  "name": "ListRecommendedActions",
417
417
  "apiReferenceUrl": "https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/recommended-actions.html",
418
418
  "permissionOnly": false,
419
- "description": "Grants permission to list recommended actions in the the console",
419
+ "description": "Grants permission to list recommended actions in the AWS Management Console",
420
420
  "accessLevel": "List",
421
421
  "resourceTypes": [
422
422
  {
@@ -16273,6 +16273,21 @@
16273
16273
  }
16274
16274
  ]
16275
16275
  },
16276
+ {
16277
+ "name": "ListImportFileEnrichments",
16278
+ "apiReferenceUrl": "https://docs.aws.amazon.com/mgn/latest/APIReference/API_ListImportFileEnrichments.html",
16279
+ "permissionOnly": false,
16280
+ "description": "Grants permission to list the import file enrichment tasks",
16281
+ "accessLevel": "List",
16282
+ "resourceTypes": [
16283
+ {
16284
+ "resourceType": "",
16285
+ "required": false,
16286
+ "conditionKeys": [],
16287
+ "dependentActions": []
16288
+ }
16289
+ ]
16290
+ },
16276
16291
  {
16277
16292
  "name": "ListImports",
16278
16293
  "apiReferenceUrl": "https://docs.aws.amazon.com/mgn/latest/APIReference/API_ListImports.html",
@@ -16468,6 +16483,21 @@
16468
16483
  }
16469
16484
  ]
16470
16485
  },
16486
+ {
16487
+ "name": "ListNetworkMigrationMappingUpdates",
16488
+ "apiReferenceUrl": "https://docs.aws.amazon.com/mgn/latest/APIReference/API_ListNetworkMigrationMappingUpdates.html",
16489
+ "permissionOnly": false,
16490
+ "description": "Grants permission to list network migration mapping updates",
16491
+ "accessLevel": "List",
16492
+ "resourceTypes": [
16493
+ {
16494
+ "resourceType": "NetworkMigrationDefinitionResource",
16495
+ "required": true,
16496
+ "conditionKeys": [],
16497
+ "dependentActions": []
16498
+ }
16499
+ ]
16500
+ },
16471
16501
  {
16472
16502
  "name": "ListNetworkMigrationMappings",
16473
16503
  "apiReferenceUrl": "https://docs.aws.amazon.com/mgn/latest/APIReference/API_ListNetworkMigrationMappings.html",
@@ -16972,7 +17002,10 @@
16972
17002
  {
16973
17003
  "resourceType": "",
16974
17004
  "required": false,
16975
- "conditionKeys": [],
17005
+ "conditionKeys": [
17006
+ "aws:RequestTag/${TagKey}",
17007
+ "aws:TagKeys"
17008
+ ],
16976
17009
  "dependentActions": [
16977
17010
  "ec2:CreateLaunchTemplateVersion",
16978
17011
  "ec2:DescribeLaunchTemplateVersions",
@@ -16988,6 +17021,25 @@
16988
17021
  }
16989
17022
  ]
16990
17023
  },
17024
+ {
17025
+ "name": "StartImportFileEnrichment",
17026
+ "apiReferenceUrl": "https://docs.aws.amazon.com/mgn/latest/APIReference/API_StartImportFileEnrichment.html",
17027
+ "permissionOnly": false,
17028
+ "description": "Grants permission to start import file enrichment",
17029
+ "accessLevel": "Write",
17030
+ "resourceTypes": [
17031
+ {
17032
+ "resourceType": "",
17033
+ "required": false,
17034
+ "conditionKeys": [],
17035
+ "dependentActions": [
17036
+ "ec2:DescribeSecurityGroups",
17037
+ "ec2:DescribeSubnets",
17038
+ "ec2:DescribeVpcs"
17039
+ ]
17040
+ }
17041
+ ]
17042
+ },
16991
17043
  {
16992
17044
  "name": "StartNetworkMigrationAnalysis",
16993
17045
  "apiReferenceUrl": "https://docs.aws.amazon.com/mgn/latest/APIReference/API_StartNetworkMigrationAnalysis.html",
@@ -17305,6 +17357,21 @@
17305
17357
  }
17306
17358
  ]
17307
17359
  },
17360
+ {
17361
+ "name": "StartNetworkMigrationMappingUpdate",
17362
+ "apiReferenceUrl": "https://docs.aws.amazon.com/mgn/latest/APIReference/API_StartNetworkMigrationMappingUpdate.html",
17363
+ "permissionOnly": false,
17364
+ "description": "Grants permission to start a network migration mapping update",
17365
+ "accessLevel": "Write",
17366
+ "resourceTypes": [
17367
+ {
17368
+ "resourceType": "NetworkMigrationDefinitionResource",
17369
+ "required": true,
17370
+ "conditionKeys": [],
17371
+ "dependentActions": []
17372
+ }
17373
+ ]
17374
+ },
17308
17375
  {
17309
17376
  "name": "StartReplication",
17310
17377
  "apiReferenceUrl": "https://docs.aws.amazon.com/mgn/latest/APIReference/API_StartReplication.html",
@@ -26668,6 +26735,21 @@
26668
26735
  }
26669
26736
  ]
26670
26737
  },
26738
+ {
26739
+ "name": "CreateBackupAccessPoint",
26740
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/backup-instant-access.html",
26741
+ "permissionOnly": true,
26742
+ "description": "Grants permission to create a new access point for backup instant access",
26743
+ "accessLevel": "Write",
26744
+ "resourceTypes": [
26745
+ {
26746
+ "resourceType": "recoveryPoint",
26747
+ "required": true,
26748
+ "conditionKeys": [],
26749
+ "dependentActions": []
26750
+ }
26751
+ ]
26752
+ },
26671
26753
  {
26672
26754
  "name": "CreateBackupPlan",
26673
26755
  "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_CreateBackupPlan.html",
@@ -26679,7 +26761,9 @@
26679
26761
  "resourceType": "backupPlan",
26680
26762
  "required": true,
26681
26763
  "conditionKeys": [],
26682
- "dependentActions": []
26764
+ "dependentActions": [
26765
+ "iam:PassRole"
26766
+ ]
26683
26767
  },
26684
26768
  {
26685
26769
  "resourceType": "",
@@ -26897,6 +26981,45 @@
26897
26981
  }
26898
26982
  ]
26899
26983
  },
26984
+ {
26985
+ "name": "CreateTieringConfiguration",
26986
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_CreateTieringConfiguration.html",
26987
+ "permissionOnly": false,
26988
+ "description": "Grants permission to create a new tiering configuration",
26989
+ "accessLevel": "Write",
26990
+ "resourceTypes": [
26991
+ {
26992
+ "resourceType": "tieringConfiguration",
26993
+ "required": true,
26994
+ "conditionKeys": [],
26995
+ "dependentActions": []
26996
+ },
26997
+ {
26998
+ "resourceType": "",
26999
+ "required": false,
27000
+ "conditionKeys": [
27001
+ "aws:RequestTag/${TagKey}",
27002
+ "aws:TagKeys"
27003
+ ],
27004
+ "dependentActions": []
27005
+ }
27006
+ ]
27007
+ },
27008
+ {
27009
+ "name": "DeleteBackupAccessPoint",
27010
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/backup-instant-access.html",
27011
+ "permissionOnly": true,
27012
+ "description": "Grants permission to delete the access point",
27013
+ "accessLevel": "Write",
27014
+ "resourceTypes": [
27015
+ {
27016
+ "resourceType": "",
27017
+ "required": false,
27018
+ "conditionKeys": [],
27019
+ "dependentActions": []
27020
+ }
27021
+ ]
27022
+ },
26900
27023
  {
26901
27024
  "name": "DeleteBackupPlan",
26902
27025
  "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_DeleteBackupPlan.html",
@@ -27077,6 +27200,36 @@
27077
27200
  }
27078
27201
  ]
27079
27202
  },
27203
+ {
27204
+ "name": "DeleteTieringConfiguration",
27205
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_DeleteTieringConfiguration.html",
27206
+ "permissionOnly": false,
27207
+ "description": "Grants permission to delete a tiering configuration",
27208
+ "accessLevel": "Write",
27209
+ "resourceTypes": [
27210
+ {
27211
+ "resourceType": "tieringConfiguration",
27212
+ "required": true,
27213
+ "conditionKeys": [],
27214
+ "dependentActions": []
27215
+ }
27216
+ ]
27217
+ },
27218
+ {
27219
+ "name": "DescribeBackupAccessPoint",
27220
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/backup-instant-access.html",
27221
+ "permissionOnly": true,
27222
+ "description": "Grants permission to return information about the specified access point",
27223
+ "accessLevel": "Read",
27224
+ "resourceTypes": [
27225
+ {
27226
+ "resourceType": "",
27227
+ "required": false,
27228
+ "conditionKeys": [],
27229
+ "dependentActions": []
27230
+ }
27231
+ ]
27232
+ },
27080
27233
  {
27081
27234
  "name": "DescribeBackupJob",
27082
27235
  "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_DescribeBackupJob.html",
@@ -27242,6 +27395,21 @@
27242
27395
  }
27243
27396
  ]
27244
27397
  },
27398
+ {
27399
+ "name": "DescribeScanJob",
27400
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_DescribeScanJob.html",
27401
+ "permissionOnly": false,
27402
+ "description": "Grants permission to describe a scan job",
27403
+ "accessLevel": "Read",
27404
+ "resourceTypes": [
27405
+ {
27406
+ "resourceType": "",
27407
+ "required": false,
27408
+ "conditionKeys": [],
27409
+ "dependentActions": []
27410
+ }
27411
+ ]
27412
+ },
27245
27413
  {
27246
27414
  "name": "DisassociateBackupVaultMpaApprovalTeam",
27247
27415
  "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_DisassociateBackupVaultMpaApprovalTeam.html",
@@ -27527,6 +27695,21 @@
27527
27695
  }
27528
27696
  ]
27529
27697
  },
27698
+ {
27699
+ "name": "GetTieringConfiguration",
27700
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_GetTieringConfiguration.html",
27701
+ "permissionOnly": false,
27702
+ "description": "Grants permission to describe a tiering configuration",
27703
+ "accessLevel": "Read",
27704
+ "resourceTypes": [
27705
+ {
27706
+ "resourceType": "tieringConfiguration",
27707
+ "required": true,
27708
+ "conditionKeys": [],
27709
+ "dependentActions": []
27710
+ }
27711
+ ]
27712
+ },
27530
27713
  {
27531
27714
  "name": "ListBackupJobSummaries",
27532
27715
  "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_ListBackupJobSummaries.html",
@@ -27917,6 +28100,36 @@
27917
28100
  }
27918
28101
  ]
27919
28102
  },
28103
+ {
28104
+ "name": "ListScanJobSummaries",
28105
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_ListScanJobSummaries.html",
28106
+ "permissionOnly": false,
28107
+ "description": "Grants permission to list scan job summaries",
28108
+ "accessLevel": "List",
28109
+ "resourceTypes": [
28110
+ {
28111
+ "resourceType": "",
28112
+ "required": false,
28113
+ "conditionKeys": [],
28114
+ "dependentActions": []
28115
+ }
28116
+ ]
28117
+ },
28118
+ {
28119
+ "name": "ListScanJobs",
28120
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_ListScanJobs.html",
28121
+ "permissionOnly": false,
28122
+ "description": "Grants permission to list scan jobs",
28123
+ "accessLevel": "List",
28124
+ "resourceTypes": [
28125
+ {
28126
+ "resourceType": "",
28127
+ "required": false,
28128
+ "conditionKeys": [],
28129
+ "dependentActions": []
28130
+ }
28131
+ ]
28132
+ },
27920
28133
  {
27921
28134
  "name": "ListTags",
27922
28135
  "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_ListTags.html",
@@ -27965,6 +28178,27 @@
27965
28178
  "required": false,
27966
28179
  "conditionKeys": [],
27967
28180
  "dependentActions": []
28181
+ },
28182
+ {
28183
+ "resourceType": "tieringConfiguration",
28184
+ "required": false,
28185
+ "conditionKeys": [],
28186
+ "dependentActions": []
28187
+ }
28188
+ ]
28189
+ },
28190
+ {
28191
+ "name": "ListTieringConfigurations",
28192
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_ListTieringConfigurations.html",
28193
+ "permissionOnly": false,
28194
+ "description": "Grants permission to list tiering configurations",
28195
+ "accessLevel": "List",
28196
+ "resourceTypes": [
28197
+ {
28198
+ "resourceType": "",
28199
+ "required": false,
28200
+ "conditionKeys": [],
28201
+ "dependentActions": []
27968
28202
  }
27969
28203
  ]
27970
28204
  },
@@ -28149,6 +28383,23 @@
28149
28383
  }
28150
28384
  ]
28151
28385
  },
28386
+ {
28387
+ "name": "StartScanJob",
28388
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_StartScanJob.html",
28389
+ "permissionOnly": false,
28390
+ "description": "Grants permission to start a new scan job",
28391
+ "accessLevel": "Write",
28392
+ "resourceTypes": [
28393
+ {
28394
+ "resourceType": "recoveryPoint",
28395
+ "required": true,
28396
+ "conditionKeys": [],
28397
+ "dependentActions": [
28398
+ "iam:PassRole"
28399
+ ]
28400
+ }
28401
+ ]
28402
+ },
28152
28403
  {
28153
28404
  "name": "StopBackupJob",
28154
28405
  "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_StopBackupJob.html",
@@ -28213,6 +28464,12 @@
28213
28464
  "conditionKeys": [],
28214
28465
  "dependentActions": []
28215
28466
  },
28467
+ {
28468
+ "resourceType": "tieringConfiguration",
28469
+ "required": false,
28470
+ "conditionKeys": [],
28471
+ "dependentActions": []
28472
+ },
28216
28473
  {
28217
28474
  "resourceType": "",
28218
28475
  "required": false,
@@ -28273,6 +28530,12 @@
28273
28530
  "conditionKeys": [],
28274
28531
  "dependentActions": []
28275
28532
  },
28533
+ {
28534
+ "resourceType": "tieringConfiguration",
28535
+ "required": false,
28536
+ "conditionKeys": [],
28537
+ "dependentActions": []
28538
+ },
28276
28539
  {
28277
28540
  "resourceType": "",
28278
28541
  "required": false,
@@ -28294,7 +28557,9 @@
28294
28557
  "resourceType": "backupPlan",
28295
28558
  "required": true,
28296
28559
  "conditionKeys": [],
28297
- "dependentActions": []
28560
+ "dependentActions": [
28561
+ "iam:PassRole"
28562
+ ]
28298
28563
  }
28299
28564
  ]
28300
28565
  },
@@ -28435,6 +28700,21 @@
28435
28700
  ]
28436
28701
  }
28437
28702
  ]
28703
+ },
28704
+ {
28705
+ "name": "UpdateTieringConfiguration",
28706
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_UpdateTieringConfiguration.html",
28707
+ "permissionOnly": false,
28708
+ "description": "Grants permission to update a tiering configuration",
28709
+ "accessLevel": "Write",
28710
+ "resourceTypes": [
28711
+ {
28712
+ "resourceType": "tieringConfiguration",
28713
+ "required": true,
28714
+ "conditionKeys": [],
28715
+ "dependentActions": []
28716
+ }
28717
+ ]
28438
28718
  }
28439
28719
  ],
28440
28720
  "resourceTypes": [
@@ -28493,6 +28773,14 @@
28493
28773
  "conditionKeys": [
28494
28774
  "aws:ResourceTag/${TagKey}"
28495
28775
  ]
28776
+ },
28777
+ {
28778
+ "name": "tieringConfiguration",
28779
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/tiering-configuration.html",
28780
+ "arnPattern": "arn:${Partition}:backup:${Region}:${Account}:tiering-configuration:${TieringConfigurationName}-${TieringConfigurationId}",
28781
+ "conditionKeys": [
28782
+ "aws:ResourceTag/${TagKey}"
28783
+ ]
28496
28784
  }
28497
28785
  ],
28498
28786
  "conditionKeys": [
@@ -33060,6 +33348,33 @@
33060
33348
  }
33061
33349
  ]
33062
33350
  },
33351
+ {
33352
+ "name": "InvokeDataAutomation",
33353
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation-runtime_InvokeDataAutomation.html",
33354
+ "permissionOnly": false,
33355
+ "description": "Grants permission to invoke a call to Sync API of Bedrock data automation ",
33356
+ "accessLevel": "Write",
33357
+ "resourceTypes": [
33358
+ {
33359
+ "resourceType": "blueprint",
33360
+ "required": true,
33361
+ "conditionKeys": [],
33362
+ "dependentActions": []
33363
+ },
33364
+ {
33365
+ "resourceType": "data-automation-profile",
33366
+ "required": true,
33367
+ "conditionKeys": [],
33368
+ "dependentActions": []
33369
+ },
33370
+ {
33371
+ "resourceType": "data-automation-project",
33372
+ "required": true,
33373
+ "conditionKeys": [],
33374
+ "dependentActions": []
33375
+ }
33376
+ ]
33377
+ },
33063
33378
  {
33064
33379
  "name": "InvokeDataAutomationAsync",
33065
33380
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation-runtime_InvokeDataAutomationAsync.html",
@@ -33204,7 +33519,8 @@
33204
33519
  "aws:RequestTag/${TagKey}",
33205
33520
  "aws:TagKeys",
33206
33521
  "bedrock:GuardrailIdentifier",
33207
- "bedrock:BearerTokenType"
33522
+ "bedrock:BearerTokenType",
33523
+ "bedrock:ServiceTier"
33208
33524
  ],
33209
33525
  "dependentActions": []
33210
33526
  }
@@ -33278,7 +33594,8 @@
33278
33594
  "bedrock:InferenceProfileArn",
33279
33595
  "bedrock:PromptRouterArn",
33280
33596
  "bedrock:GuardrailIdentifier",
33281
- "bedrock:BearerTokenType"
33597
+ "bedrock:BearerTokenType",
33598
+ "bedrock:ServiceTier"
33282
33599
  ],
33283
33600
  "dependentActions": []
33284
33601
  }
@@ -35498,6 +35815,12 @@
35498
35815
  "description": "Filters access by the specified prompt router",
35499
35816
  "type": "ARN"
35500
35817
  },
35818
+ {
35819
+ "name": "bedrock:ServiceTier",
35820
+ "apiReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html#amazonbedrock-policy-keys",
35821
+ "description": "Filters access by the specified ServiceTier",
35822
+ "type": "String"
35823
+ },
35501
35824
  {
35502
35825
  "name": "bedrock:ThirdPartyKnowledgeBaseCredentialsSecretArn",
35503
35826
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available",
@@ -35844,7 +36167,8 @@
35844
36167
  "required": false,
35845
36168
  "conditionKeys": [
35846
36169
  "aws:RequestTag/${TagKey}",
35847
- "aws:TagKeys"
36170
+ "aws:TagKeys",
36171
+ "bedrock-agentcore:KmsKeyArn"
35848
36172
  ],
35849
36173
  "dependentActions": [
35850
36174
  "iam:PassRole"
@@ -37678,6 +38002,12 @@
37678
38002
  "description": "Filters access by the subject claim (sub) in the JWT passed in the request",
37679
38003
  "type": "String"
37680
38004
  },
38005
+ {
38006
+ "name": "bedrock-agentcore:KmsKeyArn",
38007
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-kmsKeyArn",
38008
+ "description": "Filters access by KMS Key arn provided",
38009
+ "type": "String"
38010
+ },
37681
38011
  {
37682
38012
  "name": "bedrock-agentcore:actorId",
37683
38013
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-actorId",
@@ -40275,6 +40605,44 @@
40275
40605
  }
40276
40606
  ]
40277
40607
  },
40608
+ {
40609
+ "name": "CreateSpendingLimit",
40610
+ "apiReferenceUrl": "https://docs.aws.amazon.com/braket/latest/APIReference/API_CreateSpendingLimit.html",
40611
+ "permissionOnly": false,
40612
+ "description": "Grants permission to create a spending limit",
40613
+ "accessLevel": "Write",
40614
+ "resourceTypes": [
40615
+ {
40616
+ "resourceType": "",
40617
+ "required": false,
40618
+ "conditionKeys": [
40619
+ "aws:RequestTag/${TagKey}",
40620
+ "aws:ResourceTag/${TagKey}",
40621
+ "aws:TagKeys"
40622
+ ],
40623
+ "dependentActions": []
40624
+ }
40625
+ ]
40626
+ },
40627
+ {
40628
+ "name": "DeleteSpendingLimit",
40629
+ "apiReferenceUrl": "https://docs.aws.amazon.com/braket/latest/APIReference/API_DeleteSpendingLimit.html",
40630
+ "permissionOnly": false,
40631
+ "description": "Grants permission to delete a spending limit",
40632
+ "accessLevel": "Write",
40633
+ "resourceTypes": [
40634
+ {
40635
+ "resourceType": "",
40636
+ "required": false,
40637
+ "conditionKeys": [
40638
+ "aws:RequestTag/${TagKey}",
40639
+ "aws:ResourceTag/${TagKey}",
40640
+ "aws:TagKeys"
40641
+ ],
40642
+ "dependentActions": []
40643
+ }
40644
+ ]
40645
+ },
40278
40646
  {
40279
40647
  "name": "GetDevice",
40280
40648
  "apiReferenceUrl": "https://docs.aws.amazon.com/braket/latest/APIReference/API_GetDevice.html",
@@ -40368,6 +40736,12 @@
40368
40736
  "required": false,
40369
40737
  "conditionKeys": [],
40370
40738
  "dependentActions": []
40739
+ },
40740
+ {
40741
+ "resourceType": "spending-limit",
40742
+ "required": false,
40743
+ "conditionKeys": [],
40744
+ "dependentActions": []
40371
40745
  }
40372
40746
  ]
40373
40747
  },
@@ -40416,6 +40790,21 @@
40416
40790
  }
40417
40791
  ]
40418
40792
  },
40793
+ {
40794
+ "name": "SearchSpendingLimits",
40795
+ "apiReferenceUrl": "https://docs.aws.amazon.com/braket/latest/APIReference/API_SearchSpendingLimits.html",
40796
+ "permissionOnly": false,
40797
+ "description": "Grants permission to search for spending limit",
40798
+ "accessLevel": "Read",
40799
+ "resourceTypes": [
40800
+ {
40801
+ "resourceType": "",
40802
+ "required": false,
40803
+ "conditionKeys": [],
40804
+ "dependentActions": []
40805
+ }
40806
+ ]
40807
+ },
40419
40808
  {
40420
40809
  "name": "TagResource",
40421
40810
  "apiReferenceUrl": "https://docs.aws.amazon.com/braket/latest/APIReference/API_TagResource.html",
@@ -40435,6 +40824,12 @@
40435
40824
  "conditionKeys": [],
40436
40825
  "dependentActions": []
40437
40826
  },
40827
+ {
40828
+ "resourceType": "spending-limit",
40829
+ "required": false,
40830
+ "conditionKeys": [],
40831
+ "dependentActions": []
40832
+ },
40438
40833
  {
40439
40834
  "resourceType": "",
40440
40835
  "required": false,
@@ -40465,6 +40860,12 @@
40465
40860
  "conditionKeys": [],
40466
40861
  "dependentActions": []
40467
40862
  },
40863
+ {
40864
+ "resourceType": "spending-limit",
40865
+ "required": false,
40866
+ "conditionKeys": [],
40867
+ "dependentActions": []
40868
+ },
40468
40869
  {
40469
40870
  "resourceType": "",
40470
40871
  "required": false,
@@ -40474,6 +40875,25 @@
40474
40875
  "dependentActions": []
40475
40876
  }
40476
40877
  ]
40878
+ },
40879
+ {
40880
+ "name": "UpdateSpendingLimit",
40881
+ "apiReferenceUrl": "https://docs.aws.amazon.com/braket/latest/APIReference/API_UpdateSpendingLimit.html",
40882
+ "permissionOnly": false,
40883
+ "description": "Grants permission to update a spending limit",
40884
+ "accessLevel": "Write",
40885
+ "resourceTypes": [
40886
+ {
40887
+ "resourceType": "",
40888
+ "required": false,
40889
+ "conditionKeys": [
40890
+ "aws:RequestTag/${TagKey}",
40891
+ "aws:ResourceTag/${TagKey}",
40892
+ "aws:TagKeys"
40893
+ ],
40894
+ "dependentActions": []
40895
+ }
40896
+ ]
40477
40897
  }
40478
40898
  ],
40479
40899
  "resourceTypes": [
@@ -40492,6 +40912,14 @@
40492
40912
  "conditionKeys": [
40493
40913
  "aws:ResourceTag/${TagKey}"
40494
40914
  ]
40915
+ },
40916
+ {
40917
+ "name": "spending-limit",
40918
+ "apiReferenceUrl": "https://docs.aws.amazon.com/braket/latest/developerguide/braket-manage-access.html#resources",
40919
+ "arnPattern": "arn:${Partition}:braket:${Region}:${Account}:spending-limit/${RandomId}",
40920
+ "conditionKeys": [
40921
+ "aws:ResourceTag/${TagKey}"
40922
+ ]
40495
40923
  }
40496
40924
  ],
40497
40925
  "conditionKeys": [
@@ -54752,6 +55180,27 @@
54752
55180
  }
54753
55181
  ]
54754
55182
  },
55183
+ {
55184
+ "name": "DescribeEvents",
55185
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeEvents.html",
55186
+ "permissionOnly": false,
55187
+ "description": "Grants permission to return all related events for a specified operation",
55188
+ "accessLevel": "Read",
55189
+ "resourceTypes": [
55190
+ {
55191
+ "resourceType": "changeset",
55192
+ "required": false,
55193
+ "conditionKeys": [],
55194
+ "dependentActions": []
55195
+ },
55196
+ {
55197
+ "resourceType": "stack",
55198
+ "required": false,
55199
+ "conditionKeys": [],
55200
+ "dependentActions": []
55201
+ }
55202
+ ]
55203
+ },
54755
55204
  {
54756
55205
  "name": "DescribeGeneratedTemplate",
54757
55206
  "apiReferenceUrl": "https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeGeneratedTemplate.html",
@@ -59775,7 +60224,7 @@
59775
60224
  "name": "CreateSession",
59776
60225
  "apiReferenceUrl": "https://docs.aws.amazon.com/cloudshell/latest/userguide/sec-auth-with-identities.html#CreateSession",
59777
60226
  "permissionOnly": true,
59778
- "description": "Grants permissions to connect to a CloudShell environment from the the console",
60227
+ "description": "Grants permissions to connect to a CloudShell environment from the AWS Management Console",
59779
60228
  "accessLevel": "Write",
59780
60229
  "resourceTypes": [
59781
60230
  {
@@ -60394,12 +60843,18 @@
60394
60843
  "name": "GetEventConfiguration",
60395
60844
  "apiReferenceUrl": "https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_GetEventConfiguration.html",
60396
60845
  "permissionOnly": false,
60397
- "description": "Grants permission to list event configurations that are configured for an event data store",
60846
+ "description": "Grants permission to list event configurations that are configured for a trail or an event data store",
60398
60847
  "accessLevel": "Read",
60399
60848
  "resourceTypes": [
60400
60849
  {
60401
60850
  "resourceType": "eventdatastore",
60402
- "required": true,
60851
+ "required": false,
60852
+ "conditionKeys": [],
60853
+ "dependentActions": []
60854
+ },
60855
+ {
60856
+ "resourceType": "trail",
60857
+ "required": false,
60403
60858
  "conditionKeys": [],
60404
60859
  "dependentActions": []
60405
60860
  }
@@ -60654,6 +61109,21 @@
60654
61109
  }
60655
61110
  ]
60656
61111
  },
61112
+ {
61113
+ "name": "ListInsightsData",
61114
+ "apiReferenceUrl": "https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_ListInsightsData.html",
61115
+ "permissionOnly": false,
61116
+ "description": "Grants permission to retrieve data captured by CloudTrail Insights",
61117
+ "accessLevel": "List",
61118
+ "resourceTypes": [
61119
+ {
61120
+ "resourceType": "trail",
61121
+ "required": true,
61122
+ "conditionKeys": [],
61123
+ "dependentActions": []
61124
+ }
61125
+ ]
61126
+ },
60657
61127
  {
60658
61128
  "name": "ListPublicKeys",
60659
61129
  "apiReferenceUrl": "https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_ListPublicKeys.html",
@@ -60766,17 +61236,23 @@
60766
61236
  "name": "PutEventConfiguration",
60767
61237
  "apiReferenceUrl": "https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_PutEventConfiguration.html",
60768
61238
  "permissionOnly": false,
60769
- "description": "Grants permission to create and update event configurations for an event data store",
61239
+ "description": "Grants permission to create and update event configurations for a trail or an event data store",
60770
61240
  "accessLevel": "Write",
60771
61241
  "resourceTypes": [
60772
61242
  {
60773
61243
  "resourceType": "eventdatastore",
60774
- "required": true,
61244
+ "required": false,
60775
61245
  "conditionKeys": [],
60776
61246
  "dependentActions": [
60777
61247
  "iam:CreateServiceLinkedRole",
60778
61248
  "iam:GetRole"
60779
61249
  ]
61250
+ },
61251
+ {
61252
+ "resourceType": "trail",
61253
+ "required": false,
61254
+ "conditionKeys": [],
61255
+ "dependentActions": []
60780
61256
  }
60781
61257
  ]
60782
61258
  },
@@ -62982,6 +63458,21 @@
62982
63458
  }
62983
63459
  ]
62984
63460
  },
63461
+ {
63462
+ "name": "ListEntityEvents",
63463
+ "apiReferenceUrl": "https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListEntityEvents.html",
63464
+ "permissionOnly": false,
63465
+ "description": "Grants permission to list events for an entity",
63466
+ "accessLevel": "List",
63467
+ "resourceTypes": [
63468
+ {
63469
+ "resourceType": "",
63470
+ "required": false,
63471
+ "conditionKeys": [],
63472
+ "dependentActions": []
63473
+ }
63474
+ ]
63475
+ },
62985
63476
  {
62986
63477
  "name": "ListGroupingAttributeDefinitions",
62987
63478
  "apiReferenceUrl": "https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListGroupingAttributeDefinitions.html",
@@ -64477,6 +64968,30 @@
64477
64968
  }
64478
64969
  ]
64479
64970
  },
64971
+ {
64972
+ "name": "CreateScheduledQuery",
64973
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_CreateScheduledQuery.html",
64974
+ "permissionOnly": false,
64975
+ "description": "Grants permission to create a scheduled query",
64976
+ "accessLevel": "Write",
64977
+ "resourceTypes": [
64978
+ {
64979
+ "resourceType": "scheduled-query",
64980
+ "required": true,
64981
+ "conditionKeys": [],
64982
+ "dependentActions": []
64983
+ },
64984
+ {
64985
+ "resourceType": "",
64986
+ "required": false,
64987
+ "conditionKeys": [
64988
+ "aws:TagKeys",
64989
+ "aws:RequestTag/${TagKey}"
64990
+ ],
64991
+ "dependentActions": []
64992
+ }
64993
+ ]
64994
+ },
64480
64995
  {
64481
64996
  "name": "DeleteAccountPolicy",
64482
64997
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DeleteAccountPolicy.html",
@@ -64732,6 +65247,21 @@
64732
65247
  }
64733
65248
  ]
64734
65249
  },
65250
+ {
65251
+ "name": "DeleteScheduledQuery",
65252
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DeleteScheduledQuery.html",
65253
+ "permissionOnly": false,
65254
+ "description": "Grants permission to delete a scheduled query",
65255
+ "accessLevel": "Write",
65256
+ "resourceTypes": [
65257
+ {
65258
+ "resourceType": "scheduled-query",
65259
+ "required": true,
65260
+ "conditionKeys": [],
65261
+ "dependentActions": []
65262
+ }
65263
+ ]
65264
+ },
64735
65265
  {
64736
65266
  "name": "DeleteSubscriptionFilter",
64737
65267
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DeleteSubscriptionFilter.html",
@@ -65212,6 +65742,36 @@
65212
65742
  }
65213
65743
  ]
65214
65744
  },
65745
+ {
65746
+ "name": "GetScheduledQuery",
65747
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_GetScheduledQuery.html",
65748
+ "permissionOnly": false,
65749
+ "description": "Grants permission to retrieve information about a specified scheduled query",
65750
+ "accessLevel": "Read",
65751
+ "resourceTypes": [
65752
+ {
65753
+ "resourceType": "scheduled-query",
65754
+ "required": true,
65755
+ "conditionKeys": [],
65756
+ "dependentActions": []
65757
+ }
65758
+ ]
65759
+ },
65760
+ {
65761
+ "name": "GetScheduledQueryHistory",
65762
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_GetScheduledQueryHistory.html",
65763
+ "permissionOnly": false,
65764
+ "description": "Grants permission to return the execution history for a specified scheduled query",
65765
+ "accessLevel": "Read",
65766
+ "resourceTypes": [
65767
+ {
65768
+ "resourceType": "scheduled-query",
65769
+ "required": true,
65770
+ "conditionKeys": [],
65771
+ "dependentActions": []
65772
+ }
65773
+ ]
65774
+ },
65215
65775
  {
65216
65776
  "name": "GetTransformer",
65217
65777
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_GetTransformer.html",
@@ -65362,6 +65922,21 @@
65362
65922
  }
65363
65923
  ]
65364
65924
  },
65925
+ {
65926
+ "name": "ListScheduledQueries",
65927
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_ListScheduledQueries.html",
65928
+ "permissionOnly": false,
65929
+ "description": "Grants permission to return all scheduled queries that are associated with the AWS account making the request",
65930
+ "accessLevel": "List",
65931
+ "resourceTypes": [
65932
+ {
65933
+ "resourceType": "",
65934
+ "required": false,
65935
+ "conditionKeys": [],
65936
+ "dependentActions": []
65937
+ }
65938
+ ]
65939
+ },
65365
65940
  {
65366
65941
  "name": "ListTagsForResource",
65367
65942
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_ListTagsForResource.html",
@@ -65828,6 +66403,12 @@
65828
66403
  "conditionKeys": [],
65829
66404
  "dependentActions": []
65830
66405
  },
66406
+ {
66407
+ "resourceType": "scheduled-query",
66408
+ "required": false,
66409
+ "conditionKeys": [],
66410
+ "dependentActions": []
66411
+ },
65831
66412
  {
65832
66413
  "resourceType": "",
65833
66414
  "required": false,
@@ -65950,6 +66531,12 @@
65950
66531
  "conditionKeys": [],
65951
66532
  "dependentActions": []
65952
66533
  },
66534
+ {
66535
+ "resourceType": "scheduled-query",
66536
+ "required": false,
66537
+ "conditionKeys": [],
66538
+ "dependentActions": []
66539
+ },
65953
66540
  {
65954
66541
  "resourceType": "",
65955
66542
  "required": false,
@@ -66040,6 +66627,21 @@
66040
66627
  "dependentActions": []
66041
66628
  }
66042
66629
  ]
66630
+ },
66631
+ {
66632
+ "name": "UpdateScheduledQuery",
66633
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_UpdateScheduledQuery.html",
66634
+ "permissionOnly": false,
66635
+ "description": "Grants permission to update a scheduled query",
66636
+ "accessLevel": "Write",
66637
+ "resourceTypes": [
66638
+ {
66639
+ "resourceType": "scheduled-query",
66640
+ "required": true,
66641
+ "conditionKeys": [],
66642
+ "dependentActions": []
66643
+ }
66644
+ ]
66043
66645
  }
66044
66646
  ],
66045
66647
  "resourceTypes": [
@@ -66098,6 +66700,14 @@
66098
66700
  "conditionKeys": [
66099
66701
  "aws:ResourceTag/${TagKey}"
66100
66702
  ]
66703
+ },
66704
+ {
66705
+ "name": "scheduled-query",
66706
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_ScheduledQuery.html",
66707
+ "arnPattern": "arn:${Partition}:logs:${Region}:${Account}:scheduled-query:${ScheduledQueryId}",
66708
+ "conditionKeys": [
66709
+ "aws:ResourceTag/${TagKey}"
66710
+ ]
66101
66711
  }
66102
66712
  ],
66103
66713
  "conditionKeys": [
@@ -99617,7 +100227,7 @@
99617
100227
  "conditionKeys": []
99618
100228
  },
99619
100229
  {
99620
- "name": "the console Mobile App",
100230
+ "name": "AWS Management Console Mobile App",
99621
100231
  "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsconsolemobileapp.html",
99622
100232
  "servicePrefix": "consoleapp",
99623
100233
  "actions": [
@@ -102369,6 +102979,21 @@
102369
102979
  }
102370
102980
  ]
102371
102981
  },
102982
+ {
102983
+ "name": "ListEfficiencyMetrics",
102984
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_CostOptimizationHub_ListEfficiencyMetrics.html",
102985
+ "permissionOnly": false,
102986
+ "description": "Grants permission to list efficiency metric scores by group",
102987
+ "accessLevel": "List",
102988
+ "resourceTypes": [
102989
+ {
102990
+ "resourceType": "",
102991
+ "required": false,
102992
+ "conditionKeys": [],
102993
+ "dependentActions": []
102994
+ }
102995
+ ]
102996
+ },
102372
102997
  {
102373
102998
  "name": "ListEnrollmentStatuses",
102374
102999
  "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_CostOptimizationHub_ListEnrollmentStatuses.html",
@@ -104453,6 +105078,28 @@
104453
105078
  }
104454
105079
  ]
104455
105080
  },
105081
+ {
105082
+ "name": "CreateOutboundIntegration",
105083
+ "apiReferenceUrl": "https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html",
105084
+ "permissionOnly": true,
105085
+ "description": "Grants permission to DMS to create resources for zero-ETL integrations with self managed databases",
105086
+ "accessLevel": "Write",
105087
+ "resourceTypes": [
105088
+ {
105089
+ "resourceType": "",
105090
+ "required": false,
105091
+ "conditionKeys": [
105092
+ "aws:ResourceTag/${TagKey}",
105093
+ "aws:RequestTag/${TagKey}",
105094
+ "aws:TagKeys",
105095
+ "dms:req-tag/${TagKey}"
105096
+ ],
105097
+ "dependentActions": [
105098
+ "iam:PassRole"
105099
+ ]
105100
+ }
105101
+ ]
105102
+ },
104456
105103
  {
104457
105104
  "name": "CreateReplicationConfig",
104458
105105
  "apiReferenceUrl": "https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html",
@@ -105759,6 +106406,23 @@
105759
106406
  }
105760
106407
  ]
105761
106408
  },
106409
+ {
106410
+ "name": "ModifyOutboundIntegration",
106411
+ "apiReferenceUrl": "https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html",
106412
+ "permissionOnly": true,
106413
+ "description": "Grants permission to DMS to modify resources for zero-ETL integrations with self managed databases",
106414
+ "accessLevel": "Write",
106415
+ "resourceTypes": [
106416
+ {
106417
+ "resourceType": "",
106418
+ "required": false,
106419
+ "conditionKeys": [],
106420
+ "dependentActions": [
106421
+ "iam:PassRole"
106422
+ ]
106423
+ }
106424
+ ]
106425
+ },
105762
106426
  {
105763
106427
  "name": "ModifyReplicationConfig",
105764
106428
  "apiReferenceUrl": "https://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html",
@@ -120745,7 +121409,7 @@
120745
121409
  "name": "DisableRoleAccess",
120746
121410
  "apiReferenceUrl": "https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html",
120747
121411
  "permissionOnly": true,
120748
- "description": "Grants permission to disable the console access for identity in your AWS Directory",
121412
+ "description": "Grants permission to disable AWS Management Console access for identity in your AWS Directory",
120749
121413
  "accessLevel": "Write",
120750
121414
  "resourceTypes": [
120751
121415
  {
@@ -120853,7 +121517,7 @@
120853
121517
  "name": "EnableRoleAccess",
120854
121518
  "apiReferenceUrl": "https://docs.aws.amazon.com/directoryservice/latest/admin-guide/UsingWithDS_IAM_ResourcePermissions.html",
120855
121519
  "permissionOnly": true,
120856
- "description": "Grants permission to enable the console access for identity in your AWS Directory",
121520
+ "description": "Grants permission to enable AWS Management Console access for identity in your AWS Directory",
120857
121521
  "accessLevel": "Write",
120858
121522
  "resourceTypes": [
120859
121523
  {
@@ -151155,6 +151819,21 @@
151155
151819
  }
151156
151820
  ]
151157
151821
  },
151822
+ {
151823
+ "name": "DescribeAccountSettings",
151824
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AutoScaling/latest/APIReference/API_DescribeAccountSettings.html",
151825
+ "permissionOnly": false,
151826
+ "description": "Grants permission to describe the current Amazon EC2 Auto Scaling account settings for your account",
151827
+ "accessLevel": "List",
151828
+ "resourceTypes": [
151829
+ {
151830
+ "resourceType": "",
151831
+ "required": false,
151832
+ "conditionKeys": [],
151833
+ "dependentActions": []
151834
+ }
151835
+ ]
151836
+ },
151158
151837
  {
151159
151838
  "name": "DescribeAdjustmentTypes",
151160
151839
  "apiReferenceUrl": "https://docs.aws.amazon.com/AutoScaling/latest/APIReference/API_DescribeAdjustmentTypes.html",
@@ -151674,6 +152353,21 @@
151674
152353
  }
151675
152354
  ]
151676
152355
  },
152356
+ {
152357
+ "name": "PutAccountSetting",
152358
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AutoScaling/latest/APIReference/API_PutAccountSetting.html",
152359
+ "permissionOnly": false,
152360
+ "description": "Grants permission to modify an account setting for your account",
152361
+ "accessLevel": "Write",
152362
+ "resourceTypes": [
152363
+ {
152364
+ "resourceType": "",
152365
+ "required": false,
152366
+ "conditionKeys": [],
152367
+ "dependentActions": []
152368
+ }
152369
+ ]
152370
+ },
151677
152371
  {
151678
152372
  "name": "PutLifecycleHook",
151679
152373
  "apiReferenceUrl": "https://docs.aws.amazon.com/AutoScaling/latest/APIReference/API_PutLifecycleHook.html",
@@ -152597,6 +153291,37 @@
152597
153291
  }
152598
153292
  ]
152599
153293
  },
153294
+ {
153295
+ "name": "DistributeImage",
153296
+ "apiReferenceUrl": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_DistributeImage.html",
153297
+ "permissionOnly": false,
153298
+ "description": "Grants permission to distribute an image",
153299
+ "accessLevel": "Write",
153300
+ "resourceTypes": [
153301
+ {
153302
+ "resourceType": "image",
153303
+ "required": true,
153304
+ "conditionKeys": [],
153305
+ "dependentActions": [
153306
+ "ec2:DescribeImages",
153307
+ "iam:PassRole",
153308
+ "imagebuilder:GetDistributionConfiguration",
153309
+ "imagebuilder:GetImage",
153310
+ "imagebuilder:TagResource",
153311
+ "ssm:GetParameter"
153312
+ ]
153313
+ },
153314
+ {
153315
+ "resourceType": "",
153316
+ "required": false,
153317
+ "conditionKeys": [
153318
+ "aws:RequestTag/${TagKey}",
153319
+ "aws:TagKeys"
153320
+ ],
153321
+ "dependentActions": []
153322
+ }
153323
+ ]
153324
+ },
152600
153325
  {
152601
153326
  "name": "GetComponent",
152602
153327
  "apiReferenceUrl": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_GetComponent.html",
@@ -153410,6 +154135,21 @@
153410
154135
  }
153411
154136
  ]
153412
154137
  },
154138
+ {
154139
+ "name": "RetryImage",
154140
+ "apiReferenceUrl": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_RetryImage.html",
154141
+ "permissionOnly": false,
154142
+ "description": "Grants permission to retry an image creation",
154143
+ "accessLevel": "Write",
154144
+ "resourceTypes": [
154145
+ {
154146
+ "resourceType": "image",
154147
+ "required": true,
154148
+ "conditionKeys": [],
154149
+ "dependentActions": []
154150
+ }
154151
+ ]
154152
+ },
153413
154153
  {
153414
154154
  "name": "SendWorkflowStepAction",
153415
154155
  "apiReferenceUrl": "https://docs.aws.amazon.com/imagebuilder/latest/APIReference/API_SendWorkflowStepAction.html",
@@ -156882,6 +157622,42 @@
156882
157622
  }
156883
157623
  ]
156884
157624
  },
157625
+ {
157626
+ "name": "CreateExpressGatewayService",
157627
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_CreateExpressGatewayService.html",
157628
+ "permissionOnly": false,
157629
+ "description": "Grants permission to create a new Amazon ECS Express Gateway service with cluster and task definition",
157630
+ "accessLevel": "Write",
157631
+ "resourceTypes": [
157632
+ {
157633
+ "resourceType": "service",
157634
+ "required": true,
157635
+ "conditionKeys": [
157636
+ "ecs:cluster",
157637
+ "aws:ResourceTag/${TagKey}"
157638
+ ],
157639
+ "dependentActions": [
157640
+ "ecs:RegisterTaskDefinition",
157641
+ "iam:PassRole"
157642
+ ]
157643
+ },
157644
+ {
157645
+ "resourceType": "",
157646
+ "required": false,
157647
+ "conditionKeys": [
157648
+ "aws:RequestTag/${TagKey}",
157649
+ "aws:TagKeys",
157650
+ "ecs:task-definition",
157651
+ "ecs:subnet",
157652
+ "ecs:enable-ecs-managed-tags",
157653
+ "ecs:propagate-tags",
157654
+ "ecs:task-cpu",
157655
+ "ecs:task-memory"
157656
+ ],
157657
+ "dependentActions": []
157658
+ }
157659
+ ]
157660
+ },
156885
157661
  {
156886
157662
  "name": "CreateService",
156887
157663
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_CreateService.html",
@@ -157031,6 +157807,24 @@
157031
157807
  }
157032
157808
  ]
157033
157809
  },
157810
+ {
157811
+ "name": "DeleteExpressGatewayService",
157812
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DeleteExpressGatewayService.html",
157813
+ "permissionOnly": false,
157814
+ "description": "Grants permission to delete a specified Express Gateway service",
157815
+ "accessLevel": "Write",
157816
+ "resourceTypes": [
157817
+ {
157818
+ "resourceType": "service",
157819
+ "required": true,
157820
+ "conditionKeys": [
157821
+ "ecs:cluster",
157822
+ "aws:ResourceTag/${TagKey}"
157823
+ ],
157824
+ "dependentActions": []
157825
+ }
157826
+ ]
157827
+ },
157034
157828
  {
157035
157829
  "name": "DeleteService",
157036
157830
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DeleteService.html",
@@ -157199,6 +157993,24 @@
157199
157993
  }
157200
157994
  ]
157201
157995
  },
157996
+ {
157997
+ "name": "DescribeExpressGatewayService",
157998
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DescribeExpressGatewayService.html",
157999
+ "permissionOnly": false,
158000
+ "description": "Grants permission to describe the specified Express Gateway service",
158001
+ "accessLevel": "Read",
158002
+ "resourceTypes": [
158003
+ {
158004
+ "resourceType": "service",
158005
+ "required": true,
158006
+ "conditionKeys": [
158007
+ "ecs:cluster",
158008
+ "aws:ResourceTag/${TagKey}"
158009
+ ],
158010
+ "dependentActions": []
158011
+ }
158012
+ ]
158013
+ },
157202
158014
  {
157203
158015
  "name": "DescribeServiceDeployments",
157204
158016
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DescribeServiceDeployments.html",
@@ -158256,6 +159068,36 @@
158256
159068
  }
158257
159069
  ]
158258
159070
  },
159071
+ {
159072
+ "name": "UpdateExpressGatewayService",
159073
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_UpdateExpressGatewayService.html",
159074
+ "permissionOnly": false,
159075
+ "description": "Grants permission to modify the parameters of an Express Gateway service",
159076
+ "accessLevel": "Write",
159077
+ "resourceTypes": [
159078
+ {
159079
+ "resourceType": "service",
159080
+ "required": true,
159081
+ "conditionKeys": [
159082
+ "ecs:cluster",
159083
+ "aws:ResourceTag/${TagKey}"
159084
+ ],
159085
+ "dependentActions": []
159086
+ },
159087
+ {
159088
+ "resourceType": "",
159089
+ "required": false,
159090
+ "conditionKeys": [
159091
+ "ecs:subnet",
159092
+ "ecs:enable-ecs-managed-tags",
159093
+ "ecs:propagate-tags",
159094
+ "ecs:task-cpu",
159095
+ "ecs:task-memory"
159096
+ ],
159097
+ "dependentActions": []
159098
+ }
159099
+ ]
159100
+ },
158259
159101
  {
158260
159102
  "name": "UpdateService",
158261
159103
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_UpdateService.html",
@@ -200642,6 +201484,48 @@
200642
201484
  }
200643
201485
  ]
200644
201486
  },
201487
+ {
201488
+ "name": "RenameTable",
201489
+ "apiReferenceUrl": "https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-catalog-tables.html#aws-glue-api-catalog-tables-RenameTable",
201490
+ "permissionOnly": false,
201491
+ "description": "Grants permission to rename a table",
201492
+ "accessLevel": "Write",
201493
+ "resourceTypes": [
201494
+ {
201495
+ "resourceType": "database",
201496
+ "required": true,
201497
+ "conditionKeys": [],
201498
+ "dependentActions": []
201499
+ },
201500
+ {
201501
+ "resourceType": "rootcatalog",
201502
+ "required": true,
201503
+ "conditionKeys": [],
201504
+ "dependentActions": []
201505
+ },
201506
+ {
201507
+ "resourceType": "table",
201508
+ "required": true,
201509
+ "conditionKeys": [],
201510
+ "dependentActions": []
201511
+ },
201512
+ {
201513
+ "resourceType": "catalog",
201514
+ "required": false,
201515
+ "conditionKeys": [],
201516
+ "dependentActions": []
201517
+ },
201518
+ {
201519
+ "resourceType": "",
201520
+ "required": false,
201521
+ "conditionKeys": [
201522
+ "glue:LakeFormationPermissions",
201523
+ "glue:FederatedAuthorizationSource"
201524
+ ],
201525
+ "dependentActions": []
201526
+ }
201527
+ ]
201528
+ },
200645
201529
  {
200646
201530
  "name": "RequestLogParsing",
200647
201531
  "apiReferenceUrl": "https://docs.aws.amazon.com/glue/latest/dg/monitor-spark-ui.html",
@@ -201733,7 +202617,8 @@
201733
202617
  "resourceType": "",
201734
202618
  "required": false,
201735
202619
  "conditionKeys": [
201736
- "glue:LakeFormationPermissions"
202620
+ "glue:LakeFormationPermissions",
202621
+ "glue:FederatedAuthorizationSource"
201737
202622
  ],
201738
202623
  "dependentActions": []
201739
202624
  }
@@ -202371,7 +203256,7 @@
202371
203256
  {
202372
203257
  "name": "glue:FederatedAuthorizationSource",
202373
203258
  "apiReferenceUrl": "https://docs.aws.amazon.com/glue/latest/dg/using-identity-based-policies.html#glue-identity-based-policy-condition-keys",
202374
- "description": "Filters access by whether the resource belongs to federarted authorization",
203259
+ "description": "Filters access by whether the resource belongs to federated authorization",
202375
203260
  "type": "String"
202376
203261
  },
202377
203262
  {
@@ -204953,6 +205838,21 @@
204953
205838
  }
204954
205839
  ]
204955
205840
  },
205841
+ {
205842
+ "name": "GetMalwareScan",
205843
+ "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetMalwareScan.html",
205844
+ "permissionOnly": false,
205845
+ "description": "Grants permission to retrieve a malware scan's details",
205846
+ "accessLevel": "Read",
205847
+ "resourceTypes": [
205848
+ {
205849
+ "resourceType": "",
205850
+ "required": false,
205851
+ "conditionKeys": [],
205852
+ "dependentActions": []
205853
+ }
205854
+ ]
205855
+ },
204956
205856
  {
204957
205857
  "name": "GetMalwareScanSettings",
204958
205858
  "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetMalwareScanSettings.html",
@@ -205223,6 +206123,21 @@
205223
206123
  }
205224
206124
  ]
205225
206125
  },
206126
+ {
206127
+ "name": "ListMalwareScans",
206128
+ "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListMalwareScans.html",
206129
+ "permissionOnly": false,
206130
+ "description": "Grants permission to retrieve a list of malware scans",
206131
+ "accessLevel": "List",
206132
+ "resourceTypes": [
206133
+ {
206134
+ "resourceType": "",
206135
+ "required": false,
206136
+ "conditionKeys": [],
206137
+ "dependentActions": []
206138
+ }
206139
+ ]
206140
+ },
205226
206141
  {
205227
206142
  "name": "ListMembers",
205228
206143
  "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListMembers.html",
@@ -205370,6 +206285,21 @@
205370
206285
  }
205371
206286
  ]
205372
206287
  },
206288
+ {
206289
+ "name": "SendObjectMalwareScan",
206290
+ "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_SendObjectMalwareScan.html",
206291
+ "permissionOnly": false,
206292
+ "description": "Grants permission to initiate a new object malware scan",
206293
+ "accessLevel": "Write",
206294
+ "resourceTypes": [
206295
+ {
206296
+ "resourceType": "",
206297
+ "required": false,
206298
+ "conditionKeys": [],
206299
+ "dependentActions": []
206300
+ }
206301
+ ]
206302
+ },
205373
206303
  {
205374
206304
  "name": "SendSecurityTelemetry",
205375
206305
  "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_SendSecurityTelemetry.html",
@@ -214007,6 +214937,21 @@
214007
214937
  "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsidentityandaccessmanagementiam.html",
214008
214938
  "servicePrefix": "iam",
214009
214939
  "actions": [
214940
+ {
214941
+ "name": "AcceptDelegationRequest",
214942
+ "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_AcceptDelegationRequest.html",
214943
+ "permissionOnly": false,
214944
+ "description": "Accepts a delegation request resource, granting the requested temporary access",
214945
+ "accessLevel": "Write",
214946
+ "resourceTypes": [
214947
+ {
214948
+ "resourceType": "delegation-request",
214949
+ "required": true,
214950
+ "conditionKeys": [],
214951
+ "dependentActions": []
214952
+ }
214953
+ ]
214954
+ },
214010
214955
  {
214011
214956
  "name": "AddClientIDToOpenIDConnectProvider",
214012
214957
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_AddClientIDToOpenIDConnectProvider.html",
@@ -214054,6 +214999,21 @@
214054
214999
  }
214055
215000
  ]
214056
215001
  },
215002
+ {
215003
+ "name": "AssociateDelegationRequest",
215004
+ "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_AssociateDelegationRequest.html",
215005
+ "permissionOnly": false,
215006
+ "description": "Associates a delegation request resource with the calling identity",
215007
+ "accessLevel": "Write",
215008
+ "resourceTypes": [
215009
+ {
215010
+ "resourceType": "delegation-request",
215011
+ "required": true,
215012
+ "conditionKeys": [],
215013
+ "dependentActions": []
215014
+ }
215015
+ ]
215016
+ },
214057
215017
  {
214058
215018
  "name": "AttachGroupPolicy",
214059
215019
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_AttachGroupPolicy.html",
@@ -214170,6 +215130,31 @@
214170
215130
  }
214171
215131
  ]
214172
215132
  },
215133
+ {
215134
+ "name": "CreateDelegationRequest",
215135
+ "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateDelegationRequest.html",
215136
+ "permissionOnly": false,
215137
+ "description": "Creates an IAM delegation request resource for temporary access delegation",
215138
+ "accessLevel": "Write",
215139
+ "resourceTypes": [
215140
+ {
215141
+ "resourceType": "delegation-request",
215142
+ "required": true,
215143
+ "conditionKeys": [],
215144
+ "dependentActions": []
215145
+ },
215146
+ {
215147
+ "resourceType": "",
215148
+ "required": false,
215149
+ "conditionKeys": [
215150
+ "iam:DelegationDuration",
215151
+ "iam:NotificationChannel",
215152
+ "iam:TemplateArn"
215153
+ ],
215154
+ "dependentActions": []
215155
+ }
215156
+ ]
215157
+ },
214173
215158
  {
214174
215159
  "name": "CreateGroup",
214175
215160
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateGroup.html",
@@ -214624,6 +215609,14 @@
214624
215609
  "required": true,
214625
215610
  "conditionKeys": [],
214626
215611
  "dependentActions": []
215612
+ },
215613
+ {
215614
+ "resourceType": "",
215615
+ "required": false,
215616
+ "conditionKeys": [
215617
+ "iam:PermissionsBoundary"
215618
+ ],
215619
+ "dependentActions": []
214627
215620
  }
214628
215621
  ]
214629
215622
  },
@@ -214954,6 +215947,21 @@
214954
215947
  }
214955
215948
  ]
214956
215949
  },
215950
+ {
215951
+ "name": "DisableOutboundWebIdentityFederation",
215952
+ "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_AddClientIDToOpenIDConnectProvider.html",
215953
+ "permissionOnly": false,
215954
+ "description": "Disables the outbound identity federation feature for the callers account",
215955
+ "accessLevel": "Write",
215956
+ "resourceTypes": [
215957
+ {
215958
+ "resourceType": "",
215959
+ "required": false,
215960
+ "conditionKeys": [],
215961
+ "dependentActions": []
215962
+ }
215963
+ ]
215964
+ },
214957
215965
  {
214958
215966
  "name": "EnableMFADevice",
214959
215967
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_EnableMFADevice.html",
@@ -215010,6 +216018,21 @@
215010
216018
  }
215011
216019
  ]
215012
216020
  },
216021
+ {
216022
+ "name": "EnableOutboundWebIdentityFederation",
216023
+ "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_EnableOutboundWebIdentityFederation.html",
216024
+ "permissionOnly": false,
216025
+ "description": "Enables the outbound identity federation feature for the callers account",
216026
+ "accessLevel": "Write",
216027
+ "resourceTypes": [
216028
+ {
216029
+ "resourceType": "",
216030
+ "required": false,
216031
+ "conditionKeys": [],
216032
+ "dependentActions": []
216033
+ }
216034
+ ]
216035
+ },
215013
216036
  {
215014
216037
  "name": "GenerateCredentialReport",
215015
216038
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_GenerateCredentialReport.html",
@@ -215250,6 +216273,21 @@
215250
216273
  }
215251
216274
  ]
215252
216275
  },
216276
+ {
216277
+ "name": "GetDelegationRequest",
216278
+ "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_GetDelegationRequest.html",
216279
+ "permissionOnly": false,
216280
+ "description": "Retrieves information about a specific delegation request",
216281
+ "accessLevel": "Read",
216282
+ "resourceTypes": [
216283
+ {
216284
+ "resourceType": "delegation-request",
216285
+ "required": true,
216286
+ "conditionKeys": [],
216287
+ "dependentActions": []
216288
+ }
216289
+ ]
216290
+ },
215253
216291
  {
215254
216292
  "name": "GetGroup",
215255
216293
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_GetGroup.html",
@@ -215280,6 +216318,21 @@
215280
216318
  }
215281
216319
  ]
215282
216320
  },
216321
+ {
216322
+ "name": "GetHumanReadableSummary",
216323
+ "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_GetHumanReadableSummary.html",
216324
+ "permissionOnly": false,
216325
+ "description": "Retrieves a human readable summary for a given entity. At this time, only delegation request are supported",
216326
+ "accessLevel": "Read",
216327
+ "resourceTypes": [
216328
+ {
216329
+ "resourceType": "delegation-request",
216330
+ "required": true,
216331
+ "conditionKeys": [],
216332
+ "dependentActions": []
216333
+ }
216334
+ ]
216335
+ },
215283
216336
  {
215284
216337
  "name": "GetInstanceProfile",
215285
216338
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_GetInstanceProfile.html",
@@ -215355,6 +216408,21 @@
215355
216408
  }
215356
216409
  ]
215357
216410
  },
216411
+ {
216412
+ "name": "GetOutboundWebIdentityFederationInfo",
216413
+ "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_GetOutboundWebIdentityFederationInfo.html",
216414
+ "permissionOnly": false,
216415
+ "description": "Retrieves the configuration information for the outbound identity federation feature for the callers account",
216416
+ "accessLevel": "Read",
216417
+ "resourceTypes": [
216418
+ {
216419
+ "resourceType": "",
216420
+ "required": false,
216421
+ "conditionKeys": [],
216422
+ "dependentActions": []
216423
+ }
216424
+ ]
216425
+ },
215358
216426
  {
215359
216427
  "name": "GetPolicy",
215360
216428
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_GetPolicy.html",
@@ -215397,6 +216465,14 @@
215397
216465
  "required": true,
215398
216466
  "conditionKeys": [],
215399
216467
  "dependentActions": []
216468
+ },
216469
+ {
216470
+ "resourceType": "",
216471
+ "required": false,
216472
+ "conditionKeys": [
216473
+ "iam:PermissionsBoundary"
216474
+ ],
216475
+ "dependentActions": []
215400
216476
  }
215401
216477
  ]
215402
216478
  },
@@ -215625,6 +216701,23 @@
215625
216701
  }
215626
216702
  ]
215627
216703
  },
216704
+ {
216705
+ "name": "ListDelegationRequests",
216706
+ "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_ListDelegationRequests.html",
216707
+ "permissionOnly": false,
216708
+ "description": "Lists delegation requests based on the specified criteria",
216709
+ "accessLevel": "List",
216710
+ "resourceTypes": [
216711
+ {
216712
+ "resourceType": "",
216713
+ "required": false,
216714
+ "conditionKeys": [
216715
+ "iam:DelegationRequestOwner"
216716
+ ],
216717
+ "dependentActions": []
216718
+ }
216719
+ ]
216720
+ },
215628
216721
  {
215629
216722
  "name": "ListEntitiesForPolicy",
215630
216723
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_ListEntitiesForPolicy.html",
@@ -216233,6 +217326,21 @@
216233
217326
  }
216234
217327
  ]
216235
217328
  },
217329
+ {
217330
+ "name": "RejectDelegationRequest",
217331
+ "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_RejectDelegationRequest.html",
217332
+ "permissionOnly": false,
217333
+ "description": "Rejects a delegation request, denying the requested temporary access",
217334
+ "accessLevel": "Write",
217335
+ "resourceTypes": [
217336
+ {
217337
+ "resourceType": "delegation-request",
217338
+ "required": true,
217339
+ "conditionKeys": [],
217340
+ "dependentActions": []
217341
+ }
217342
+ ]
217343
+ },
216236
217344
  {
216237
217345
  "name": "RemoveClientIDFromOpenIDConnectProvider",
216238
217346
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_RemoveClientIDFromOpenIDConnectProvider.html",
@@ -216316,6 +217424,21 @@
216316
217424
  }
216317
217425
  ]
216318
217426
  },
217427
+ {
217428
+ "name": "SendDelegationToken",
217429
+ "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_SendDelegationToken.html",
217430
+ "permissionOnly": false,
217431
+ "description": "Sends the exchange token for an accepted delegation request",
217432
+ "accessLevel": "Write",
217433
+ "resourceTypes": [
217434
+ {
217435
+ "resourceType": "delegation-request",
217436
+ "required": true,
217437
+ "conditionKeys": [],
217438
+ "dependentActions": []
217439
+ }
217440
+ ]
217441
+ },
216319
217442
  {
216320
217443
  "name": "SetDefaultPolicyVersion",
216321
217444
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/APIReference/API_SetDefaultPolicyVersion.html",
@@ -216851,6 +217974,14 @@
216851
217974
  "required": true,
216852
217975
  "conditionKeys": [],
216853
217976
  "dependentActions": []
217977
+ },
217978
+ {
217979
+ "resourceType": "",
217980
+ "required": false,
217981
+ "conditionKeys": [
217982
+ "iam:PermissionsBoundary"
217983
+ ],
217984
+ "dependentActions": []
216854
217985
  }
216855
217986
  ]
216856
217987
  },
@@ -216926,6 +218057,14 @@
216926
218057
  "required": true,
216927
218058
  "conditionKeys": [],
216928
218059
  "dependentActions": []
218060
+ },
218061
+ {
218062
+ "resourceType": "",
218063
+ "required": false,
218064
+ "conditionKeys": [
218065
+ "iam:PermissionsBoundary"
218066
+ ],
218067
+ "dependentActions": []
216929
218068
  }
216930
218069
  ]
216931
218070
  },
@@ -216941,6 +218080,14 @@
216941
218080
  "required": true,
216942
218081
  "conditionKeys": [],
216943
218082
  "dependentActions": []
218083
+ },
218084
+ {
218085
+ "resourceType": "",
218086
+ "required": false,
218087
+ "conditionKeys": [
218088
+ "iam:PermissionsBoundary"
218089
+ ],
218090
+ "dependentActions": []
216944
218091
  }
216945
218092
  ]
216946
218093
  },
@@ -217208,6 +218355,14 @@
217208
218355
  "aws:ResourceTag/${TagKey}",
217209
218356
  "iam:ResourceTag/${TagKey}"
217210
218357
  ]
218358
+ },
218359
+ {
218360
+ "name": "delegation-request",
218361
+ "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies-temporary-delegation.html",
218362
+ "arnPattern": "arn:${Partition}:iam::${Account}:delegation-request/${DelegationRequestId}",
218363
+ "conditionKeys": [
218364
+ "iam:DelegationRequestOwner"
218365
+ ]
217211
218366
  }
217212
218367
  ],
217213
218368
  "conditionKeys": [
@@ -217241,6 +218396,18 @@
217241
218396
  "description": "Filters access by the resource that the role will be used on behalf of",
217242
218397
  "type": "ARN"
217243
218398
  },
218399
+ {
218400
+ "name": "iam:DelegationDuration",
218401
+ "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#ck_DelegationDuration",
218402
+ "description": "Filters access based on the requested delegation duration",
218403
+ "type": "String"
218404
+ },
218405
+ {
218406
+ "name": "iam:DelegationRequestOwner",
218407
+ "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#ck_DelegationRequestOwner",
218408
+ "description": "Filters access based on the delegation request owner",
218409
+ "type": "ARN"
218410
+ },
217244
218411
  {
217245
218412
  "name": "iam:FIDO-FIPS-140-2-certification",
217246
218413
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#ck_FIDO-FIPS-140-2-certification",
@@ -217259,6 +218426,12 @@
217259
218426
  "description": "Filters access by the MFA device FIDO certification level at the time of registration of a FIDO security key",
217260
218427
  "type": "String"
217261
218428
  },
218429
+ {
218430
+ "name": "iam:NotificationChannel",
218431
+ "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#ck_NotificationChannel",
218432
+ "description": "Filters access based on the requested notification channel",
218433
+ "type": "String"
218434
+ },
217262
218435
  {
217263
218436
  "name": "iam:OrganizationsPolicyId",
217264
218437
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#ck_OrganizationsPolicyId",
@@ -217306,6 +218479,12 @@
217306
218479
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#ck_ServiceSpecificCredentialServiceName",
217307
218480
  "description": "Filters access by the service associated with the credential",
217308
218481
  "type": "String"
218482
+ },
218483
+ {
218484
+ "name": "iam:TemplateArn",
218485
+ "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#ck_TemplateArn",
218486
+ "description": "Filters access based on the requested template ARN",
218487
+ "type": "ARN"
217309
218488
  }
217310
218489
  ]
217311
218490
  },
@@ -217907,6 +219086,15 @@
217907
219086
  "dependentActions": [
217908
219087
  "kms:Decrypt"
217909
219088
  ]
219089
+ },
219090
+ {
219091
+ "resourceType": "",
219092
+ "required": false,
219093
+ "conditionKeys": [
219094
+ "identitystore:PrimaryRegion",
219095
+ "identitystore:GroupExternalIdIssuers"
219096
+ ],
219097
+ "dependentActions": []
217910
219098
  }
217911
219099
  ]
217912
219100
  },
@@ -217936,6 +219124,14 @@
217936
219124
  "required": true,
217937
219125
  "conditionKeys": [],
217938
219126
  "dependentActions": []
219127
+ },
219128
+ {
219129
+ "resourceType": "",
219130
+ "required": false,
219131
+ "conditionKeys": [
219132
+ "identitystore:PrimaryRegion"
219133
+ ],
219134
+ "dependentActions": []
217939
219135
  }
217940
219136
  ]
217941
219137
  },
@@ -217973,6 +219169,16 @@
217973
219169
  "dependentActions": [
217974
219170
  "kms:Decrypt"
217975
219171
  ]
219172
+ },
219173
+ {
219174
+ "resourceType": "",
219175
+ "required": false,
219176
+ "conditionKeys": [
219177
+ "identitystore:PrimaryRegion",
219178
+ "identitystore:UserExternalIdIssuers",
219179
+ "identitystore:ReservedUserId"
219180
+ ],
219181
+ "dependentActions": []
217976
219182
  }
217977
219183
  ]
217978
219184
  },
@@ -217996,6 +219202,15 @@
217996
219202
  "required": true,
217997
219203
  "conditionKeys": [],
217998
219204
  "dependentActions": []
219205
+ },
219206
+ {
219207
+ "resourceType": "",
219208
+ "required": false,
219209
+ "conditionKeys": [
219210
+ "identitystore:PrimaryRegion",
219211
+ "identitystore:GroupExternalIdIssuers"
219212
+ ],
219213
+ "dependentActions": []
217999
219214
  }
218000
219215
  ]
218001
219216
  },
@@ -218031,6 +219246,14 @@
218031
219246
  "required": true,
218032
219247
  "conditionKeys": [],
218033
219248
  "dependentActions": []
219249
+ },
219250
+ {
219251
+ "resourceType": "",
219252
+ "required": false,
219253
+ "conditionKeys": [
219254
+ "identitystore:PrimaryRegion"
219255
+ ],
219256
+ "dependentActions": []
218034
219257
  }
218035
219258
  ]
218036
219259
  },
@@ -218069,6 +219292,15 @@
218069
219292
  "required": true,
218070
219293
  "conditionKeys": [],
218071
219294
  "dependentActions": []
219295
+ },
219296
+ {
219297
+ "resourceType": "",
219298
+ "required": false,
219299
+ "conditionKeys": [
219300
+ "identitystore:PrimaryRegion",
219301
+ "identitystore:UserExternalIdIssuers"
219302
+ ],
219303
+ "dependentActions": []
218072
219304
  }
218073
219305
  ]
218074
219306
  },
@@ -218092,6 +219324,15 @@
218092
219324
  "required": true,
218093
219325
  "conditionKeys": [],
218094
219326
  "dependentActions": []
219327
+ },
219328
+ {
219329
+ "resourceType": "",
219330
+ "required": false,
219331
+ "conditionKeys": [
219332
+ "identitystore:PrimaryRegion",
219333
+ "identitystore:GroupExternalIdIssuers"
219334
+ ],
219335
+ "dependentActions": []
218095
219336
  }
218096
219337
  ]
218097
219338
  },
@@ -218127,6 +219368,14 @@
218127
219368
  "required": true,
218128
219369
  "conditionKeys": [],
218129
219370
  "dependentActions": []
219371
+ },
219372
+ {
219373
+ "resourceType": "",
219374
+ "required": false,
219375
+ "conditionKeys": [
219376
+ "identitystore:PrimaryRegion"
219377
+ ],
219378
+ "dependentActions": []
218130
219379
  }
218131
219380
  ]
218132
219381
  },
@@ -218150,6 +219399,15 @@
218150
219399
  "required": true,
218151
219400
  "conditionKeys": [],
218152
219401
  "dependentActions": []
219402
+ },
219403
+ {
219404
+ "resourceType": "",
219405
+ "required": false,
219406
+ "conditionKeys": [
219407
+ "identitystore:PrimaryRegion",
219408
+ "identitystore:UserExternalIdIssuers"
219409
+ ],
219410
+ "dependentActions": []
218153
219411
  }
218154
219412
  ]
218155
219413
  },
@@ -218173,6 +219431,14 @@
218173
219431
  "required": true,
218174
219432
  "conditionKeys": [],
218175
219433
  "dependentActions": []
219434
+ },
219435
+ {
219436
+ "resourceType": "",
219437
+ "required": false,
219438
+ "conditionKeys": [
219439
+ "identitystore:PrimaryRegion"
219440
+ ],
219441
+ "dependentActions": []
218176
219442
  }
218177
219443
  ]
218178
219444
  },
@@ -218208,6 +219474,14 @@
218208
219474
  "required": true,
218209
219475
  "conditionKeys": [],
218210
219476
  "dependentActions": []
219477
+ },
219478
+ {
219479
+ "resourceType": "",
219480
+ "required": false,
219481
+ "conditionKeys": [
219482
+ "identitystore:PrimaryRegion"
219483
+ ],
219484
+ "dependentActions": []
218211
219485
  }
218212
219486
  ]
218213
219487
  },
@@ -218231,6 +219505,14 @@
218231
219505
  "required": true,
218232
219506
  "conditionKeys": [],
218233
219507
  "dependentActions": []
219508
+ },
219509
+ {
219510
+ "resourceType": "",
219511
+ "required": false,
219512
+ "conditionKeys": [
219513
+ "identitystore:PrimaryRegion"
219514
+ ],
219515
+ "dependentActions": []
218234
219516
  }
218235
219517
  ]
218236
219518
  },
@@ -218266,6 +219548,14 @@
218266
219548
  "required": true,
218267
219549
  "conditionKeys": [],
218268
219550
  "dependentActions": []
219551
+ },
219552
+ {
219553
+ "resourceType": "",
219554
+ "required": false,
219555
+ "conditionKeys": [
219556
+ "identitystore:PrimaryRegion"
219557
+ ],
219558
+ "dependentActions": []
218269
219559
  }
218270
219560
  ]
218271
219561
  },
@@ -218295,6 +219585,14 @@
218295
219585
  "required": true,
218296
219586
  "conditionKeys": [],
218297
219587
  "dependentActions": []
219588
+ },
219589
+ {
219590
+ "resourceType": "",
219591
+ "required": false,
219592
+ "conditionKeys": [
219593
+ "identitystore:PrimaryRegion"
219594
+ ],
219595
+ "dependentActions": []
218298
219596
  }
218299
219597
  ]
218300
219598
  },
@@ -218324,6 +219622,14 @@
218324
219622
  "required": true,
218325
219623
  "conditionKeys": [],
218326
219624
  "dependentActions": []
219625
+ },
219626
+ {
219627
+ "resourceType": "",
219628
+ "required": false,
219629
+ "conditionKeys": [
219630
+ "identitystore:PrimaryRegion"
219631
+ ],
219632
+ "dependentActions": []
218327
219633
  }
218328
219634
  ]
218329
219635
  },
@@ -218347,6 +219653,15 @@
218347
219653
  "required": true,
218348
219654
  "conditionKeys": [],
218349
219655
  "dependentActions": []
219656
+ },
219657
+ {
219658
+ "resourceType": "",
219659
+ "required": false,
219660
+ "conditionKeys": [
219661
+ "identitystore:PrimaryRegion",
219662
+ "identitystore:GroupExternalIdIssuers"
219663
+ ],
219664
+ "dependentActions": []
218350
219665
  }
218351
219666
  ]
218352
219667
  },
@@ -218370,6 +219685,15 @@
218370
219685
  "required": true,
218371
219686
  "conditionKeys": [],
218372
219687
  "dependentActions": []
219688
+ },
219689
+ {
219690
+ "resourceType": "",
219691
+ "required": false,
219692
+ "conditionKeys": [
219693
+ "identitystore:PrimaryRegion",
219694
+ "identitystore:UserExternalIdIssuers"
219695
+ ],
219696
+ "dependentActions": []
218373
219697
  }
218374
219698
  ]
218375
219699
  },
@@ -218393,6 +219717,15 @@
218393
219717
  "required": true,
218394
219718
  "conditionKeys": [],
218395
219719
  "dependentActions": []
219720
+ },
219721
+ {
219722
+ "resourceType": "",
219723
+ "required": false,
219724
+ "conditionKeys": [
219725
+ "identitystore:PrimaryRegion",
219726
+ "identitystore:GroupExternalIdIssuers"
219727
+ ],
219728
+ "dependentActions": []
218396
219729
  }
218397
219730
  ]
218398
219731
  },
@@ -218436,6 +219769,15 @@
218436
219769
  "required": true,
218437
219770
  "conditionKeys": [],
218438
219771
  "dependentActions": []
219772
+ },
219773
+ {
219774
+ "resourceType": "",
219775
+ "required": false,
219776
+ "conditionKeys": [
219777
+ "identitystore:PrimaryRegion",
219778
+ "identitystore:UserExternalIdIssuers"
219779
+ ],
219780
+ "dependentActions": []
218439
219781
  }
218440
219782
  ]
218441
219783
  }
@@ -218485,10 +219827,40 @@
218485
219827
  }
218486
219828
  ],
218487
219829
  "conditionKeys": [
219830
+ {
219831
+ "name": "identitystore:GroupExternalIdIssuers",
219832
+ "apiReferenceUrl": "list_awsidentitystore.html#awsidentitystore-policy-keys",
219833
+ "description": "Filters access by Issuer present in ExternalIds for Group resources",
219834
+ "type": "ArrayOfARN"
219835
+ },
219836
+ {
219837
+ "name": "identitystore:IdentityStoreArn",
219838
+ "apiReferenceUrl": "https://docs.aws.amazon.com/singlesignon/latest/userguide/condition-context-keys-sts-idc.html#condition-keys-identity-store-arn",
219839
+ "description": "Filters access by Identity Store ARN",
219840
+ "type": "ARN"
219841
+ },
219842
+ {
219843
+ "name": "identitystore:PrimaryRegion",
219844
+ "apiReferenceUrl": "list_awsidentitystore.html#awsidentitystore-policy-keys",
219845
+ "description": "Filters access by Primary Region of Identity Store",
219846
+ "type": "String"
219847
+ },
219848
+ {
219849
+ "name": "identitystore:ReservedUserId",
219850
+ "apiReferenceUrl": "list_awsidentitystore.html#awsidentitystore-policy-keys",
219851
+ "description": "Filters access by a previously reserved User ID for CreateUser operation",
219852
+ "type": "String"
219853
+ },
219854
+ {
219855
+ "name": "identitystore:UserExternalIdIssuers",
219856
+ "apiReferenceUrl": "list_awsidentitystore.html#awsidentitystore-policy-keys",
219857
+ "description": "Filters access by Issuer present in ExternalIds for User resources",
219858
+ "type": "ArrayOfARN"
219859
+ },
218488
219860
  {
218489
219861
  "name": "identitystore:UserId",
218490
219862
  "apiReferenceUrl": "https://docs.aws.amazon.com/singlesignon/latest/userguide/condition-context-keys-sts-idc.html#condition-keys-identity-store-user-id",
218491
- "description": "Filters access by IAM Identity Center User ID",
219863
+ "description": "Filters access by Identity Store User ID",
218492
219864
  "type": "String"
218493
219865
  }
218494
219866
  ]
@@ -222748,6 +224120,23 @@
222748
224120
  }
222749
224121
  ]
222750
224122
  },
224123
+ {
224124
+ "name": "CreateProcurementPortalPreference",
224125
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_invoicing_CreateProcurementPortalPreference.html",
224126
+ "permissionOnly": false,
224127
+ "description": "Grants permission to create a procurement portal preference",
224128
+ "accessLevel": "Write",
224129
+ "resourceTypes": [
224130
+ {
224131
+ "resourceType": "",
224132
+ "required": false,
224133
+ "conditionKeys": [
224134
+ "aws:ResourceTag/${TagKey}"
224135
+ ],
224136
+ "dependentActions": []
224137
+ }
224138
+ ]
224139
+ },
222751
224140
  {
222752
224141
  "name": "DeleteInvoiceUnit",
222753
224142
  "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_invoicing_DeleteInvoiceUnit.html",
@@ -222771,6 +224160,23 @@
222771
224160
  }
222772
224161
  ]
222773
224162
  },
224163
+ {
224164
+ "name": "DeleteProcurementPortalPreference",
224165
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_invoicing_DeleteProcurementPortalPreference.html",
224166
+ "permissionOnly": false,
224167
+ "description": "Grants permission to delete a procurement portal preference",
224168
+ "accessLevel": "Write",
224169
+ "resourceTypes": [
224170
+ {
224171
+ "resourceType": "",
224172
+ "required": false,
224173
+ "conditionKeys": [
224174
+ "aws:ResourceTag/${TagKey}"
224175
+ ],
224176
+ "dependentActions": []
224177
+ }
224178
+ ]
224179
+ },
222774
224180
  {
222775
224181
  "name": "GetInvoiceCorrection",
222776
224182
  "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_invoicing_GetInvoiceCorrection.html",
@@ -222831,6 +224237,21 @@
222831
224237
  }
222832
224238
  ]
222833
224239
  },
224240
+ {
224241
+ "name": "GetProcurementPortalPreference",
224242
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_invoicing_GetProcurementPortalPreference.html",
224243
+ "permissionOnly": false,
224244
+ "description": "Grants permission to get a procurement portal preference",
224245
+ "accessLevel": "Read",
224246
+ "resourceTypes": [
224247
+ {
224248
+ "resourceType": "",
224249
+ "required": false,
224250
+ "conditionKeys": [],
224251
+ "dependentActions": []
224252
+ }
224253
+ ]
224254
+ },
222834
224255
  {
222835
224256
  "name": "ListInvoiceCorrections",
222836
224257
  "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_invoicing_ListInvoiceCorrections.html",
@@ -222876,6 +224297,21 @@
222876
224297
  }
222877
224298
  ]
222878
224299
  },
224300
+ {
224301
+ "name": "ListProcurementPortalPreferences",
224302
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_invoicing_ListProcurementPortalPreferences.html",
224303
+ "permissionOnly": false,
224304
+ "description": "Grants permission to list procurement portal preferences for an account",
224305
+ "accessLevel": "List",
224306
+ "resourceTypes": [
224307
+ {
224308
+ "resourceType": "",
224309
+ "required": false,
224310
+ "conditionKeys": [],
224311
+ "dependentActions": []
224312
+ }
224313
+ ]
224314
+ },
222879
224315
  {
222880
224316
  "name": "ListTagsForResource",
222881
224317
  "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_invoicing_ListTagsForResource.html",
@@ -222914,6 +224350,23 @@
222914
224350
  }
222915
224351
  ]
222916
224352
  },
224353
+ {
224354
+ "name": "PutProcurementPortalPreference",
224355
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_invoicing_PutProcurementPortalPreference.html",
224356
+ "permissionOnly": false,
224357
+ "description": "Grants permission to update a procurement portal preference",
224358
+ "accessLevel": "Write",
224359
+ "resourceTypes": [
224360
+ {
224361
+ "resourceType": "",
224362
+ "required": false,
224363
+ "conditionKeys": [
224364
+ "aws:ResourceTag/${TagKey}"
224365
+ ],
224366
+ "dependentActions": []
224367
+ }
224368
+ ]
224369
+ },
222917
224370
  {
222918
224371
  "name": "StartInvoiceCorrection",
222919
224372
  "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_invoicing_StartInvoiceCorrection.html",
@@ -223000,6 +224453,23 @@
223000
224453
  "dependentActions": []
223001
224454
  }
223002
224455
  ]
224456
+ },
224457
+ {
224458
+ "name": "UpdateProcurementPortalPreferenceStatus",
224459
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_invoicing_UpdateProcurementPortalPreferenceStatus.html",
224460
+ "permissionOnly": false,
224461
+ "description": "Grants permission to update the status for a procurement portal preference",
224462
+ "accessLevel": "Write",
224463
+ "resourceTypes": [
224464
+ {
224465
+ "resourceType": "",
224466
+ "required": false,
224467
+ "conditionKeys": [
224468
+ "aws:ResourceTag/${TagKey}"
224469
+ ],
224470
+ "dependentActions": []
224471
+ }
224472
+ ]
223003
224473
  }
223004
224474
  ],
223005
224475
  "resourceTypes": [
@@ -223010,6 +224480,14 @@
223010
224480
  "conditionKeys": [
223011
224481
  "aws:ResourceTag/${TagKey}"
223012
224482
  ]
224483
+ },
224484
+ {
224485
+ "name": "procurement-portal-preference",
224486
+ "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_invoicing_ProcurementPortalPreference.html",
224487
+ "arnPattern": "arn:${Partition}:invoicing::${Account}:procurement-portal-preference/${Identifier}",
224488
+ "conditionKeys": [
224489
+ "aws:ResourceTag/${TagKey}"
224490
+ ]
223013
224491
  }
223014
224492
  ],
223015
224493
  "conditionKeys": [
@@ -249084,6 +250562,21 @@
249084
250562
  }
249085
250563
  ]
249086
250564
  },
250565
+ {
250566
+ "name": "DescribeStreamStorageConfiguration",
250567
+ "apiReferenceUrl": "https://docs.aws.amazon.com/kinesisvideostreams/latest/dg/API_DescribeStreamStorageConfiguration.html",
250568
+ "permissionOnly": false,
250569
+ "description": "Grants permission to describe the stream storage configuration of your Kinesis Video Stream",
250570
+ "accessLevel": "Read",
250571
+ "resourceTypes": [
250572
+ {
250573
+ "resourceType": "stream",
250574
+ "required": true,
250575
+ "conditionKeys": [],
250576
+ "dependentActions": []
250577
+ }
250578
+ ]
250579
+ },
249087
250580
  {
249088
250581
  "name": "GetClip",
249089
250582
  "apiReferenceUrl": "https://docs.aws.amazon.com/kinesisvideostreams/latest/dg/API_reader_GetClip.html",
@@ -249585,6 +251078,21 @@
249585
251078
  "dependentActions": []
249586
251079
  }
249587
251080
  ]
251081
+ },
251082
+ {
251083
+ "name": "UpdateStreamStorageConfiguration",
251084
+ "apiReferenceUrl": "https://docs.aws.amazon.com/kinesisvideostreams/latest/dg/API_UpdateStreamStorageConfiguration.html",
251085
+ "permissionOnly": false,
251086
+ "description": "Grants permission to update the stream storage configuration of your Kinesis Video Stream",
251087
+ "accessLevel": "Write",
251088
+ "resourceTypes": [
251089
+ {
251090
+ "resourceType": "stream",
251091
+ "required": true,
251092
+ "conditionKeys": [],
251093
+ "dependentActions": []
251094
+ }
251095
+ ]
249588
251096
  }
249589
251097
  ],
249590
251098
  "resourceTypes": [
@@ -250117,6 +251625,36 @@
250117
251625
  }
250118
251626
  ]
250119
251627
  },
251628
+ {
251629
+ "name": "GetTemporaryGluePartitionCredentials",
251630
+ "apiReferenceUrl": "https://docs.aws.amazon.com/lake-formation/latest/APIReference/API_GetTemporaryGluePartitionCredentials.html",
251631
+ "permissionOnly": false,
251632
+ "description": "Grants permission to get temporary credentials to access Glue partition data through Lake Formation",
251633
+ "accessLevel": "Read",
251634
+ "resourceTypes": [
251635
+ {
251636
+ "resourceType": "",
251637
+ "required": false,
251638
+ "conditionKeys": [],
251639
+ "dependentActions": []
251640
+ }
251641
+ ]
251642
+ },
251643
+ {
251644
+ "name": "GetTemporaryGlueTableCredentials",
251645
+ "apiReferenceUrl": "https://docs.aws.amazon.com/lake-formation/latest/APIReference/API_GetTemporaryGlueTableCredentials.html",
251646
+ "permissionOnly": false,
251647
+ "description": "Grants permission to get temporary credentials to access Glue table data through Lake Formation",
251648
+ "accessLevel": "Read",
251649
+ "resourceTypes": [
251650
+ {
251651
+ "resourceType": "",
251652
+ "required": false,
251653
+ "conditionKeys": [],
251654
+ "dependentActions": []
251655
+ }
251656
+ ]
251657
+ },
250120
251658
  {
250121
251659
  "name": "GetWorkUnitResults",
250122
251660
  "apiReferenceUrl": "https://docs.aws.amazon.com/lake-formation/latest/APIReference/API_GetWorkUnitResults.html",
@@ -255576,6 +257114,48 @@
255576
257114
  }
255577
257115
  ]
255578
257116
  },
257117
+ {
257118
+ "name": "CreateLicenseAssetGroup",
257119
+ "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_CreateLicenseAssetGroup.html",
257120
+ "permissionOnly": false,
257121
+ "description": "Grants permission to create a license asset group",
257122
+ "accessLevel": "Write",
257123
+ "resourceTypes": [
257124
+ {
257125
+ "resourceType": "license-asset-ruleset",
257126
+ "required": true,
257127
+ "conditionKeys": [],
257128
+ "dependentActions": []
257129
+ },
257130
+ {
257131
+ "resourceType": "",
257132
+ "required": false,
257133
+ "conditionKeys": [
257134
+ "aws:RequestTag/${TagKey}",
257135
+ "aws:TagKeys"
257136
+ ],
257137
+ "dependentActions": []
257138
+ }
257139
+ ]
257140
+ },
257141
+ {
257142
+ "name": "CreateLicenseAssetRuleset",
257143
+ "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_CreateLicenseAssetRuleset.html",
257144
+ "permissionOnly": false,
257145
+ "description": "Grants permission to create a license asset ruleset",
257146
+ "accessLevel": "Write",
257147
+ "resourceTypes": [
257148
+ {
257149
+ "resourceType": "",
257150
+ "required": false,
257151
+ "conditionKeys": [
257152
+ "aws:RequestTag/${TagKey}",
257153
+ "aws:TagKeys"
257154
+ ],
257155
+ "dependentActions": []
257156
+ }
257157
+ ]
257158
+ },
255579
257159
  {
255580
257160
  "name": "CreateLicenseConfiguration",
255581
257161
  "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_CreateLicenseConfiguration.html",
@@ -255613,7 +257193,7 @@
255613
257193
  "name": "CreateLicenseManagerReportGenerator",
255614
257194
  "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_CreateLicenseManagerReportGenerator.html",
255615
257195
  "permissionOnly": false,
255616
- "description": "Grants permission to create a report generator for a license configuration",
257196
+ "description": "Grants permission to create a report generator for supported license manager resources",
255617
257197
  "accessLevel": "Write",
255618
257198
  "resourceTypes": [
255619
257199
  {
@@ -255687,6 +257267,36 @@
255687
257267
  }
255688
257268
  ]
255689
257269
  },
257270
+ {
257271
+ "name": "DeleteLicenseAssetGroup",
257272
+ "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_DeleteLicenseAssetGroup.html",
257273
+ "permissionOnly": false,
257274
+ "description": "Grants permission to delete a license asset group",
257275
+ "accessLevel": "Write",
257276
+ "resourceTypes": [
257277
+ {
257278
+ "resourceType": "license-asset-group",
257279
+ "required": true,
257280
+ "conditionKeys": [],
257281
+ "dependentActions": []
257282
+ }
257283
+ ]
257284
+ },
257285
+ {
257286
+ "name": "DeleteLicenseAssetRuleset",
257287
+ "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_DeleteLicenseAssetRuleset.html",
257288
+ "permissionOnly": false,
257289
+ "description": "Grants permission to delete a license asset ruleset",
257290
+ "accessLevel": "Write",
257291
+ "resourceTypes": [
257292
+ {
257293
+ "resourceType": "license-asset-ruleset",
257294
+ "required": true,
257295
+ "conditionKeys": [],
257296
+ "dependentActions": []
257297
+ }
257298
+ ]
257299
+ },
255690
257300
  {
255691
257301
  "name": "DeleteLicenseConfiguration",
255692
257302
  "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_DeleteLicenseConfiguration.html",
@@ -255792,6 +257402,36 @@
255792
257402
  }
255793
257403
  ]
255794
257404
  },
257405
+ {
257406
+ "name": "GetLicenseAssetGroup",
257407
+ "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_GetLicenseAssetGroup.html",
257408
+ "permissionOnly": false,
257409
+ "description": "Grants permission to get a license asset group",
257410
+ "accessLevel": "Read",
257411
+ "resourceTypes": [
257412
+ {
257413
+ "resourceType": "license-asset-group",
257414
+ "required": true,
257415
+ "conditionKeys": [],
257416
+ "dependentActions": []
257417
+ }
257418
+ ]
257419
+ },
257420
+ {
257421
+ "name": "GetLicenseAssetRuleset",
257422
+ "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_GetLicenseAssetRuleset.html",
257423
+ "permissionOnly": false,
257424
+ "description": "Grants permission to get a license asset ruleset",
257425
+ "accessLevel": "Read",
257426
+ "resourceTypes": [
257427
+ {
257428
+ "resourceType": "license-asset-ruleset",
257429
+ "required": true,
257430
+ "conditionKeys": [],
257431
+ "dependentActions": []
257432
+ }
257433
+ ]
257434
+ },
255795
257435
  {
255796
257436
  "name": "GetLicenseConfiguration",
255797
257437
  "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_GetLicenseConfiguration.html",
@@ -255867,6 +257507,21 @@
255867
257507
  }
255868
257508
  ]
255869
257509
  },
257510
+ {
257511
+ "name": "ListAssetsForLicenseAssetGroup",
257512
+ "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_ListAssetsForLicenseAssetGroup.html",
257513
+ "permissionOnly": false,
257514
+ "description": "Grants permission to list assets for a license asset group",
257515
+ "accessLevel": "List",
257516
+ "resourceTypes": [
257517
+ {
257518
+ "resourceType": "license-asset-group",
257519
+ "required": true,
257520
+ "conditionKeys": [],
257521
+ "dependentActions": []
257522
+ }
257523
+ ]
257524
+ },
255870
257525
  {
255871
257526
  "name": "ListAssociationsForLicenseConfiguration",
255872
257527
  "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_ListAssociationsForLicenseConfiguration.html",
@@ -255912,12 +257567,57 @@
255912
257567
  }
255913
257568
  ]
255914
257569
  },
257570
+ {
257571
+ "name": "ListLicenseAssetGroups",
257572
+ "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_ListLicenseAssetGroups.html",
257573
+ "permissionOnly": false,
257574
+ "description": "Grants permission to list license asset groups",
257575
+ "accessLevel": "List",
257576
+ "resourceTypes": [
257577
+ {
257578
+ "resourceType": "license-asset-group",
257579
+ "required": false,
257580
+ "conditionKeys": [],
257581
+ "dependentActions": []
257582
+ }
257583
+ ]
257584
+ },
257585
+ {
257586
+ "name": "ListLicenseAssetRulesets",
257587
+ "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_ListLicenseAssetRulesets.html",
257588
+ "permissionOnly": false,
257589
+ "description": "Grants permission to list license asset rulesets",
257590
+ "accessLevel": "List",
257591
+ "resourceTypes": [
257592
+ {
257593
+ "resourceType": "license-asset-ruleset",
257594
+ "required": false,
257595
+ "conditionKeys": [],
257596
+ "dependentActions": []
257597
+ }
257598
+ ]
257599
+ },
255915
257600
  {
255916
257601
  "name": "ListLicenseConfigurations",
255917
257602
  "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_ListLicenseConfigurations.html",
255918
257603
  "permissionOnly": false,
255919
257604
  "description": "Grants permission to list license configurations",
255920
- "accessLevel": "Read",
257605
+ "accessLevel": "List",
257606
+ "resourceTypes": [
257607
+ {
257608
+ "resourceType": "",
257609
+ "required": false,
257610
+ "conditionKeys": [],
257611
+ "dependentActions": []
257612
+ }
257613
+ ]
257614
+ },
257615
+ {
257616
+ "name": "ListLicenseConfigurationsForOrganization",
257617
+ "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_ListLicenseConfigurationsForOrganization.html",
257618
+ "permissionOnly": false,
257619
+ "description": "Grants permission to list license configurations for organization",
257620
+ "accessLevel": "List",
255921
257621
  "resourceTypes": [
255922
257622
  {
255923
257623
  "resourceType": "",
@@ -256096,6 +257796,18 @@
256096
257796
  "conditionKeys": [],
256097
257797
  "dependentActions": []
256098
257798
  },
257799
+ {
257800
+ "resourceType": "license-asset-group",
257801
+ "required": false,
257802
+ "conditionKeys": [],
257803
+ "dependentActions": []
257804
+ },
257805
+ {
257806
+ "resourceType": "license-asset-ruleset",
257807
+ "required": false,
257808
+ "conditionKeys": [],
257809
+ "dependentActions": []
257810
+ },
256099
257811
  {
256100
257812
  "resourceType": "license-configuration",
256101
257813
  "required": false,
@@ -256174,6 +257886,18 @@
256174
257886
  "conditionKeys": [],
256175
257887
  "dependentActions": []
256176
257888
  },
257889
+ {
257890
+ "resourceType": "license-asset-group",
257891
+ "required": false,
257892
+ "conditionKeys": [],
257893
+ "dependentActions": []
257894
+ },
257895
+ {
257896
+ "resourceType": "license-asset-ruleset",
257897
+ "required": false,
257898
+ "conditionKeys": [],
257899
+ "dependentActions": []
257900
+ },
256177
257901
  {
256178
257902
  "resourceType": "license-configuration",
256179
257903
  "required": false,
@@ -256216,6 +257940,18 @@
256216
257940
  "conditionKeys": [],
256217
257941
  "dependentActions": []
256218
257942
  },
257943
+ {
257944
+ "resourceType": "license-asset-group",
257945
+ "required": false,
257946
+ "conditionKeys": [],
257947
+ "dependentActions": []
257948
+ },
257949
+ {
257950
+ "resourceType": "license-asset-ruleset",
257951
+ "required": false,
257952
+ "conditionKeys": [],
257953
+ "dependentActions": []
257954
+ },
256219
257955
  {
256220
257956
  "resourceType": "license-configuration",
256221
257957
  "required": false,
@@ -256238,6 +257974,42 @@
256238
257974
  }
256239
257975
  ]
256240
257976
  },
257977
+ {
257978
+ "name": "UpdateLicenseAssetGroup",
257979
+ "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_UpdateLicenseAssetGroup.html",
257980
+ "permissionOnly": false,
257981
+ "description": "Grants permission to update a license asset group",
257982
+ "accessLevel": "Write",
257983
+ "resourceTypes": [
257984
+ {
257985
+ "resourceType": "license-asset-group",
257986
+ "required": true,
257987
+ "conditionKeys": [],
257988
+ "dependentActions": []
257989
+ },
257990
+ {
257991
+ "resourceType": "license-asset-ruleset",
257992
+ "required": true,
257993
+ "conditionKeys": [],
257994
+ "dependentActions": []
257995
+ }
257996
+ ]
257997
+ },
257998
+ {
257999
+ "name": "UpdateLicenseAssetRuleset",
258000
+ "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_UpdateLicenseAssetRuleset.html",
258001
+ "permissionOnly": false,
258002
+ "description": "Grants permission to update a license asset ruleset",
258003
+ "accessLevel": "Write",
258004
+ "resourceTypes": [
258005
+ {
258006
+ "resourceType": "license-asset-ruleset",
258007
+ "required": true,
258008
+ "conditionKeys": [],
258009
+ "dependentActions": []
258010
+ }
258011
+ ]
258012
+ },
256241
258013
  {
256242
258014
  "name": "UpdateLicenseConfiguration",
256243
258015
  "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_UpdateLicenseConfiguration.html",
@@ -256257,7 +258029,7 @@
256257
258029
  "name": "UpdateLicenseManagerReportGenerator",
256258
258030
  "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/APIReference/API_UpdateLicenseManagerReportGenerator.html",
256259
258031
  "permissionOnly": false,
256260
- "description": "Grants permission to update a report generator for a license configuration",
258032
+ "description": "Grants permission to update a report generator for supported license manager resources",
256261
258033
  "accessLevel": "Write",
256262
258034
  "resourceTypes": [
256263
258035
  {
@@ -256333,6 +258105,22 @@
256333
258105
  "aws:ResourceTag/${TagKey}",
256334
258106
  "license-manager:ResourceTag/${TagKey}"
256335
258107
  ]
258108
+ },
258109
+ {
258110
+ "name": "license-asset-ruleset",
258111
+ "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/userguide/license-asset-ruleset.html",
258112
+ "arnPattern": "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-ruleset:${LicenseAssetRulesetId}",
258113
+ "conditionKeys": [
258114
+ "aws:ResourceTag/${TagKey}"
258115
+ ]
258116
+ },
258117
+ {
258118
+ "name": "license-asset-group",
258119
+ "apiReferenceUrl": "https://docs.aws.amazon.com/license-manager/latest/userguide/license-asset-group.html",
258120
+ "arnPattern": "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-group:${LicenseAssetGroupId}",
258121
+ "conditionKeys": [
258122
+ "aws:ResourceTag/${TagKey}"
258123
+ ]
256336
258124
  }
256337
258125
  ],
256338
258126
  "conditionKeys": [
@@ -269915,6 +271703,44 @@
269915
271703
  }
269916
271704
  ]
269917
271705
  },
271706
+ {
271707
+ "name": "DescribeTopic",
271708
+ "apiReferenceUrl": "https://docs.aws.amazon.com/msk/1.0/apireference/clusters-clusterarn-topics-topicname.html",
271709
+ "permissionOnly": false,
271710
+ "description": "Grants permission to return metadata details about a specific Kafka topic",
271711
+ "accessLevel": "Read",
271712
+ "resourceTypes": [
271713
+ {
271714
+ "resourceType": "topic",
271715
+ "required": true,
271716
+ "conditionKeys": [],
271717
+ "dependentActions": [
271718
+ "kafka-cluster:Connect",
271719
+ "kafka-cluster:DescribeTopic",
271720
+ "kafka-cluster:DescribeTopicDynamicConfiguration"
271721
+ ]
271722
+ }
271723
+ ]
271724
+ },
271725
+ {
271726
+ "name": "DescribeTopicPartitions",
271727
+ "apiReferenceUrl": "https://docs.aws.amazon.com/msk/1.0/apireference/clusters-clusterarn-topics-topicname-partitions.html",
271728
+ "permissionOnly": false,
271729
+ "description": "Grants permission to list all partitions of a specific topic",
271730
+ "accessLevel": "Read",
271731
+ "resourceTypes": [
271732
+ {
271733
+ "resourceType": "topic",
271734
+ "required": true,
271735
+ "conditionKeys": [],
271736
+ "dependentActions": [
271737
+ "kafka-cluster:Connect",
271738
+ "kafka-cluster:DescribeTopic",
271739
+ "kafka-cluster:DescribeTopicDynamicConfiguration"
271740
+ ]
271741
+ }
271742
+ ]
271743
+ },
269918
271744
  {
269919
271745
  "name": "DescribeVpcConnection",
269920
271746
  "apiReferenceUrl": "https://docs.aws.amazon.com/msk/1.0/apireference/vpc-connection-arn.html#DescribeVpcConnection",
@@ -270155,6 +271981,24 @@
270155
271981
  }
270156
271982
  ]
270157
271983
  },
271984
+ {
271985
+ "name": "ListTopics",
271986
+ "apiReferenceUrl": "https://docs.aws.amazon.com/msk/1.0/apireference/clusters-clusterarn-topics.html",
271987
+ "permissionOnly": false,
271988
+ "description": "Grants permission to list all Kafka topics for a specified MSK cluster",
271989
+ "accessLevel": "List",
271990
+ "resourceTypes": [
271991
+ {
271992
+ "resourceType": "cluster",
271993
+ "required": true,
271994
+ "conditionKeys": [],
271995
+ "dependentActions": [
271996
+ "kafka-cluster:Connect",
271997
+ "kafka-cluster:DescribeTopic"
271998
+ ]
271999
+ }
272000
+ ]
272001
+ },
270158
272002
  {
270159
272003
  "name": "ListVpcConnections",
270160
272004
  "apiReferenceUrl": "https://docs.aws.amazon.com/msk/1.0/apireference/vpc-connections.html#ListVpcConnections",
@@ -270419,9 +272263,9 @@
270419
272263
  },
270420
272264
  {
270421
272265
  "name": "UpdateRebalancing",
270422
- "apiReferenceUrl": "https://docs.aws.amazon.com/msk/1.0/apireference/clusters-clusterarn.html#UpdateRebalancing",
272266
+ "apiReferenceUrl": "https://docs.aws.amazon.com/msk/1.0/apireference/clusters-clusterarn-rebalancing.html",
270423
272267
  "permissionOnly": false,
270424
- "description": "Grants permission to update the rebalancing status of the MSK cluster",
272268
+ "description": "Grants permission to update the intelligent rebalancing status of the MSK cluster",
270425
272269
  "accessLevel": "Write",
270426
272270
  "resourceTypes": [
270427
272271
  {
@@ -292157,6 +294001,30 @@
292157
294001
  }
292158
294002
  ]
292159
294003
  },
294004
+ {
294005
+ "name": "DescribeResponsibilityTransfer",
294006
+ "apiReferenceUrl": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeResponsibilityTransfer.html",
294007
+ "permissionOnly": false,
294008
+ "description": "Grants permission to retrieve details about a previously responsibility transfer",
294009
+ "accessLevel": "Read",
294010
+ "resourceTypes": [
294011
+ {
294012
+ "resourceType": "responsibilitytransfer",
294013
+ "required": true,
294014
+ "conditionKeys": [],
294015
+ "dependentActions": []
294016
+ },
294017
+ {
294018
+ "resourceType": "",
294019
+ "required": false,
294020
+ "conditionKeys": [
294021
+ "organizations:TransferType",
294022
+ "organizations:TransferDirection"
294023
+ ],
294024
+ "dependentActions": []
294025
+ }
294026
+ ]
294027
+ },
292160
294028
  {
292161
294029
  "name": "DetachPolicy",
292162
294030
  "apiReferenceUrl": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DetachPolicy.html",
@@ -292317,6 +294185,29 @@
292317
294185
  }
292318
294186
  ]
292319
294187
  },
294188
+ {
294189
+ "name": "InviteOrganizationToTransferResponsibility",
294190
+ "apiReferenceUrl": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_InviteOrganizationToTransferResponsibility.html",
294191
+ "permissionOnly": false,
294192
+ "description": "Grants permission to send an invitation to another AWS account, asking it to transfer a particular responsibility to your organization",
294193
+ "accessLevel": "Write",
294194
+ "resourceTypes": [
294195
+ {
294196
+ "resourceType": "account",
294197
+ "required": false,
294198
+ "conditionKeys": [],
294199
+ "dependentActions": []
294200
+ },
294201
+ {
294202
+ "resourceType": "",
294203
+ "required": false,
294204
+ "conditionKeys": [
294205
+ "organizations:TransferType"
294206
+ ],
294207
+ "dependentActions": []
294208
+ }
294209
+ ]
294210
+ },
292320
294211
  {
292321
294212
  "name": "LeaveOrganization",
292322
294213
  "apiReferenceUrl": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_LeaveOrganization.html",
@@ -292521,6 +294412,24 @@
292521
294412
  }
292522
294413
  ]
292523
294414
  },
294415
+ {
294416
+ "name": "ListInboundResponsibilityTransfers",
294417
+ "apiReferenceUrl": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListInboundResponsibilityTransfers.html",
294418
+ "permissionOnly": false,
294419
+ "description": "Grants permission to list all responsibilities of a particular type transfered to your organization",
294420
+ "accessLevel": "List",
294421
+ "resourceTypes": [
294422
+ {
294423
+ "resourceType": "",
294424
+ "required": false,
294425
+ "conditionKeys": [
294426
+ "organizations:TransferType",
294427
+ "organizations:TransferDirection"
294428
+ ],
294429
+ "dependentActions": []
294430
+ }
294431
+ ]
294432
+ },
292524
294433
  {
292525
294434
  "name": "ListOrganizationalUnitsForParent",
292526
294435
  "apiReferenceUrl": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListOrganizationalUnitsForParent.html",
@@ -292542,6 +294451,24 @@
292542
294451
  }
292543
294452
  ]
292544
294453
  },
294454
+ {
294455
+ "name": "ListOutboundResponsibilityTransfers",
294456
+ "apiReferenceUrl": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListOutboundResponsibilityTransfers.html",
294457
+ "permissionOnly": false,
294458
+ "description": "Grants permission to list all responsibilities of a particular type transfered to another organization",
294459
+ "accessLevel": "List",
294460
+ "resourceTypes": [
294461
+ {
294462
+ "resourceType": "",
294463
+ "required": false,
294464
+ "conditionKeys": [
294465
+ "organizations:TransferType",
294466
+ "organizations:TransferDirection"
294467
+ ],
294468
+ "dependentActions": []
294469
+ }
294470
+ ]
294471
+ },
292545
294472
  {
292546
294473
  "name": "ListParents",
292547
294474
  "apiReferenceUrl": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListParents.html",
@@ -292661,6 +294588,12 @@
292661
294588
  "conditionKeys": [],
292662
294589
  "dependentActions": []
292663
294590
  },
294591
+ {
294592
+ "resourceType": "responsibilitytransfer",
294593
+ "required": false,
294594
+ "conditionKeys": [],
294595
+ "dependentActions": []
294596
+ },
292664
294597
  {
292665
294598
  "resourceType": "root",
292666
294599
  "required": false,
@@ -292822,6 +294755,15 @@
292822
294755
  "conditionKeys": [],
292823
294756
  "dependentActions": []
292824
294757
  },
294758
+ {
294759
+ "resourceType": "responsibilitytransfer",
294760
+ "required": false,
294761
+ "conditionKeys": [
294762
+ "organizations:TransferType",
294763
+ "organizations:TransferDirection"
294764
+ ],
294765
+ "dependentActions": []
294766
+ },
292825
294767
  {
292826
294768
  "resourceType": "root",
292827
294769
  "required": false,
@@ -292840,6 +294782,30 @@
292840
294782
  }
292841
294783
  ]
292842
294784
  },
294785
+ {
294786
+ "name": "TerminateResponsibilityTransfer",
294787
+ "apiReferenceUrl": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_TerminateResponsibilityTransfer.html",
294788
+ "permissionOnly": false,
294789
+ "description": "Grants permission to end the transfer for a responsibility to or from your organization",
294790
+ "accessLevel": "Write",
294791
+ "resourceTypes": [
294792
+ {
294793
+ "resourceType": "responsibilitytransfer",
294794
+ "required": true,
294795
+ "conditionKeys": [],
294796
+ "dependentActions": []
294797
+ },
294798
+ {
294799
+ "resourceType": "",
294800
+ "required": false,
294801
+ "conditionKeys": [
294802
+ "organizations:TransferType",
294803
+ "organizations:TransferDirection"
294804
+ ],
294805
+ "dependentActions": []
294806
+ }
294807
+ ]
294808
+ },
292843
294809
  {
292844
294810
  "name": "UntagResource",
292845
294811
  "apiReferenceUrl": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_UntagResource.html",
@@ -292871,6 +294837,15 @@
292871
294837
  "conditionKeys": [],
292872
294838
  "dependentActions": []
292873
294839
  },
294840
+ {
294841
+ "resourceType": "responsibilitytransfer",
294842
+ "required": false,
294843
+ "conditionKeys": [
294844
+ "organizations:TransferType",
294845
+ "organizations:TransferDirection"
294846
+ ],
294847
+ "dependentActions": []
294848
+ },
292874
294849
  {
292875
294850
  "resourceType": "root",
292876
294851
  "required": false,
@@ -292925,6 +294900,30 @@
292925
294900
  "dependentActions": []
292926
294901
  }
292927
294902
  ]
294903
+ },
294904
+ {
294905
+ "name": "UpdateResponsibilityTransfer",
294906
+ "apiReferenceUrl": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_UpdateResponsibilityTransfer.html",
294907
+ "permissionOnly": false,
294908
+ "description": "Grants permission to rename a responsibility transfer to or from your organization",
294909
+ "accessLevel": "Write",
294910
+ "resourceTypes": [
294911
+ {
294912
+ "resourceType": "responsibilitytransfer",
294913
+ "required": true,
294914
+ "conditionKeys": [],
294915
+ "dependentActions": []
294916
+ },
294917
+ {
294918
+ "resourceType": "",
294919
+ "required": false,
294920
+ "conditionKeys": [
294921
+ "organizations:TransferType",
294922
+ "organizations:TransferDirection"
294923
+ ],
294924
+ "dependentActions": []
294925
+ }
294926
+ ]
292928
294927
  }
292929
294928
  ],
292930
294929
  "resourceTypes": [
@@ -292985,6 +294984,14 @@
292985
294984
  "conditionKeys": [
292986
294985
  "aws:ResourceTag/${TagKey}"
292987
294986
  ]
294987
+ },
294988
+ {
294989
+ "name": "responsibilitytransfer",
294990
+ "apiReferenceUrl": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions_overview.html",
294991
+ "arnPattern": "arn:${Partition}:organizations::${Account}:transfer/o-${OrganizationId}/${TransferType}/${TransferDirection}/rt-${ResponsibilityTransferId}",
294992
+ "conditionKeys": [
294993
+ "aws:ResourceTag/${TagKey}"
294994
+ ]
292988
294995
  }
292989
294996
  ],
292990
294997
  "conditionKeys": [
@@ -293017,6 +295024,18 @@
293017
295024
  "apiReferenceUrl": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions_overview.html#orgs_permissions_conditionkeys",
293018
295025
  "description": "Filters access by the specified service principal names",
293019
295026
  "type": "String"
295027
+ },
295028
+ {
295029
+ "name": "organizations:TransferDirection",
295030
+ "apiReferenceUrl": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions_overview.html#orgs_permissions_conditionkeys",
295031
+ "description": "Filters access by the specified responsibility transfer by the direction",
295032
+ "type": "String"
295033
+ },
295034
+ {
295035
+ "name": "organizations:TransferType",
295036
+ "apiReferenceUrl": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions_overview.html#orgs_permissions_conditionkeys",
295037
+ "description": "Filters access by the specified responsibility transfer type names",
295038
+ "type": "String"
293020
295039
  }
293021
295040
  ]
293022
295041
  },
@@ -294834,73 +296853,89 @@
294834
296853
  ]
294835
296854
  },
294836
296855
  {
294837
- "name": "AWS Partner central account management",
294838
- "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awspartnercentralaccountmanagement.html",
294839
- "servicePrefix": "partnercentral-account-management",
296856
+ "name": "AWS Partner Central",
296857
+ "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awspartnercentral.html",
296858
+ "servicePrefix": "partnercentral",
294840
296859
  "actions": [
294841
296860
  {
294842
- "name": "AssociatePartnerAccount",
294843
- "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/getting-started/controlling-access-in-apc-account-management.html",
294844
- "permissionOnly": true,
294845
- "description": "Grants permission to associate Partner account to AWS account",
296861
+ "name": "AcceptChannelHandshake",
296862
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_AcceptChannelHandshake.html",
296863
+ "permissionOnly": false,
296864
+ "description": "Grants permission to accept channel handshakes in AWS Partner Central",
294846
296865
  "accessLevel": "Write",
294847
296866
  "resourceTypes": [
296867
+ {
296868
+ "resourceType": "ChannelHandshake",
296869
+ "required": true,
296870
+ "conditionKeys": [],
296871
+ "dependentActions": []
296872
+ },
294848
296873
  {
294849
296874
  "resourceType": "",
294850
296875
  "required": false,
294851
- "conditionKeys": [],
296876
+ "conditionKeys": [
296877
+ "partnercentral:Catalog",
296878
+ "partnercentral:ChannelHandshakeType"
296879
+ ],
294852
296880
  "dependentActions": []
294853
296881
  }
294854
296882
  ]
294855
296883
  },
294856
296884
  {
294857
- "name": "AssociatePartnerUser",
294858
- "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/getting-started/controlling-access-in-apc-account-management.html",
296885
+ "name": "AcceptEngagementInvitation",
296886
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_AcceptEngagementInvitation.html",
294859
296887
  "permissionOnly": false,
294860
- "description": "Grants permission to associate Partner user to IAM role",
296888
+ "description": "Grants permission to accept Engagement Invitations on AWS Partner Central",
294861
296889
  "accessLevel": "Write",
294862
296890
  "resourceTypes": [
296891
+ {
296892
+ "resourceType": "engagement-invitation",
296893
+ "required": true,
296894
+ "conditionKeys": [],
296895
+ "dependentActions": []
296896
+ },
294863
296897
  {
294864
296898
  "resourceType": "",
294865
296899
  "required": false,
294866
- "conditionKeys": [],
296900
+ "conditionKeys": [
296901
+ "partnercentral:Catalog"
296902
+ ],
294867
296903
  "dependentActions": []
294868
296904
  }
294869
296905
  ]
294870
296906
  },
294871
296907
  {
294872
- "name": "DisassociatePartnerUser",
294873
- "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/getting-started/controlling-access-in-apc-account-management.html",
296908
+ "name": "AssignOpportunity",
296909
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_AssignOpportunity.html",
294874
296910
  "permissionOnly": false,
294875
- "description": "Grants permission to disassociate Partner user to IAM role",
296911
+ "description": "Grants permission to assign Opportunities on AWS Partner Central",
294876
296912
  "accessLevel": "Write",
294877
296913
  "resourceTypes": [
296914
+ {
296915
+ "resourceType": "Opportunity",
296916
+ "required": true,
296917
+ "conditionKeys": [],
296918
+ "dependentActions": []
296919
+ },
294878
296920
  {
294879
296921
  "resourceType": "",
294880
296922
  "required": false,
294881
- "conditionKeys": [],
296923
+ "conditionKeys": [
296924
+ "partnercentral:Catalog"
296925
+ ],
294882
296926
  "dependentActions": []
294883
296927
  }
294884
296928
  ]
294885
- }
294886
- ],
294887
- "resourceTypes": [],
294888
- "conditionKeys": []
294889
- },
294890
- {
294891
- "name": "AWS Partner Central Selling",
294892
- "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awspartnercentralselling.html",
294893
- "servicePrefix": "partnercentral",
294894
- "actions": [
296929
+ },
294895
296930
  {
294896
- "name": "AcceptEngagementInvitation",
294897
- "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_AcceptEngagementInvitation.html",
296931
+ "name": "AssociateOpportunity",
296932
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_AssociateOpportunity.html",
294898
296933
  "permissionOnly": false,
294899
- "description": "Grants permission to accept Engagement Invitations on AWS Partner Central",
296934
+ "description": "Grants permission to associate Opportunities on AWS Partner Central with other entities",
294900
296935
  "accessLevel": "Write",
294901
296936
  "resourceTypes": [
294902
296937
  {
294903
- "resourceType": "engagement-invitation",
296938
+ "resourceType": "Opportunity",
294904
296939
  "required": true,
294905
296940
  "conditionKeys": [],
294906
296941
  "dependentActions": []
@@ -294909,21 +296944,22 @@
294909
296944
  "resourceType": "",
294910
296945
  "required": false,
294911
296946
  "conditionKeys": [
294912
- "partnercentral:Catalog"
296947
+ "partnercentral:Catalog",
296948
+ "partnercentral:RelatedEntityType"
294913
296949
  ],
294914
296950
  "dependentActions": []
294915
296951
  }
294916
296952
  ]
294917
296953
  },
294918
296954
  {
294919
- "name": "AssignOpportunity",
294920
- "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_AssignOpportunity.html",
296955
+ "name": "CancelChannelHandshake",
296956
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_CancelChannelHandshake.html",
294921
296957
  "permissionOnly": false,
294922
- "description": "Grants permission to assign Opportunities on AWS Partner Central",
296958
+ "description": "Grants permission to cancel channel handshakes in AWS Partner Central",
294923
296959
  "accessLevel": "Write",
294924
296960
  "resourceTypes": [
294925
296961
  {
294926
- "resourceType": "Opportunity",
296962
+ "resourceType": "ChannelHandshake",
294927
296963
  "required": true,
294928
296964
  "conditionKeys": [],
294929
296965
  "dependentActions": []
@@ -294932,22 +296968,30 @@
294932
296968
  "resourceType": "",
294933
296969
  "required": false,
294934
296970
  "conditionKeys": [
294935
- "partnercentral:Catalog"
296971
+ "aws:ResourceTag/${TagKey}",
296972
+ "partnercentral:Catalog",
296973
+ "partnercentral:ChannelHandshakeType"
294936
296974
  ],
294937
296975
  "dependentActions": []
294938
296976
  }
294939
296977
  ]
294940
296978
  },
294941
296979
  {
294942
- "name": "AssociateOpportunity",
294943
- "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_AssociateOpportunity.html",
296980
+ "name": "CreateChannelHandshake",
296981
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_CreateChannelHandshake.html",
294944
296982
  "permissionOnly": false,
294945
- "description": "Grants permission to associate Opportunities on AWS Partner Central with other entities",
296983
+ "description": "Grants permission to create channel handshakes in AWS Partner Central",
294946
296984
  "accessLevel": "Write",
294947
296985
  "resourceTypes": [
294948
296986
  {
294949
- "resourceType": "Opportunity",
294950
- "required": true,
296987
+ "resourceType": "ProgramManagementAccount",
296988
+ "required": false,
296989
+ "conditionKeys": [],
296990
+ "dependentActions": []
296991
+ },
296992
+ {
296993
+ "resourceType": "Relationship",
296994
+ "required": false,
294951
296995
  "conditionKeys": [],
294952
296996
  "dependentActions": []
294953
296997
  },
@@ -294955,8 +296999,11 @@
294955
296999
  "resourceType": "",
294956
297000
  "required": false,
294957
297001
  "conditionKeys": [
297002
+ "aws:RequestTag/${TagKey}",
297003
+ "aws:ResourceTag/${TagKey}",
297004
+ "aws:TagKeys",
294958
297005
  "partnercentral:Catalog",
294959
- "partnercentral:RelatedEntityType"
297006
+ "partnercentral:ChannelHandshakeType"
294960
297007
  ],
294961
297008
  "dependentActions": []
294962
297009
  }
@@ -295033,6 +297080,52 @@
295033
297080
  }
295034
297081
  ]
295035
297082
  },
297083
+ {
297084
+ "name": "CreateProgramManagementAccount",
297085
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_CreateProgramManagementAccount.html",
297086
+ "permissionOnly": false,
297087
+ "description": "Grants permission to create program management accounts in AWS Partner Central",
297088
+ "accessLevel": "Write",
297089
+ "resourceTypes": [
297090
+ {
297091
+ "resourceType": "",
297092
+ "required": false,
297093
+ "conditionKeys": [
297094
+ "aws:RequestTag/${TagKey}",
297095
+ "aws:ResourceTag/${TagKey}",
297096
+ "aws:TagKeys",
297097
+ "partnercentral:Catalog"
297098
+ ],
297099
+ "dependentActions": []
297100
+ }
297101
+ ]
297102
+ },
297103
+ {
297104
+ "name": "CreateRelationship",
297105
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_CreateRelationship.html",
297106
+ "permissionOnly": false,
297107
+ "description": "Grants permission to create relationships in AWS Partner Central",
297108
+ "accessLevel": "Write",
297109
+ "resourceTypes": [
297110
+ {
297111
+ "resourceType": "ProgramManagementAccount",
297112
+ "required": true,
297113
+ "conditionKeys": [],
297114
+ "dependentActions": []
297115
+ },
297116
+ {
297117
+ "resourceType": "",
297118
+ "required": false,
297119
+ "conditionKeys": [
297120
+ "aws:RequestTag/${TagKey}",
297121
+ "aws:ResourceTag/${TagKey}",
297122
+ "aws:TagKeys",
297123
+ "partnercentral:Catalog"
297124
+ ],
297125
+ "dependentActions": []
297126
+ }
297127
+ ]
297128
+ },
295036
297129
  {
295037
297130
  "name": "CreateResourceSnapshot",
295038
297131
  "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_CreateResourceSnapshot.html",
@@ -295081,6 +297174,54 @@
295081
297174
  }
295082
297175
  ]
295083
297176
  },
297177
+ {
297178
+ "name": "DeleteProgramManagementAccount",
297179
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_DeleteProgramManagementAccount.html",
297180
+ "permissionOnly": false,
297181
+ "description": "Grants permission to delete program management accounts in AWS Partner Central",
297182
+ "accessLevel": "Write",
297183
+ "resourceTypes": [
297184
+ {
297185
+ "resourceType": "ProgramManagementAccount",
297186
+ "required": true,
297187
+ "conditionKeys": [],
297188
+ "dependentActions": []
297189
+ },
297190
+ {
297191
+ "resourceType": "",
297192
+ "required": false,
297193
+ "conditionKeys": [
297194
+ "aws:ResourceTag/${TagKey}",
297195
+ "partnercentral:Catalog"
297196
+ ],
297197
+ "dependentActions": []
297198
+ }
297199
+ ]
297200
+ },
297201
+ {
297202
+ "name": "DeleteRelationship",
297203
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_DeleteRelationship.html",
297204
+ "permissionOnly": false,
297205
+ "description": "Grants permission to delete relationships in AWS Partner Central",
297206
+ "accessLevel": "Write",
297207
+ "resourceTypes": [
297208
+ {
297209
+ "resourceType": "Relationship",
297210
+ "required": true,
297211
+ "conditionKeys": [],
297212
+ "dependentActions": []
297213
+ },
297214
+ {
297215
+ "resourceType": "",
297216
+ "required": false,
297217
+ "conditionKeys": [
297218
+ "aws:ResourceTag/${TagKey}",
297219
+ "partnercentral:Catalog"
297220
+ ],
297221
+ "dependentActions": []
297222
+ }
297223
+ ]
297224
+ },
295084
297225
  {
295085
297226
  "name": "DeleteResourceSnapshotJob",
295086
297227
  "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_DeleteResourceSnapshotJob.html",
@@ -295220,6 +297361,47 @@
295220
297361
  }
295221
297362
  ]
295222
297363
  },
297364
+ {
297365
+ "name": "GetProgramManagementAccount",
297366
+ "apiReferenceUrl": "${UserGuideDocPage}controlling-access-in-aws-partner-central.html",
297367
+ "permissionOnly": true,
297368
+ "description": "Grants permission to retrieve program management account details in AWS Partner Central",
297369
+ "accessLevel": "Read",
297370
+ "resourceTypes": [
297371
+ {
297372
+ "resourceType": "",
297373
+ "required": false,
297374
+ "conditionKeys": [
297375
+ "partnercentral:Catalog"
297376
+ ],
297377
+ "dependentActions": []
297378
+ }
297379
+ ]
297380
+ },
297381
+ {
297382
+ "name": "GetRelationship",
297383
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_GetRelationship.html",
297384
+ "permissionOnly": false,
297385
+ "description": "Grants permission to retrieve relationship details in AWS Partner Central",
297386
+ "accessLevel": "Read",
297387
+ "resourceTypes": [
297388
+ {
297389
+ "resourceType": "Relationship",
297390
+ "required": true,
297391
+ "conditionKeys": [],
297392
+ "dependentActions": []
297393
+ },
297394
+ {
297395
+ "resourceType": "",
297396
+ "required": false,
297397
+ "conditionKeys": [
297398
+ "aws:ResourceTag/${TagKey}",
297399
+ "partnercentral:Catalog"
297400
+ ],
297401
+ "dependentActions": []
297402
+ }
297403
+ ]
297404
+ },
295223
297405
  {
295224
297406
  "name": "GetResourceSnapshot",
295225
297407
  "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_GetResourceSnapshot.html",
@@ -295270,7 +297452,7 @@
295270
297452
  "name": "GetSellingSystemSettings",
295271
297453
  "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_GetSellingSystemSettings.html",
295272
297454
  "permissionOnly": false,
295273
- "description": "Grants permission to retrieving system settings settings in AWS Partner Central",
297455
+ "description": "Grants permission to retrieving selling system settings in AWS Partner Central",
295274
297456
  "accessLevel": "Read",
295275
297457
  "resourceTypes": [
295276
297458
  {
@@ -295283,6 +297465,30 @@
295283
297465
  }
295284
297466
  ]
295285
297467
  },
297468
+ {
297469
+ "name": "ListChannelHandshakes",
297470
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_ListChannelHandshakes.html",
297471
+ "permissionOnly": false,
297472
+ "description": "Grants permission to list channel handshakes in AWS Partner Central",
297473
+ "accessLevel": "List",
297474
+ "resourceTypes": [
297475
+ {
297476
+ "resourceType": "ChannelHandshake",
297477
+ "required": true,
297478
+ "conditionKeys": [],
297479
+ "dependentActions": []
297480
+ },
297481
+ {
297482
+ "resourceType": "",
297483
+ "required": false,
297484
+ "conditionKeys": [
297485
+ "partnercentral:Catalog",
297486
+ "partnercentral:ChannelHandshakeType"
297487
+ ],
297488
+ "dependentActions": []
297489
+ }
297490
+ ]
297491
+ },
295286
297492
  {
295287
297493
  "name": "ListEngagementByAcceptingInvitationTasks",
295288
297494
  "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_ListEngagementByAcceptingInvitationTasks.html",
@@ -295414,6 +297620,52 @@
295414
297620
  }
295415
297621
  ]
295416
297622
  },
297623
+ {
297624
+ "name": "ListProgramManagementAccounts",
297625
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_ListProgramManagementAccounts.html",
297626
+ "permissionOnly": false,
297627
+ "description": "Grants permission to list program management accounts in AWS Partner Central",
297628
+ "accessLevel": "List",
297629
+ "resourceTypes": [
297630
+ {
297631
+ "resourceType": "ProgramManagementAccount",
297632
+ "required": true,
297633
+ "conditionKeys": [],
297634
+ "dependentActions": []
297635
+ },
297636
+ {
297637
+ "resourceType": "",
297638
+ "required": false,
297639
+ "conditionKeys": [
297640
+ "partnercentral:Catalog"
297641
+ ],
297642
+ "dependentActions": []
297643
+ }
297644
+ ]
297645
+ },
297646
+ {
297647
+ "name": "ListRelationships",
297648
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_ListRelationships.html",
297649
+ "permissionOnly": false,
297650
+ "description": "Grants permission to list relationships in AWS Partner Central",
297651
+ "accessLevel": "List",
297652
+ "resourceTypes": [
297653
+ {
297654
+ "resourceType": "Relationship",
297655
+ "required": true,
297656
+ "conditionKeys": [],
297657
+ "dependentActions": []
297658
+ },
297659
+ {
297660
+ "resourceType": "",
297661
+ "required": false,
297662
+ "conditionKeys": [
297663
+ "partnercentral:Catalog"
297664
+ ],
297665
+ "dependentActions": []
297666
+ }
297667
+ ]
297668
+ },
295417
297669
  {
295418
297670
  "name": "ListResourceSnapshotJobs",
295419
297671
  "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_ListResourceSnapshotJobs.html",
@@ -295436,7 +297688,7 @@
295436
297688
  "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_ListResourceSnapshots.html",
295437
297689
  "permissionOnly": false,
295438
297690
  "description": "Grants permission to listing resource snapshots in AWS Partner Central",
295439
- "accessLevel": "Read",
297691
+ "accessLevel": "List",
295440
297692
  "resourceTypes": [
295441
297693
  {
295442
297694
  "resourceType": "ResourceSnapshot",
@@ -295494,7 +297746,7 @@
295494
297746
  "name": "PutSellingSystemSettings",
295495
297747
  "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_PutSellingSystemSettings.html",
295496
297748
  "permissionOnly": false,
295497
- "description": "Grants permission to put system settings settings in AWS Partner Central",
297749
+ "description": "Grants permission to put selling system settings in AWS Partner Central",
295498
297750
  "accessLevel": "Write",
295499
297751
  "resourceTypes": [
295500
297752
  {
@@ -295505,6 +297757,30 @@
295505
297757
  }
295506
297758
  ]
295507
297759
  },
297760
+ {
297761
+ "name": "RejectChannelHandshake",
297762
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_RejectChannelHandshake.html",
297763
+ "permissionOnly": false,
297764
+ "description": "Grants permission to reject channel handshakes in AWS Partner Central",
297765
+ "accessLevel": "Write",
297766
+ "resourceTypes": [
297767
+ {
297768
+ "resourceType": "ChannelHandshake",
297769
+ "required": true,
297770
+ "conditionKeys": [],
297771
+ "dependentActions": []
297772
+ },
297773
+ {
297774
+ "resourceType": "",
297775
+ "required": false,
297776
+ "conditionKeys": [
297777
+ "partnercentral:Catalog",
297778
+ "partnercentral:ChannelHandshakeType"
297779
+ ],
297780
+ "dependentActions": []
297781
+ }
297782
+ ]
297783
+ },
295508
297784
  {
295509
297785
  "name": "RejectEngagementInvitation",
295510
297786
  "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_RejectEngagementInvitation.html",
@@ -295670,12 +297946,30 @@
295670
297946
  "description": "Grants permission to add new tags to a resource. Supported resource: ResourceSnapshotJob",
295671
297947
  "accessLevel": "Tagging",
295672
297948
  "resourceTypes": [
297949
+ {
297950
+ "resourceType": "ChannelHandshake",
297951
+ "required": false,
297952
+ "conditionKeys": [],
297953
+ "dependentActions": []
297954
+ },
295673
297955
  {
295674
297956
  "resourceType": "Opportunity",
295675
297957
  "required": false,
295676
297958
  "conditionKeys": [],
295677
297959
  "dependentActions": []
295678
297960
  },
297961
+ {
297962
+ "resourceType": "ProgramManagementAccount",
297963
+ "required": false,
297964
+ "conditionKeys": [],
297965
+ "dependentActions": []
297966
+ },
297967
+ {
297968
+ "resourceType": "Relationship",
297969
+ "required": false,
297970
+ "conditionKeys": [],
297971
+ "dependentActions": []
297972
+ },
295679
297973
  {
295680
297974
  "resourceType": "resource-snapshot-job",
295681
297975
  "required": false,
@@ -295702,12 +297996,30 @@
295702
297996
  "description": "Grants permission to remove tags from a resource. Supported resource: ResourceSnapshotJob",
295703
297997
  "accessLevel": "Tagging",
295704
297998
  "resourceTypes": [
297999
+ {
298000
+ "resourceType": "ChannelHandshake",
298001
+ "required": false,
298002
+ "conditionKeys": [],
298003
+ "dependentActions": []
298004
+ },
295705
298005
  {
295706
298006
  "resourceType": "Opportunity",
295707
298007
  "required": false,
295708
298008
  "conditionKeys": [],
295709
298009
  "dependentActions": []
295710
298010
  },
298011
+ {
298012
+ "resourceType": "ProgramManagementAccount",
298013
+ "required": false,
298014
+ "conditionKeys": [],
298015
+ "dependentActions": []
298016
+ },
298017
+ {
298018
+ "resourceType": "Relationship",
298019
+ "required": false,
298020
+ "conditionKeys": [],
298021
+ "dependentActions": []
298022
+ },
295711
298023
  {
295712
298024
  "resourceType": "resource-snapshot-job",
295713
298025
  "required": false,
@@ -295748,6 +298060,54 @@
295748
298060
  "dependentActions": []
295749
298061
  }
295750
298062
  ]
298063
+ },
298064
+ {
298065
+ "name": "UpdateProgramManagementAccount",
298066
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_UpdateProgramManagementAccount.html",
298067
+ "permissionOnly": false,
298068
+ "description": "Grants permission to update program management accounts in AWS Partner Central",
298069
+ "accessLevel": "Write",
298070
+ "resourceTypes": [
298071
+ {
298072
+ "resourceType": "ProgramManagementAccount",
298073
+ "required": true,
298074
+ "conditionKeys": [],
298075
+ "dependentActions": []
298076
+ },
298077
+ {
298078
+ "resourceType": "",
298079
+ "required": false,
298080
+ "conditionKeys": [
298081
+ "aws:ResourceTag/${TagKey}",
298082
+ "partnercentral:Catalog"
298083
+ ],
298084
+ "dependentActions": []
298085
+ }
298086
+ ]
298087
+ },
298088
+ {
298089
+ "name": "UpdateRelationship",
298090
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_UpdateRelationship.html",
298091
+ "permissionOnly": false,
298092
+ "description": "Grants permission to update relationships in AWS Partner Central",
298093
+ "accessLevel": "Write",
298094
+ "resourceTypes": [
298095
+ {
298096
+ "resourceType": "Relationship",
298097
+ "required": true,
298098
+ "conditionKeys": [],
298099
+ "dependentActions": []
298100
+ },
298101
+ {
298102
+ "resourceType": "",
298103
+ "required": false,
298104
+ "conditionKeys": [
298105
+ "aws:ResourceTag/${TagKey}",
298106
+ "partnercentral:Catalog"
298107
+ ],
298108
+ "dependentActions": []
298109
+ }
298110
+ ]
295751
298111
  }
295752
298112
  ],
295753
298113
  "resourceTypes": [
@@ -295802,6 +298162,30 @@
295802
298162
  "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_ListSolutions.html",
295803
298163
  "arnPattern": "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/solution/${Identifier}",
295804
298164
  "conditionKeys": []
298165
+ },
298166
+ {
298167
+ "name": "ProgramManagementAccount",
298168
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/working-with-channel-management.html",
298169
+ "arnPattern": "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/program-management-account/${Identifier}",
298170
+ "conditionKeys": [
298171
+ "aws:ResourceTag/${TagKey}"
298172
+ ]
298173
+ },
298174
+ {
298175
+ "name": "Relationship",
298176
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/working-with-channel-management.html",
298177
+ "arnPattern": "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/program-management-account/${ProgramManagementAccountId}/relationship/${RelationshipId}",
298178
+ "conditionKeys": [
298179
+ "aws:ResourceTag/${TagKey}"
298180
+ ]
298181
+ },
298182
+ {
298183
+ "name": "ChannelHandshake",
298184
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/working-with-channel-management.html",
298185
+ "arnPattern": "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/channel-handshake/${Identifier}",
298186
+ "conditionKeys": [
298187
+ "aws:ResourceTag/${TagKey}"
298188
+ ]
295805
298189
  }
295806
298190
  ],
295807
298191
  "conditionKeys": [
@@ -295825,18 +298209,78 @@
295825
298209
  },
295826
298210
  {
295827
298211
  "name": "partnercentral:Catalog",
295828
- "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/access-control.html#managing-permissions-with-condition-keyspage.html#Catalog",
295829
- "description": "Filters access by a specific Catalog. Accepted values: [AWS, Sandbox]",
298212
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/access-control.html#managing-permissions-with-condition-keys",
298213
+ "description": "Filters access by a specific Catalog",
298214
+ "type": "String"
298215
+ },
298216
+ {
298217
+ "name": "partnercentral:ChannelHandshakeType",
298218
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/access-control.html#managing-permissions-with-condition-keys",
298219
+ "description": "Filters access by channel handshake types",
295830
298220
  "type": "String"
295831
298221
  },
295832
298222
  {
295833
298223
  "name": "partnercentral:RelatedEntityType",
295834
- "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/access-control.html#managing-permissions-with-condition-keyspage.html#RelatedEntityType",
295835
- "description": "Filters access by entity types for Opportunity association. Accepted values: [Solutions, AwsProducts, AwsMarketplaceOffers]",
298224
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/access-control.html#managing-permissions-with-condition-keys",
298225
+ "description": "Filters access by entity types for Opportunity association",
295836
298226
  "type": "String"
295837
298227
  }
295838
298228
  ]
295839
298229
  },
298230
+ {
298231
+ "name": "AWS Partner central account management",
298232
+ "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awspartnercentralaccountmanagement.html",
298233
+ "servicePrefix": "partnercentral-account-management",
298234
+ "actions": [
298235
+ {
298236
+ "name": "AssociatePartnerAccount",
298237
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/getting-started/controlling-access-in-apc-account-management.html",
298238
+ "permissionOnly": true,
298239
+ "description": "Grants permission to associate Partner account to AWS account",
298240
+ "accessLevel": "Write",
298241
+ "resourceTypes": [
298242
+ {
298243
+ "resourceType": "",
298244
+ "required": false,
298245
+ "conditionKeys": [],
298246
+ "dependentActions": []
298247
+ }
298248
+ ]
298249
+ },
298250
+ {
298251
+ "name": "AssociatePartnerUser",
298252
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/getting-started/controlling-access-in-apc-account-management.html",
298253
+ "permissionOnly": false,
298254
+ "description": "Grants permission to associate Partner user to IAM role",
298255
+ "accessLevel": "Write",
298256
+ "resourceTypes": [
298257
+ {
298258
+ "resourceType": "",
298259
+ "required": false,
298260
+ "conditionKeys": [],
298261
+ "dependentActions": []
298262
+ }
298263
+ ]
298264
+ },
298265
+ {
298266
+ "name": "DisassociatePartnerUser",
298267
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/getting-started/controlling-access-in-apc-account-management.html",
298268
+ "permissionOnly": false,
298269
+ "description": "Grants permission to disassociate Partner user to IAM role",
298270
+ "accessLevel": "Write",
298271
+ "resourceTypes": [
298272
+ {
298273
+ "resourceType": "",
298274
+ "required": false,
298275
+ "conditionKeys": [],
298276
+ "dependentActions": []
298277
+ }
298278
+ ]
298279
+ }
298280
+ ],
298281
+ "resourceTypes": [],
298282
+ "conditionKeys": []
298283
+ },
295840
298284
  {
295841
298285
  "name": "AWS Payment Cryptography",
295842
298286
  "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awspaymentcryptography.html",
@@ -302370,6 +304814,142 @@
302370
304814
  "resourceTypes": [],
302371
304815
  "conditionKeys": []
302372
304816
  },
304817
+ {
304818
+ "name": "AWS PricingPlanManager Service",
304819
+ "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awspricingplanmanagerservice.html",
304820
+ "servicePrefix": "pricingplanmanager",
304821
+ "actions": [
304822
+ {
304823
+ "name": "AssociateResourcesToSubscription",
304824
+ "apiReferenceUrl": "https://docs.aws.amazon.com/PricingPlanManager/latest/UserGuide/security-pricing-plan.html",
304825
+ "permissionOnly": false,
304826
+ "description": "Grants permission to associate resources with a subscription",
304827
+ "accessLevel": "Write",
304828
+ "resourceTypes": [
304829
+ {
304830
+ "resourceType": "",
304831
+ "required": false,
304832
+ "conditionKeys": [],
304833
+ "dependentActions": []
304834
+ }
304835
+ ]
304836
+ },
304837
+ {
304838
+ "name": "CancelSubscription",
304839
+ "apiReferenceUrl": "https://docs.aws.amazon.com/PricingPlanManager/latest/UserGuide/security-pricing-plan.html",
304840
+ "permissionOnly": false,
304841
+ "description": "Grants permission to cancel a subscription",
304842
+ "accessLevel": "Write",
304843
+ "resourceTypes": [
304844
+ {
304845
+ "resourceType": "",
304846
+ "required": false,
304847
+ "conditionKeys": [],
304848
+ "dependentActions": []
304849
+ }
304850
+ ]
304851
+ },
304852
+ {
304853
+ "name": "CancelSubscriptionChange",
304854
+ "apiReferenceUrl": "https://docs.aws.amazon.com/PricingPlanManager/latest/UserGuide/security-pricing-plan.html",
304855
+ "permissionOnly": false,
304856
+ "description": "Grants permission to cancel a pending a change for a subscription",
304857
+ "accessLevel": "Write",
304858
+ "resourceTypes": [
304859
+ {
304860
+ "resourceType": "",
304861
+ "required": false,
304862
+ "conditionKeys": [],
304863
+ "dependentActions": []
304864
+ }
304865
+ ]
304866
+ },
304867
+ {
304868
+ "name": "CreateSubscription",
304869
+ "apiReferenceUrl": "https://docs.aws.amazon.com/PricingPlanManager/latest/UserGuide/security-pricing-plan.html",
304870
+ "permissionOnly": false,
304871
+ "description": "Grants permission to create a subscription",
304872
+ "accessLevel": "Write",
304873
+ "resourceTypes": [
304874
+ {
304875
+ "resourceType": "",
304876
+ "required": false,
304877
+ "conditionKeys": [],
304878
+ "dependentActions": []
304879
+ }
304880
+ ]
304881
+ },
304882
+ {
304883
+ "name": "DisassociateResourcesFromSubscription",
304884
+ "apiReferenceUrl": "https://docs.aws.amazon.com/PricingPlanManager/latest/UserGuide/security-pricing-plan.html",
304885
+ "permissionOnly": false,
304886
+ "description": "Grants permission to disassociate resources from a subscription",
304887
+ "accessLevel": "Write",
304888
+ "resourceTypes": [
304889
+ {
304890
+ "resourceType": "",
304891
+ "required": false,
304892
+ "conditionKeys": [],
304893
+ "dependentActions": []
304894
+ }
304895
+ ]
304896
+ },
304897
+ {
304898
+ "name": "GetSubscription",
304899
+ "apiReferenceUrl": "https://docs.aws.amazon.com/PricingPlanManager/latest/UserGuide/security-pricing-plan.html",
304900
+ "permissionOnly": false,
304901
+ "description": "Grants permission to get the details for a subscription",
304902
+ "accessLevel": "Read",
304903
+ "resourceTypes": [
304904
+ {
304905
+ "resourceType": "",
304906
+ "required": false,
304907
+ "conditionKeys": [],
304908
+ "dependentActions": []
304909
+ }
304910
+ ]
304911
+ },
304912
+ {
304913
+ "name": "ListSubscriptions",
304914
+ "apiReferenceUrl": "https://docs.aws.amazon.com/PricingPlanManager/latest/UserGuide/security-pricing-plan.html",
304915
+ "permissionOnly": false,
304916
+ "description": "Grants permission to list subscriptions in your account",
304917
+ "accessLevel": "Read",
304918
+ "resourceTypes": [
304919
+ {
304920
+ "resourceType": "",
304921
+ "required": false,
304922
+ "conditionKeys": [],
304923
+ "dependentActions": []
304924
+ }
304925
+ ]
304926
+ },
304927
+ {
304928
+ "name": "UpdateSubscription",
304929
+ "apiReferenceUrl": "https://docs.aws.amazon.com/PricingPlanManager/latest/UserGuide/security-pricing-plan.html",
304930
+ "permissionOnly": false,
304931
+ "description": "Grants permission to update a subscription",
304932
+ "accessLevel": "Write",
304933
+ "resourceTypes": [
304934
+ {
304935
+ "resourceType": "",
304936
+ "required": false,
304937
+ "conditionKeys": [],
304938
+ "dependentActions": []
304939
+ }
304940
+ ]
304941
+ }
304942
+ ],
304943
+ "resourceTypes": [
304944
+ {
304945
+ "name": "subscription",
304946
+ "apiReferenceUrl": "https://docs.aws.amazon.com/pricingplanmanager/userguide/subscription.html",
304947
+ "arnPattern": "arn:${Partition}:pricingplanmanager::${Account}:subscription/${SubscriptionId}",
304948
+ "conditionKeys": []
304949
+ }
304950
+ ],
304951
+ "conditionKeys": []
304952
+ },
302373
304953
  {
302374
304954
  "name": "AWS Private CA Connector for Active Directory",
302375
304955
  "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsprivatecaconnectorforactivedirectory.html",
@@ -312849,6 +315429,21 @@
312849
315429
  }
312850
315430
  ]
312851
315431
  },
315432
+ {
315433
+ "name": "AllowVendedLogDeliveryForResource",
315434
+ "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
315435
+ "permissionOnly": true,
315436
+ "description": "Grants permission to configure log delivery for QuickSuite instance",
315437
+ "accessLevel": "Permissions management",
315438
+ "resourceTypes": [
315439
+ {
315440
+ "resourceType": "",
315441
+ "required": false,
315442
+ "conditionKeys": [],
315443
+ "dependentActions": []
315444
+ }
315445
+ ]
315446
+ },
312852
315447
  {
312853
315448
  "name": "BatchCreateTopicReviewedAnswer",
312854
315449
  "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_BatchCreateTopicReviewedAnswer.html",
@@ -332057,6 +334652,21 @@
332057
334652
  }
332058
334653
  ]
332059
334654
  },
334655
+ {
334656
+ "name": "ListRequiredTags",
334657
+ "apiReferenceUrl": "https://docs.aws.amazon.com/resourcegroupstagging/latest/APIReference/API_ListRequiredTags.html",
334658
+ "permissionOnly": false,
334659
+ "description": "Grants permission to list required tags for supported resource types in the calling account",
334660
+ "accessLevel": "List",
334661
+ "resourceTypes": [
334662
+ {
334663
+ "resourceType": "",
334664
+ "required": false,
334665
+ "conditionKeys": [],
334666
+ "dependentActions": []
334667
+ }
334668
+ ]
334669
+ },
332060
334670
  {
332061
334671
  "name": "StartReportCreation",
332062
334672
  "apiReferenceUrl": "https://docs.aws.amazon.com/resourcegroupstagging/latest/APIReference/API_StartReportCreation.html",
@@ -339708,7 +342318,9 @@
339708
342318
  "s3:x-amz-grant-read-acp",
339709
342319
  "s3:x-amz-grant-write",
339710
342320
  "s3:x-amz-grant-write-acp",
339711
- "s3:x-amz-object-ownership"
342321
+ "s3:x-amz-object-ownership",
342322
+ "aws:RequestTag/${TagKey}",
342323
+ "aws:TagKeys"
339712
342324
  ],
339713
342325
  "dependentActions": []
339714
342326
  }
@@ -340826,58 +343438,144 @@
340826
343438
  ]
340827
343439
  },
340828
343440
  {
340829
- "name": "GetAccessPointPolicy",
340830
- "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicy.html",
340831
- "permissionOnly": false,
340832
- "description": "Grants permission to return the access point policy associated with the specified access point",
340833
- "accessLevel": "Read",
340834
- "resourceTypes": [
340835
- {
340836
- "resourceType": "accesspoint",
340837
- "required": true,
340838
- "conditionKeys": [],
340839
- "dependentActions": []
340840
- },
340841
- {
340842
- "resourceType": "",
340843
- "required": false,
340844
- "conditionKeys": [
340845
- "s3:DataAccessPointAccount",
340846
- "s3:DataAccessPointArn",
340847
- "s3:AccessPointNetworkOrigin",
340848
- "s3:authType",
340849
- "s3:ResourceAccount",
340850
- "s3:signatureAge",
340851
- "s3:signatureversion",
340852
- "s3:TlsVersion",
340853
- "s3:x-amz-content-sha256",
340854
- "s3:AccessPointTag/${TagKey}",
340855
- "aws:ResourceTag/${TagKey}"
340856
- ],
340857
- "dependentActions": []
340858
- }
340859
- ]
340860
- },
340861
- {
340862
- "name": "GetAccessPointPolicyForObjectLambda",
340863
- "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyForObjectLambda.html",
343441
+ "name": "GetAccessPointPolicy",
343442
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicy.html",
343443
+ "permissionOnly": false,
343444
+ "description": "Grants permission to return the access point policy associated with the specified access point",
343445
+ "accessLevel": "Read",
343446
+ "resourceTypes": [
343447
+ {
343448
+ "resourceType": "accesspoint",
343449
+ "required": true,
343450
+ "conditionKeys": [],
343451
+ "dependentActions": []
343452
+ },
343453
+ {
343454
+ "resourceType": "",
343455
+ "required": false,
343456
+ "conditionKeys": [
343457
+ "s3:DataAccessPointAccount",
343458
+ "s3:DataAccessPointArn",
343459
+ "s3:AccessPointNetworkOrigin",
343460
+ "s3:authType",
343461
+ "s3:ResourceAccount",
343462
+ "s3:signatureAge",
343463
+ "s3:signatureversion",
343464
+ "s3:TlsVersion",
343465
+ "s3:x-amz-content-sha256",
343466
+ "s3:AccessPointTag/${TagKey}",
343467
+ "aws:ResourceTag/${TagKey}"
343468
+ ],
343469
+ "dependentActions": []
343470
+ }
343471
+ ]
343472
+ },
343473
+ {
343474
+ "name": "GetAccessPointPolicyForObjectLambda",
343475
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyForObjectLambda.html",
343476
+ "permissionOnly": false,
343477
+ "description": "Grants permission to return the access point policy associated with the specified object lambda enabled access point",
343478
+ "accessLevel": "Read",
343479
+ "resourceTypes": [
343480
+ {
343481
+ "resourceType": "objectlambdaaccesspoint",
343482
+ "required": true,
343483
+ "conditionKeys": [],
343484
+ "dependentActions": []
343485
+ },
343486
+ {
343487
+ "resourceType": "",
343488
+ "required": false,
343489
+ "conditionKeys": [
343490
+ "s3:DataAccessPointAccount",
343491
+ "s3:DataAccessPointArn",
343492
+ "s3:AccessPointNetworkOrigin",
343493
+ "s3:authType",
343494
+ "s3:ResourceAccount",
343495
+ "s3:signatureAge",
343496
+ "s3:signatureversion",
343497
+ "s3:TlsVersion",
343498
+ "s3:x-amz-content-sha256"
343499
+ ],
343500
+ "dependentActions": []
343501
+ }
343502
+ ]
343503
+ },
343504
+ {
343505
+ "name": "GetAccessPointPolicyStatus",
343506
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyStatus.html",
343507
+ "permissionOnly": false,
343508
+ "description": "Grants permission to return the policy status for a specific access point policy",
343509
+ "accessLevel": "Read",
343510
+ "resourceTypes": [
343511
+ {
343512
+ "resourceType": "accesspoint",
343513
+ "required": true,
343514
+ "conditionKeys": [],
343515
+ "dependentActions": []
343516
+ },
343517
+ {
343518
+ "resourceType": "",
343519
+ "required": false,
343520
+ "conditionKeys": [
343521
+ "s3:DataAccessPointAccount",
343522
+ "s3:DataAccessPointArn",
343523
+ "s3:AccessPointNetworkOrigin",
343524
+ "s3:authType",
343525
+ "s3:ResourceAccount",
343526
+ "s3:signatureAge",
343527
+ "s3:signatureversion",
343528
+ "s3:TlsVersion",
343529
+ "s3:x-amz-content-sha256",
343530
+ "s3:AccessPointTag/${TagKey}",
343531
+ "aws:ResourceTag/${TagKey}"
343532
+ ],
343533
+ "dependentActions": []
343534
+ }
343535
+ ]
343536
+ },
343537
+ {
343538
+ "name": "GetAccessPointPolicyStatusForObjectLambda",
343539
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyStatusForObjectLambda.html",
343540
+ "permissionOnly": false,
343541
+ "description": "Grants permission to return the policy status for a specific object lambda access point policy",
343542
+ "accessLevel": "Read",
343543
+ "resourceTypes": [
343544
+ {
343545
+ "resourceType": "objectlambdaaccesspoint",
343546
+ "required": true,
343547
+ "conditionKeys": [],
343548
+ "dependentActions": []
343549
+ },
343550
+ {
343551
+ "resourceType": "",
343552
+ "required": false,
343553
+ "conditionKeys": [
343554
+ "s3:DataAccessPointAccount",
343555
+ "s3:DataAccessPointArn",
343556
+ "s3:AccessPointNetworkOrigin",
343557
+ "s3:authType",
343558
+ "s3:ResourceAccount",
343559
+ "s3:signatureAge",
343560
+ "s3:signatureversion",
343561
+ "s3:TlsVersion",
343562
+ "s3:x-amz-content-sha256"
343563
+ ],
343564
+ "dependentActions": []
343565
+ }
343566
+ ]
343567
+ },
343568
+ {
343569
+ "name": "GetAccountPublicAccessBlock",
343570
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetPublicAccessBlock.html",
340864
343571
  "permissionOnly": false,
340865
- "description": "Grants permission to return the access point policy associated with the specified object lambda enabled access point",
343572
+ "description": "Grants permission to retrieve the PublicAccessBlock configuration for an AWS account",
340866
343573
  "accessLevel": "Read",
340867
343574
  "resourceTypes": [
340868
- {
340869
- "resourceType": "objectlambdaaccesspoint",
340870
- "required": true,
340871
- "conditionKeys": [],
340872
- "dependentActions": []
340873
- },
340874
343575
  {
340875
343576
  "resourceType": "",
340876
343577
  "required": false,
340877
343578
  "conditionKeys": [
340878
- "s3:DataAccessPointAccount",
340879
- "s3:DataAccessPointArn",
340880
- "s3:AccessPointNetworkOrigin",
340881
343579
  "s3:authType",
340882
343580
  "s3:ResourceAccount",
340883
343581
  "s3:signatureAge",
@@ -340890,47 +343588,14 @@
340890
343588
  ]
340891
343589
  },
340892
343590
  {
340893
- "name": "GetAccessPointPolicyStatus",
340894
- "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyStatus.html",
340895
- "permissionOnly": false,
340896
- "description": "Grants permission to return the policy status for a specific access point policy",
340897
- "accessLevel": "Read",
340898
- "resourceTypes": [
340899
- {
340900
- "resourceType": "accesspoint",
340901
- "required": true,
340902
- "conditionKeys": [],
340903
- "dependentActions": []
340904
- },
340905
- {
340906
- "resourceType": "",
340907
- "required": false,
340908
- "conditionKeys": [
340909
- "s3:DataAccessPointAccount",
340910
- "s3:DataAccessPointArn",
340911
- "s3:AccessPointNetworkOrigin",
340912
- "s3:authType",
340913
- "s3:ResourceAccount",
340914
- "s3:signatureAge",
340915
- "s3:signatureversion",
340916
- "s3:TlsVersion",
340917
- "s3:x-amz-content-sha256",
340918
- "s3:AccessPointTag/${TagKey}",
340919
- "aws:ResourceTag/${TagKey}"
340920
- ],
340921
- "dependentActions": []
340922
- }
340923
- ]
340924
- },
340925
- {
340926
- "name": "GetAccessPointPolicyStatusForObjectLambda",
340927
- "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyStatusForObjectLambda.html",
343591
+ "name": "GetAnalyticsConfiguration",
343592
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketAnalyticsConfiguration.html",
340928
343593
  "permissionOnly": false,
340929
- "description": "Grants permission to return the policy status for a specific object lambda access point policy",
343594
+ "description": "Grants permission to get an analytics configuration from an Amazon S3 bucket, identified by the analytics configuration ID",
340930
343595
  "accessLevel": "Read",
340931
343596
  "resourceTypes": [
340932
343597
  {
340933
- "resourceType": "objectlambdaaccesspoint",
343598
+ "resourceType": "bucket",
340934
343599
  "required": true,
340935
343600
  "conditionKeys": [],
340936
343601
  "dependentActions": []
@@ -340939,9 +343604,6 @@
340939
343604
  "resourceType": "",
340940
343605
  "required": false,
340941
343606
  "conditionKeys": [
340942
- "s3:DataAccessPointAccount",
340943
- "s3:DataAccessPointArn",
340944
- "s3:AccessPointNetworkOrigin",
340945
343607
  "s3:authType",
340946
343608
  "s3:ResourceAccount",
340947
343609
  "s3:signatureAge",
@@ -340954,32 +343616,10 @@
340954
343616
  ]
340955
343617
  },
340956
343618
  {
340957
- "name": "GetAccountPublicAccessBlock",
340958
- "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetPublicAccessBlock.html",
343619
+ "name": "GetBucketAbac",
343620
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketAbac.html",
340959
343621
  "permissionOnly": false,
340960
- "description": "Grants permission to retrieve the PublicAccessBlock configuration for an AWS account",
340961
- "accessLevel": "Read",
340962
- "resourceTypes": [
340963
- {
340964
- "resourceType": "",
340965
- "required": false,
340966
- "conditionKeys": [
340967
- "s3:authType",
340968
- "s3:ResourceAccount",
340969
- "s3:signatureAge",
340970
- "s3:signatureversion",
340971
- "s3:TlsVersion",
340972
- "s3:x-amz-content-sha256"
340973
- ],
340974
- "dependentActions": []
340975
- }
340976
- ]
340977
- },
340978
- {
340979
- "name": "GetAnalyticsConfiguration",
340980
- "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketAnalyticsConfiguration.html",
340981
- "permissionOnly": false,
340982
- "description": "Grants permission to get an analytics configuration from an Amazon S3 bucket, identified by the analytics configuration ID",
343622
+ "description": "Grants permission to retrieve ABAC configuration for a general purpose bucket",
340983
343623
  "accessLevel": "Read",
340984
343624
  "resourceTypes": [
340985
343625
  {
@@ -342812,6 +345452,12 @@
342812
345452
  "conditionKeys": [],
342813
345453
  "dependentActions": []
342814
345454
  },
345455
+ {
345456
+ "resourceType": "bucket",
345457
+ "required": false,
345458
+ "conditionKeys": [],
345459
+ "dependentActions": []
345460
+ },
342815
345461
  {
342816
345462
  "resourceType": "storagelensgroup",
342817
345463
  "required": false,
@@ -343105,6 +345751,34 @@
343105
345751
  }
343106
345752
  ]
343107
345753
  },
345754
+ {
345755
+ "name": "PutBucketAbac",
345756
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAbac.html",
345757
+ "permissionOnly": false,
345758
+ "description": "Grants permission to set ABAC configuration for a general purpose bucket",
345759
+ "accessLevel": "Write",
345760
+ "resourceTypes": [
345761
+ {
345762
+ "resourceType": "bucket",
345763
+ "required": true,
345764
+ "conditionKeys": [],
345765
+ "dependentActions": []
345766
+ },
345767
+ {
345768
+ "resourceType": "",
345769
+ "required": false,
345770
+ "conditionKeys": [
345771
+ "s3:authType",
345772
+ "s3:ResourceAccount",
345773
+ "s3:signatureAge",
345774
+ "s3:signatureversion",
345775
+ "s3:TlsVersion",
345776
+ "s3:x-amz-content-sha256"
345777
+ ],
345778
+ "dependentActions": []
345779
+ }
345780
+ ]
345781
+ },
343108
345782
  {
343109
345783
  "name": "PutBucketAcl",
343110
345784
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAcl.html",
@@ -344207,6 +346881,12 @@
344207
346881
  "conditionKeys": [],
344208
346882
  "dependentActions": []
344209
346883
  },
346884
+ {
346885
+ "resourceType": "bucket",
346886
+ "required": false,
346887
+ "conditionKeys": [],
346888
+ "dependentActions": []
346889
+ },
344210
346890
  {
344211
346891
  "resourceType": "storagelensgroup",
344212
346892
  "required": false,
@@ -344261,6 +346941,12 @@
344261
346941
  "conditionKeys": [],
344262
346942
  "dependentActions": []
344263
346943
  },
346944
+ {
346945
+ "resourceType": "bucket",
346946
+ "required": false,
346947
+ "conditionKeys": [],
346948
+ "dependentActions": []
346949
+ },
344264
346950
  {
344265
346951
  "resourceType": "storagelensgroup",
344266
346952
  "required": false,
@@ -344489,6 +347175,7 @@
344489
347175
  "aws:ResourceTag/${TagKey}",
344490
347176
  "s3:AccessPointNetworkOrigin",
344491
347177
  "s3:AccessPointTag/${TagKey}",
347178
+ "s3:BucketTag/${TagKey}",
344492
347179
  "s3:DataAccessPointAccount",
344493
347180
  "s3:DataAccessPointArn"
344494
347181
  ]
@@ -344497,13 +347184,19 @@
344497
347184
  "name": "bucket",
344498
347185
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingBucket.html",
344499
347186
  "arnPattern": "arn:${Partition}:s3:::${BucketName}",
344500
- "conditionKeys": []
347187
+ "conditionKeys": [
347188
+ "aws:ResourceTag/${TagKey}",
347189
+ "s3:BucketTag/${TagKey}"
347190
+ ]
344501
347191
  },
344502
347192
  {
344503
347193
  "name": "object",
344504
347194
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingObjects.html",
344505
347195
  "arnPattern": "arn:${Partition}:s3:::${BucketName}/${ObjectName}",
344506
- "conditionKeys": []
347196
+ "conditionKeys": [
347197
+ "aws:ResourceTag/${TagKey}",
347198
+ "s3:BucketTag/${TagKey}"
347199
+ ]
344507
347200
  },
344508
347201
  {
344509
347202
  "name": "job",
@@ -344629,10 +347322,16 @@
344629
347322
  },
344630
347323
  {
344631
347324
  "name": "s3:AccessPointTag/${TagKey}",
344632
- "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-point-tagging.html#tagging-and-policies",
347325
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/AmazonS3/latest/userguide/access-points.html#tagging-and-policies",
344633
347326
  "description": "Filters access by existing access point tag key and value",
344634
347327
  "type": "String"
344635
347328
  },
347329
+ {
347330
+ "name": "s3:BucketTag/${TagKey}",
347331
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/AmazonS3/latest/userguide/buckets-tagging.html",
347332
+ "description": "Filters access by the tags associated with the bucket",
347333
+ "type": "String"
347334
+ },
344636
347335
  {
344637
347336
  "name": "s3:DataAccessPointAccount",
344638
347337
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/creating-access-points.html#access-points-policies",
@@ -360833,7 +363532,8 @@
360833
363532
  "secretsmanager:resource/AllowRotationLambdaArn",
360834
363533
  "secretsmanager:ResourceTag/tag-key",
360835
363534
  "aws:ResourceTag/${TagKey}",
360836
- "secretsmanager:SecretPrimaryRegion"
363535
+ "secretsmanager:SecretPrimaryRegion",
363536
+ "secretsmanager:resource/Type"
360837
363537
  ],
360838
363538
  "dependentActions": []
360839
363539
  }
@@ -360865,7 +363565,8 @@
360865
363565
  "aws:TagKeys",
360866
363566
  "secretsmanager:ResourceTag/tag-key",
360867
363567
  "secretsmanager:AddReplicaRegions",
360868
- "secretsmanager:ForceOverwriteReplicaSecret"
363568
+ "secretsmanager:ForceOverwriteReplicaSecret",
363569
+ "secretsmanager:Type"
360869
363570
  ],
360870
363571
  "dependentActions": []
360871
363572
  }
@@ -360892,7 +363593,8 @@
360892
363593
  "secretsmanager:resource/AllowRotationLambdaArn",
360893
363594
  "secretsmanager:ResourceTag/tag-key",
360894
363595
  "aws:ResourceTag/${TagKey}",
360895
- "secretsmanager:SecretPrimaryRegion"
363596
+ "secretsmanager:SecretPrimaryRegion",
363597
+ "secretsmanager:resource/Type"
360896
363598
  ],
360897
363599
  "dependentActions": []
360898
363600
  }
@@ -360921,7 +363623,8 @@
360921
363623
  "secretsmanager:ForceDeleteWithoutRecovery",
360922
363624
  "secretsmanager:ResourceTag/tag-key",
360923
363625
  "aws:ResourceTag/${TagKey}",
360924
- "secretsmanager:SecretPrimaryRegion"
363626
+ "secretsmanager:SecretPrimaryRegion",
363627
+ "secretsmanager:resource/Type"
360925
363628
  ],
360926
363629
  "dependentActions": []
360927
363630
  }
@@ -360948,7 +363651,8 @@
360948
363651
  "secretsmanager:resource/AllowRotationLambdaArn",
360949
363652
  "secretsmanager:ResourceTag/tag-key",
360950
363653
  "aws:ResourceTag/${TagKey}",
360951
- "secretsmanager:SecretPrimaryRegion"
363654
+ "secretsmanager:SecretPrimaryRegion",
363655
+ "secretsmanager:resource/Type"
360952
363656
  ],
360953
363657
  "dependentActions": []
360954
363658
  }
@@ -360990,7 +363694,8 @@
360990
363694
  "secretsmanager:resource/AllowRotationLambdaArn",
360991
363695
  "secretsmanager:ResourceTag/tag-key",
360992
363696
  "aws:ResourceTag/${TagKey}",
360993
- "secretsmanager:SecretPrimaryRegion"
363697
+ "secretsmanager:SecretPrimaryRegion",
363698
+ "secretsmanager:resource/Type"
360994
363699
  ],
360995
363700
  "dependentActions": []
360996
363701
  }
@@ -361019,7 +363724,8 @@
361019
363724
  "secretsmanager:resource/AllowRotationLambdaArn",
361020
363725
  "secretsmanager:ResourceTag/tag-key",
361021
363726
  "aws:ResourceTag/${TagKey}",
361022
- "secretsmanager:SecretPrimaryRegion"
363727
+ "secretsmanager:SecretPrimaryRegion",
363728
+ "secretsmanager:resource/Type"
361023
363729
  ],
361024
363730
  "dependentActions": []
361025
363731
  }
@@ -361046,7 +363752,8 @@
361046
363752
  "secretsmanager:resource/AllowRotationLambdaArn",
361047
363753
  "secretsmanager:ResourceTag/tag-key",
361048
363754
  "aws:ResourceTag/${TagKey}",
361049
- "secretsmanager:SecretPrimaryRegion"
363755
+ "secretsmanager:SecretPrimaryRegion",
363756
+ "secretsmanager:resource/Type"
361050
363757
  ],
361051
363758
  "dependentActions": []
361052
363759
  }
@@ -361089,7 +363796,8 @@
361089
363796
  "secretsmanager:ResourceTag/tag-key",
361090
363797
  "aws:ResourceTag/${TagKey}",
361091
363798
  "secretsmanager:BlockPublicPolicy",
361092
- "secretsmanager:SecretPrimaryRegion"
363799
+ "secretsmanager:SecretPrimaryRegion",
363800
+ "secretsmanager:resource/Type"
361093
363801
  ],
361094
363802
  "dependentActions": []
361095
363803
  }
@@ -361116,7 +363824,8 @@
361116
363824
  "secretsmanager:resource/AllowRotationLambdaArn",
361117
363825
  "secretsmanager:ResourceTag/tag-key",
361118
363826
  "aws:ResourceTag/${TagKey}",
361119
- "secretsmanager:SecretPrimaryRegion"
363827
+ "secretsmanager:SecretPrimaryRegion",
363828
+ "secretsmanager:resource/Type"
361120
363829
  ],
361121
363830
  "dependentActions": []
361122
363831
  }
@@ -361143,7 +363852,8 @@
361143
363852
  "secretsmanager:resource/AllowRotationLambdaArn",
361144
363853
  "secretsmanager:ResourceTag/tag-key",
361145
363854
  "aws:ResourceTag/${TagKey}",
361146
- "secretsmanager:SecretPrimaryRegion"
363855
+ "secretsmanager:SecretPrimaryRegion",
363856
+ "secretsmanager:resource/Type"
361147
363857
  ],
361148
363858
  "dependentActions": []
361149
363859
  }
@@ -361172,7 +363882,8 @@
361172
363882
  "aws:ResourceTag/${TagKey}",
361173
363883
  "secretsmanager:SecretPrimaryRegion",
361174
363884
  "secretsmanager:AddReplicaRegions",
361175
- "secretsmanager:ForceOverwriteReplicaSecret"
363885
+ "secretsmanager:ForceOverwriteReplicaSecret",
363886
+ "secretsmanager:resource/Type"
361176
363887
  ],
361177
363888
  "dependentActions": []
361178
363889
  }
@@ -361199,7 +363910,8 @@
361199
363910
  "secretsmanager:resource/AllowRotationLambdaArn",
361200
363911
  "secretsmanager:ResourceTag/tag-key",
361201
363912
  "aws:ResourceTag/${TagKey}",
361202
- "secretsmanager:SecretPrimaryRegion"
363913
+ "secretsmanager:SecretPrimaryRegion",
363914
+ "secretsmanager:resource/Type"
361203
363915
  ],
361204
363916
  "dependentActions": []
361205
363917
  }
@@ -361229,7 +363941,9 @@
361229
363941
  "aws:ResourceTag/${TagKey}",
361230
363942
  "secretsmanager:SecretPrimaryRegion",
361231
363943
  "secretsmanager:ModifyRotationRules",
361232
- "secretsmanager:RotateImmediately"
363944
+ "secretsmanager:RotateImmediately",
363945
+ "secretsmanager:resource/Type",
363946
+ "secretsmanager:ExternalSecretRotationRoleArn"
361233
363947
  ],
361234
363948
  "dependentActions": []
361235
363949
  }
@@ -361256,7 +363970,8 @@
361256
363970
  "secretsmanager:resource/AllowRotationLambdaArn",
361257
363971
  "secretsmanager:ResourceTag/tag-key",
361258
363972
  "aws:ResourceTag/${TagKey}",
361259
- "secretsmanager:SecretPrimaryRegion"
363973
+ "secretsmanager:SecretPrimaryRegion",
363974
+ "secretsmanager:resource/Type"
361260
363975
  ],
361261
363976
  "dependentActions": []
361262
363977
  }
@@ -361285,7 +364000,8 @@
361285
364000
  "secretsmanager:resource/AllowRotationLambdaArn",
361286
364001
  "secretsmanager:ResourceTag/tag-key",
361287
364002
  "aws:ResourceTag/${TagKey}",
361288
- "secretsmanager:SecretPrimaryRegion"
364003
+ "secretsmanager:SecretPrimaryRegion",
364004
+ "secretsmanager:resource/Type"
361289
364005
  ],
361290
364006
  "dependentActions": []
361291
364007
  }
@@ -361313,7 +364029,8 @@
361313
364029
  "secretsmanager:resource/AllowRotationLambdaArn",
361314
364030
  "secretsmanager:ResourceTag/tag-key",
361315
364031
  "aws:ResourceTag/${TagKey}",
361316
- "secretsmanager:SecretPrimaryRegion"
364032
+ "secretsmanager:SecretPrimaryRegion",
364033
+ "secretsmanager:resource/Type"
361317
364034
  ],
361318
364035
  "dependentActions": []
361319
364036
  }
@@ -361343,7 +364060,9 @@
361343
364060
  "secretsmanager:resource/AllowRotationLambdaArn",
361344
364061
  "secretsmanager:ResourceTag/tag-key",
361345
364062
  "aws:ResourceTag/${TagKey}",
361346
- "secretsmanager:SecretPrimaryRegion"
364063
+ "secretsmanager:SecretPrimaryRegion",
364064
+ "secretsmanager:Type",
364065
+ "secretsmanager:resource/Type"
361347
364066
  ],
361348
364067
  "dependentActions": []
361349
364068
  }
@@ -361371,7 +364090,8 @@
361371
364090
  "secretsmanager:resource/AllowRotationLambdaArn",
361372
364091
  "secretsmanager:ResourceTag/tag-key",
361373
364092
  "aws:ResourceTag/${TagKey}",
361374
- "secretsmanager:SecretPrimaryRegion"
364093
+ "secretsmanager:SecretPrimaryRegion",
364094
+ "secretsmanager:resource/Type"
361375
364095
  ],
361376
364096
  "dependentActions": []
361377
364097
  }
@@ -361398,7 +364118,8 @@
361398
364118
  "secretsmanager:resource/AllowRotationLambdaArn",
361399
364119
  "secretsmanager:ResourceTag/tag-key",
361400
364120
  "aws:ResourceTag/${TagKey}",
361401
- "secretsmanager:SecretPrimaryRegion"
364121
+ "secretsmanager:SecretPrimaryRegion",
364122
+ "secretsmanager:resource/Type"
361402
364123
  ],
361403
364124
  "dependentActions": []
361404
364125
  }
@@ -361415,7 +364136,8 @@
361415
364136
  "aws:ResourceTag/${TagKey}",
361416
364137
  "aws:TagKeys",
361417
364138
  "secretsmanager:ResourceTag/tag-key",
361418
- "secretsmanager:resource/AllowRotationLambdaArn"
364139
+ "secretsmanager:resource/AllowRotationLambdaArn",
364140
+ "secretsmanager:resource/Type"
361419
364141
  ]
361420
364142
  }
361421
364143
  ],
@@ -361456,6 +364178,12 @@
361456
364178
  "description": "Filters access by the description text in the request",
361457
364179
  "type": "String"
361458
364180
  },
364181
+ {
364182
+ "name": "secretsmanager:ExternalSecretRotationRoleArn",
364183
+ "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html",
364184
+ "description": "Filters access by the managed external secret rotation role ARN in the request",
364185
+ "type": "ARN"
364186
+ },
361459
364187
  {
361460
364188
  "name": "secretsmanager:ForceDeleteWithoutRecovery",
361461
364189
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html",
@@ -361528,6 +364256,12 @@
361528
364256
  "description": "Filters access by primary region in which the secret is created if the secret is a multi-Region secret",
361529
364257
  "type": "String"
361530
364258
  },
364259
+ {
364260
+ "name": "secretsmanager:Type",
364261
+ "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html",
364262
+ "description": "Filters access by the managed external secret type in the request",
364263
+ "type": "String"
364264
+ },
361531
364265
  {
361532
364266
  "name": "secretsmanager:VersionId",
361533
364267
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html",
@@ -361545,6 +364279,12 @@
361545
364279
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html",
361546
364280
  "description": "Filters access by the ARN of the rotation Lambda function associated with the secret",
361547
364281
  "type": "ARN"
364282
+ },
364283
+ {
364284
+ "name": "secretsmanager:resource/Type",
364285
+ "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html",
364286
+ "description": "Filters access by the managed external secret type associated with the secret",
364287
+ "type": "String"
361548
364288
  }
361549
364289
  ]
361550
364290
  },
@@ -362618,6 +365358,21 @@
362618
365358
  }
362619
365359
  ]
362620
365360
  },
365361
+ {
365362
+ "name": "GetFindingsTrendsV2",
365363
+ "apiReferenceUrl": "https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFindingsTrendsV2.html",
365364
+ "permissionOnly": false,
365365
+ "description": "Grants permission to retrieve findings trends",
365366
+ "accessLevel": "Read",
365367
+ "resourceTypes": [
365368
+ {
365369
+ "resourceType": "hubv2",
365370
+ "required": false,
365371
+ "conditionKeys": [],
365372
+ "dependentActions": []
365373
+ }
365374
+ ]
365375
+ },
362621
365376
  {
362622
365377
  "name": "GetFreeTrialEndDate",
362623
365378
  "apiReferenceUrl": "https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetFreeTrialEndDate.html",
@@ -362753,6 +365508,21 @@
362753
365508
  }
362754
365509
  ]
362755
365510
  },
365511
+ {
365512
+ "name": "GetResourcesTrendsV2",
365513
+ "apiReferenceUrl": "https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetResourcesTrendsV2.html",
365514
+ "permissionOnly": false,
365515
+ "description": "Grants permission to retrieve resources trends",
365516
+ "accessLevel": "Read",
365517
+ "resourceTypes": [
365518
+ {
365519
+ "resourceType": "hubv2",
365520
+ "required": false,
365521
+ "conditionKeys": [],
365522
+ "dependentActions": []
365523
+ }
365524
+ ]
365525
+ },
362756
365526
  {
362757
365527
  "name": "GetResourcesV2",
362758
365528
  "apiReferenceUrl": "https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_GetResourcesV2.html",
@@ -367285,6 +370055,27 @@
367285
370055
  "dependentActions": []
367286
370056
  }
367287
370057
  ]
370058
+ },
370059
+ {
370060
+ "name": "UpdateOutboundIntegration",
370061
+ "apiReferenceUrl": "API_UpdateOutboundIntegration.html",
370062
+ "permissionOnly": true,
370063
+ "description": "Grants permission to update an Outbound Integration",
370064
+ "accessLevel": "Write",
370065
+ "resourceTypes": [
370066
+ {
370067
+ "resourceType": "cloud-autonomous-vm-cluster",
370068
+ "required": true,
370069
+ "conditionKeys": [],
370070
+ "dependentActions": []
370071
+ },
370072
+ {
370073
+ "resourceType": "cloud-vm-cluster",
370074
+ "required": true,
370075
+ "conditionKeys": [],
370076
+ "dependentActions": []
370077
+ }
370078
+ ]
367288
370079
  }
367289
370080
  ],
367290
370081
  "resourceTypes": [
@@ -369397,7 +372188,7 @@
369397
372188
  "conditionKeys": []
369398
372189
  },
369399
372190
  {
369400
- "name": "AWS Service for managing the console user experience capabilities.",
372191
+ "name": "AWS Service for managing AWS Management Console user experience capabilities.",
369401
372192
  "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsserviceformanagingawsconsoleuserexperiencecapabilities..html",
369402
372193
  "servicePrefix": "uxc",
369403
372194
  "actions": [
@@ -373209,11 +376000,41 @@
373209
376000
  "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssignin.html",
373210
376001
  "servicePrefix": "signin",
373211
376002
  "actions": [
376003
+ {
376004
+ "name": "AuthorizeOAuth2Access",
376005
+ "apiReferenceUrl": "https://docs.aws.amazon.com/signin/latest/APIReference/API_AuthorizeOAuth2Access.html",
376006
+ "permissionOnly": false,
376007
+ "description": "Grants permission to authenticate through a browser and obtain an OAuth 2.0 authorization code for credential exchange",
376008
+ "accessLevel": "Read",
376009
+ "resourceTypes": [
376010
+ {
376011
+ "resourceType": "",
376012
+ "required": false,
376013
+ "conditionKeys": [],
376014
+ "dependentActions": []
376015
+ }
376016
+ ]
376017
+ },
376018
+ {
376019
+ "name": "CreateOAuth2Token",
376020
+ "apiReferenceUrl": "https://docs.aws.amazon.com/signin/latest/APIReference/API_CreateOAuth2Token.html",
376021
+ "permissionOnly": false,
376022
+ "description": "Grants permission to exchange an authorization code for OAuth 2.0 access token and refresh token that can be used to access AWS services from developer tools and applications",
376023
+ "accessLevel": "Read",
376024
+ "resourceTypes": [
376025
+ {
376026
+ "resourceType": "",
376027
+ "required": false,
376028
+ "conditionKeys": [],
376029
+ "dependentActions": []
376030
+ }
376031
+ ]
376032
+ },
373212
376033
  {
373213
376034
  "name": "CreateTrustedIdentityPropagationApplicationForConsole",
373214
- "apiReferenceUrl": "https://docs.aws.amazon.com/signin/latest/APIReference/create-trusted-identity-propagation-application-for-console.html",
376035
+ "apiReferenceUrl": "https://docs.aws.amazon.com/signin/latest/APIReference/API_CreateTrustedIdentityPropagationApplicationForConsole.html",
373215
376036
  "permissionOnly": false,
373216
- "description": "Grants permission to create an Identity Center application that represents the the console on an Identity Center organization instance",
376037
+ "description": "Grants permission to create an Identity Center application that represents the AWS Management Console on an Identity Center organization instance",
373217
376038
  "accessLevel": "Write",
373218
376039
  "resourceTypes": [
373219
376040
  {
@@ -373234,9 +376055,9 @@
373234
376055
  },
373235
376056
  {
373236
376057
  "name": "ListTrustedIdentityPropagationApplicationsForConsole",
373237
- "apiReferenceUrl": "https://docs.aws.amazon.com/signin/latest/APIReference/list-trusted-identity-propagation-application-for-console.html",
376058
+ "apiReferenceUrl": "https://docs.aws.amazon.com/signin/latest/APIReference/API_ListTrustedIdentityPropagationApplicationsForConsole.html",
373238
376059
  "permissionOnly": false,
373239
- "description": "Grants permission to list all Identity Center applications that represent the the console",
376060
+ "description": "Grants permission to list all Identity Center applications that represent the AWS Management Console",
373240
376061
  "accessLevel": "List",
373241
376062
  "resourceTypes": [
373242
376063
  {
@@ -387966,7 +390787,7 @@
387966
390787
  "name": "ExecuteAPI",
387967
390788
  "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html#systems-manager-namespace-other-API-operations",
387968
390789
  "permissionOnly": false,
387969
- "description": "Grants permission to a Systems Manager delegated administrator to view related resource details about OpsItems across multiple AWS accounts in the the console",
390790
+ "description": "Grants permission to a Systems Manager delegated administrator to view related resource details about OpsItems across multiple AWS accounts in the AWS Management Console",
387970
390791
  "accessLevel": "Read",
387971
390792
  "resourceTypes": [
387972
390793
  {
@@ -399882,7 +402703,8 @@
399882
402703
  "required": false,
399883
402704
  "conditionKeys": [
399884
402705
  "aws:TagKeys",
399885
- "aws:RequestTag/${TagKey}"
402706
+ "aws:RequestTag/${TagKey}",
402707
+ "aws:ResourceTag/${TagKey}"
399886
402708
  ],
399887
402709
  "dependentActions": []
399888
402710
  }