aws-iam-data 0.0.597 → 0.0.599

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -32062,6 +32062,21 @@
32062
32062
  "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html",
32063
32063
  "servicePrefix": "bedrock",
32064
32064
  "actions": [
32065
+ {
32066
+ "name": "AgenticRetrieveStream",
32067
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
32068
+ "permissionOnly": false,
32069
+ "description": "Grants permission to perform agentic retrieve with streaming from retrievers",
32070
+ "accessLevel": "Read",
32071
+ "resourceTypes": [
32072
+ {
32073
+ "resourceType": "",
32074
+ "required": false,
32075
+ "conditionKeys": [],
32076
+ "dependentActions": []
32077
+ }
32078
+ ]
32079
+ },
32065
32080
  {
32066
32081
  "name": "AllowVendedLogDeliveryForResource",
32067
32082
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
@@ -32151,6 +32166,21 @@
32151
32166
  }
32152
32167
  ]
32153
32168
  },
32169
+ {
32170
+ "name": "BatchDeleteAdvancedPromptOptimizationJob",
32171
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_BatchDeleteAdvancedPromptOptimizationJob.html",
32172
+ "permissionOnly": false,
32173
+ "description": "Grants permission to delete one or more advanced prompt optimization jobs",
32174
+ "accessLevel": "Write",
32175
+ "resourceTypes": [
32176
+ {
32177
+ "resourceType": "advanced-prompt-optimization-job",
32178
+ "required": true,
32179
+ "conditionKeys": [],
32180
+ "dependentActions": []
32181
+ }
32182
+ ]
32183
+ },
32154
32184
  {
32155
32185
  "name": "BatchDeleteEvaluationJob",
32156
32186
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_BatchDeleteEvaluationJob.html",
@@ -32228,6 +32258,24 @@
32228
32258
  }
32229
32259
  ]
32230
32260
  },
32261
+ {
32262
+ "name": "CreateAdvancedPromptOptimizationJob",
32263
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateAdvancedPromptOptimizationJob.html",
32264
+ "permissionOnly": false,
32265
+ "description": "Grants permission to create an advanced prompt optimization job",
32266
+ "accessLevel": "Write",
32267
+ "resourceTypes": [
32268
+ {
32269
+ "resourceType": "",
32270
+ "required": false,
32271
+ "conditionKeys": [
32272
+ "aws:RequestTag/${TagKey}",
32273
+ "aws:TagKeys"
32274
+ ],
32275
+ "dependentActions": []
32276
+ }
32277
+ ]
32278
+ },
32231
32279
  {
32232
32280
  "name": "CreateAgent",
32233
32281
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreateAgent.html",
@@ -33488,6 +33536,12 @@
33488
33536
  "required": false,
33489
33537
  "conditionKeys": [],
33490
33538
  "dependentActions": []
33539
+ },
33540
+ {
33541
+ "resourceType": "knowledge-base",
33542
+ "required": false,
33543
+ "conditionKeys": [],
33544
+ "dependentActions": []
33491
33545
  }
33492
33546
  ]
33493
33547
  },
@@ -33638,6 +33692,21 @@
33638
33692
  }
33639
33693
  ]
33640
33694
  },
33695
+ {
33696
+ "name": "GetAdvancedPromptOptimizationJob",
33697
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetAdvancedPromptOptimizationJob.html",
33698
+ "permissionOnly": false,
33699
+ "description": "Grants permission to get information about an advanced prompt optimization job",
33700
+ "accessLevel": "Read",
33701
+ "resourceTypes": [
33702
+ {
33703
+ "resourceType": "advanced-prompt-optimization-job",
33704
+ "required": true,
33705
+ "conditionKeys": [],
33706
+ "dependentActions": []
33707
+ }
33708
+ ]
33709
+ },
33641
33710
  {
33642
33711
  "name": "GetAgent",
33643
33712
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetAgent.html",
@@ -34046,6 +34115,21 @@
34046
34115
  }
34047
34116
  ]
34048
34117
  },
34118
+ {
34119
+ "name": "GetDocumentContent",
34120
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
34121
+ "permissionOnly": false,
34122
+ "description": "Grants permission to retrieve a document",
34123
+ "accessLevel": "Read",
34124
+ "resourceTypes": [
34125
+ {
34126
+ "resourceType": "",
34127
+ "required": false,
34128
+ "conditionKeys": [],
34129
+ "dependentActions": []
34130
+ }
34131
+ ]
34132
+ },
34049
34133
  {
34050
34134
  "name": "GetEvaluationJob",
34051
34135
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetEvaluationJob.html",
@@ -34487,6 +34571,12 @@
34487
34571
  "required": false,
34488
34572
  "conditionKeys": [],
34489
34573
  "dependentActions": []
34574
+ },
34575
+ {
34576
+ "resourceType": "knowledge-base",
34577
+ "required": false,
34578
+ "conditionKeys": [],
34579
+ "dependentActions": []
34490
34580
  }
34491
34581
  ]
34492
34582
  },
@@ -34733,6 +34823,21 @@
34733
34823
  }
34734
34824
  ]
34735
34825
  },
34826
+ {
34827
+ "name": "InvokeGuardrailChecks",
34828
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
34829
+ "permissionOnly": false,
34830
+ "description": "Grants permission to invoke guardrail checks",
34831
+ "accessLevel": "Read",
34832
+ "resourceTypes": [
34833
+ {
34834
+ "resourceType": "",
34835
+ "required": false,
34836
+ "conditionKeys": [],
34837
+ "dependentActions": []
34838
+ }
34839
+ ]
34840
+ },
34736
34841
  {
34737
34842
  "name": "InvokeInlineAgent",
34738
34843
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_InvokeInlineAgent.html",
@@ -34933,6 +35038,21 @@
34933
35038
  }
34934
35039
  ]
34935
35040
  },
35041
+ {
35042
+ "name": "ListAdvancedPromptOptimizationJobs",
35043
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListAdvancedPromptOptimizationJobs.html",
35044
+ "permissionOnly": false,
35045
+ "description": "Grants permission to list the advanced prompt optimization jobs in your account",
35046
+ "accessLevel": "List",
35047
+ "resourceTypes": [
35048
+ {
35049
+ "resourceType": "",
35050
+ "required": false,
35051
+ "conditionKeys": [],
35052
+ "dependentActions": []
35053
+ }
35054
+ ]
35055
+ },
34936
35056
  {
34937
35057
  "name": "ListAgentActionGroups",
34938
35058
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListAgentActionGroups.html",
@@ -35654,6 +35774,12 @@
35654
35774
  "description": "Grants permission to list tags for a Bedrock resource",
35655
35775
  "accessLevel": "Read",
35656
35776
  "resourceTypes": [
35777
+ {
35778
+ "resourceType": "advanced-prompt-optimization-job",
35779
+ "required": true,
35780
+ "conditionKeys": [],
35781
+ "dependentActions": []
35782
+ },
35657
35783
  {
35658
35784
  "resourceType": "agent",
35659
35785
  "required": true,
@@ -35983,6 +36109,12 @@
35983
36109
  "conditionKeys": [],
35984
36110
  "dependentActions": []
35985
36111
  },
36112
+ {
36113
+ "resourceType": "knowledge-base",
36114
+ "required": false,
36115
+ "conditionKeys": [],
36116
+ "dependentActions": []
36117
+ },
35986
36118
  {
35987
36119
  "resourceType": "",
35988
36120
  "required": false,
@@ -36156,6 +36288,21 @@
36156
36288
  }
36157
36289
  ]
36158
36290
  },
36291
+ {
36292
+ "name": "StopAdvancedPromptOptimizationJob",
36293
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_StopAdvancedPromptOptimizationJob.html",
36294
+ "permissionOnly": false,
36295
+ "description": "Grants permission to stop an advanced prompt optimization job while in progress",
36296
+ "accessLevel": "Write",
36297
+ "resourceTypes": [
36298
+ {
36299
+ "resourceType": "advanced-prompt-optimization-job",
36300
+ "required": true,
36301
+ "conditionKeys": [],
36302
+ "dependentActions": []
36303
+ }
36304
+ ]
36305
+ },
36159
36306
  {
36160
36307
  "name": "StopEvaluationJob",
36161
36308
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_StopEvaluationJob.html",
@@ -36250,6 +36397,12 @@
36250
36397
  "description": "Grants permission to Tag a Bedrock resource",
36251
36398
  "accessLevel": "Tagging",
36252
36399
  "resourceTypes": [
36400
+ {
36401
+ "resourceType": "advanced-prompt-optimization-job",
36402
+ "required": false,
36403
+ "conditionKeys": [],
36404
+ "dependentActions": []
36405
+ },
36253
36406
  {
36254
36407
  "resourceType": "agent",
36255
36408
  "required": false,
@@ -36448,6 +36601,12 @@
36448
36601
  "description": "Grants permission to Untag a Bedrock resource",
36449
36602
  "accessLevel": "Tagging",
36450
36603
  "resourceTypes": [
36604
+ {
36605
+ "resourceType": "advanced-prompt-optimization-job",
36606
+ "required": false,
36607
+ "conditionKeys": [],
36608
+ "dependentActions": []
36609
+ },
36451
36610
  {
36452
36611
  "resourceType": "agent",
36453
36612
  "required": false,
@@ -37311,6 +37470,14 @@
37311
37470
  "conditionKeys": [
37312
37471
  "aws:ResourceTag/${TagKey}"
37313
37472
  ]
37473
+ },
37474
+ {
37475
+ "name": "advanced-prompt-optimization-job",
37476
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
37477
+ "arnPattern": "arn:${Partition}:bedrock:${Region}:${Account}:advanced-prompt-optimization-job/${ResourceId}",
37478
+ "conditionKeys": [
37479
+ "aws:ResourceTag/${TagKey}"
37480
+ ]
37314
37481
  }
37315
37482
  ],
37316
37483
  "conditionKeys": [
@@ -37842,12 +38009,40 @@
37842
38009
  ],
37843
38010
  "dependentActions": [
37844
38011
  "bedrock-agentcore:CreateAgentRuntime",
38012
+ "bedrock-agentcore:CreateMemory",
37845
38013
  "bedrock-agentcore:GetAgentRuntime",
38014
+ "bedrock-agentcore:GetMemory",
37846
38015
  "iam:PassRole"
37847
38016
  ]
37848
38017
  }
37849
38018
  ]
37850
38019
  },
38020
+ {
38021
+ "name": "CreateHarnessEndpoint",
38022
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateHarnessEndpoint.html",
38023
+ "permissionOnly": false,
38024
+ "description": "Grants permission to create a new harness endpoint",
38025
+ "accessLevel": "Write",
38026
+ "resourceTypes": [
38027
+ {
38028
+ "resourceType": "harness",
38029
+ "required": true,
38030
+ "conditionKeys": [],
38031
+ "dependentActions": [
38032
+ "bedrock-agentcore:CreateAgentRuntimeEndpoint"
38033
+ ]
38034
+ },
38035
+ {
38036
+ "resourceType": "",
38037
+ "required": false,
38038
+ "conditionKeys": [
38039
+ "aws:RequestTag/${TagKey}",
38040
+ "aws:TagKeys"
38041
+ ],
38042
+ "dependentActions": []
38043
+ }
38044
+ ]
38045
+ },
37851
38046
  {
37852
38047
  "name": "CreateMemory",
37853
38048
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateMemory.html",
@@ -38352,12 +38547,37 @@
38352
38547
  "conditionKeys": [],
38353
38548
  "dependentActions": [
38354
38549
  "bedrock-agentcore:DeleteAgentRuntime",
38550
+ "bedrock-agentcore:DeleteMemory",
38355
38551
  "bedrock-agentcore:GetAgentRuntime",
38552
+ "bedrock-agentcore:GetMemory",
38356
38553
  "iam:PassRole"
38357
38554
  ]
38358
38555
  }
38359
38556
  ]
38360
38557
  },
38558
+ {
38559
+ "name": "DeleteHarnessEndpoint",
38560
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteHarnessEndpoint.html",
38561
+ "permissionOnly": false,
38562
+ "description": "Grants permission to delete a harness endpoint",
38563
+ "accessLevel": "Write",
38564
+ "resourceTypes": [
38565
+ {
38566
+ "resourceType": "harness",
38567
+ "required": true,
38568
+ "conditionKeys": [],
38569
+ "dependentActions": [
38570
+ "bedrock-agentcore:DeleteAgentRuntimeEndpoint"
38571
+ ]
38572
+ },
38573
+ {
38574
+ "resourceType": "harness-endpoint",
38575
+ "required": true,
38576
+ "conditionKeys": [],
38577
+ "dependentActions": []
38578
+ }
38579
+ ]
38580
+ },
38361
38581
  {
38362
38582
  "name": "DeleteMemory",
38363
38583
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteMemory.html",
@@ -38649,6 +38869,66 @@
38649
38869
  }
38650
38870
  ]
38651
38871
  },
38872
+ {
38873
+ "name": "GatewayAssociateWebACL",
38874
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
38875
+ "permissionOnly": true,
38876
+ "description": "Grants permission to associate an AWS WAF Web ACL with an AgentCore Gateway",
38877
+ "accessLevel": "Write",
38878
+ "resourceTypes": [
38879
+ {
38880
+ "resourceType": "gateway",
38881
+ "required": true,
38882
+ "conditionKeys": [],
38883
+ "dependentActions": []
38884
+ }
38885
+ ]
38886
+ },
38887
+ {
38888
+ "name": "GatewayDisassociateWebACL",
38889
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
38890
+ "permissionOnly": true,
38891
+ "description": "Grants permission to remove the AWS WAF Web ACL association from an AgentCore Gateway",
38892
+ "accessLevel": "Write",
38893
+ "resourceTypes": [
38894
+ {
38895
+ "resourceType": "gateway",
38896
+ "required": true,
38897
+ "conditionKeys": [],
38898
+ "dependentActions": []
38899
+ }
38900
+ ]
38901
+ },
38902
+ {
38903
+ "name": "GatewayGetWebACLForResource",
38904
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
38905
+ "permissionOnly": true,
38906
+ "description": "Grants permission to retrieve the AWS WAF Web ACL ARN currently associated with an AgentCore Gateway",
38907
+ "accessLevel": "Read",
38908
+ "resourceTypes": [
38909
+ {
38910
+ "resourceType": "gateway",
38911
+ "required": true,
38912
+ "conditionKeys": [],
38913
+ "dependentActions": []
38914
+ }
38915
+ ]
38916
+ },
38917
+ {
38918
+ "name": "GatewayListResourcesForWebACL",
38919
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
38920
+ "permissionOnly": true,
38921
+ "description": "Grants permission to list AgentCore Gateways associated with an AWS WAF Web ACL",
38922
+ "accessLevel": "List",
38923
+ "resourceTypes": [
38924
+ {
38925
+ "resourceType": "",
38926
+ "required": false,
38927
+ "conditionKeys": [],
38928
+ "dependentActions": []
38929
+ }
38930
+ ]
38931
+ },
38652
38932
  {
38653
38933
  "name": "GetABTest",
38654
38934
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetABTest.html",
@@ -38973,6 +39253,27 @@
38973
39253
  }
38974
39254
  ]
38975
39255
  },
39256
+ {
39257
+ "name": "GetHarnessEndpoint",
39258
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetHarnessEndpoint.html",
39259
+ "permissionOnly": false,
39260
+ "description": "Grants permission to get details of a harness endpoint",
39261
+ "accessLevel": "Read",
39262
+ "resourceTypes": [
39263
+ {
39264
+ "resourceType": "harness",
39265
+ "required": true,
39266
+ "conditionKeys": [],
39267
+ "dependentActions": []
39268
+ },
39269
+ {
39270
+ "resourceType": "harness-endpoint",
39271
+ "required": true,
39272
+ "conditionKeys": [],
39273
+ "dependentActions": []
39274
+ }
39275
+ ]
39276
+ },
38976
39277
  {
38977
39278
  "name": "GetMemory",
38978
39279
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetMemory.html",
@@ -39715,6 +40016,12 @@
39715
40016
  "dependentActions": [
39716
40017
  "bedrock-agentcore:InvokeAgentRuntime"
39717
40018
  ]
40019
+ },
40020
+ {
40021
+ "resourceType": "harness-endpoint",
40022
+ "required": true,
40023
+ "conditionKeys": [],
40024
+ "dependentActions": []
39718
40025
  }
39719
40026
  ]
39720
40027
  },
@@ -39733,6 +40040,21 @@
39733
40040
  }
39734
40041
  ]
39735
40042
  },
40043
+ {
40044
+ "name": "InvokeWebSearch",
40045
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html",
40046
+ "permissionOnly": true,
40047
+ "description": "Grants permission to invoke a web search target",
40048
+ "accessLevel": "Permissions management",
40049
+ "resourceTypes": [
40050
+ {
40051
+ "resourceType": "web-search",
40052
+ "required": true,
40053
+ "conditionKeys": [],
40054
+ "dependentActions": []
40055
+ }
40056
+ ]
40057
+ },
39736
40058
  {
39737
40059
  "name": "ListABTests",
39738
40060
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListABTests.html",
@@ -40039,6 +40361,21 @@
40039
40361
  }
40040
40362
  ]
40041
40363
  },
40364
+ {
40365
+ "name": "ListHarnessEndpoints",
40366
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListHarnessEndpoints.html",
40367
+ "permissionOnly": false,
40368
+ "description": "Grants permission to list harness endpoints",
40369
+ "accessLevel": "List",
40370
+ "resourceTypes": [
40371
+ {
40372
+ "resourceType": "",
40373
+ "required": false,
40374
+ "conditionKeys": [],
40375
+ "dependentActions": []
40376
+ }
40377
+ ]
40378
+ },
40042
40379
  {
40043
40380
  "name": "ListHarnesses",
40044
40381
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListHarnesses.html",
@@ -41389,13 +41726,39 @@
41389
41726
  "required": true,
41390
41727
  "conditionKeys": [],
41391
41728
  "dependentActions": [
41729
+ "bedrock-agentcore:CreateMemory",
41392
41730
  "bedrock-agentcore:GetAgentRuntime",
41731
+ "bedrock-agentcore:GetMemory",
41393
41732
  "bedrock-agentcore:UpdateAgentRuntime",
41733
+ "bedrock-agentcore:UpdateMemory",
41394
41734
  "iam:PassRole"
41395
41735
  ]
41396
41736
  }
41397
41737
  ]
41398
41738
  },
41739
+ {
41740
+ "name": "UpdateHarnessEndpoint",
41741
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateHarnessEndpoint.html",
41742
+ "permissionOnly": false,
41743
+ "description": "Grants permission to update harness endpoint",
41744
+ "accessLevel": "Write",
41745
+ "resourceTypes": [
41746
+ {
41747
+ "resourceType": "harness",
41748
+ "required": true,
41749
+ "conditionKeys": [],
41750
+ "dependentActions": [
41751
+ "bedrock-agentcore:UpdateAgentRuntimeEndpoint"
41752
+ ]
41753
+ },
41754
+ {
41755
+ "resourceType": "harness-endpoint",
41756
+ "required": true,
41757
+ "conditionKeys": [],
41758
+ "dependentActions": []
41759
+ }
41760
+ ]
41761
+ },
41399
41762
  {
41400
41763
  "name": "UpdateMemory",
41401
41764
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateMemory.html",
@@ -41772,29 +42135,45 @@
41772
42135
  "aws:ResourceTag/${TagKey}"
41773
42136
  ]
41774
42137
  },
42138
+ {
42139
+ "name": "harness-endpoint",
42140
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/harness-endpoint.html",
42141
+ "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:harness/${HarnessId}/harness-endpoint/${Name}",
42142
+ "conditionKeys": [
42143
+ "aws:ResourceTag/${TagKey}"
42144
+ ]
42145
+ },
41775
42146
  {
41776
42147
  "name": "batch-evaluate",
41777
42148
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/batchEvaluation.html",
41778
42149
  "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:batch-evaluate/${BatchEvaluationId}",
41779
- "conditionKeys": []
42150
+ "conditionKeys": [
42151
+ "aws:ResourceTag/${TagKey}"
42152
+ ]
41780
42153
  },
41781
42154
  {
41782
42155
  "name": "ab-test",
41783
42156
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/abTest.html",
41784
42157
  "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:ab-test/${ABTestId}",
41785
- "conditionKeys": []
42158
+ "conditionKeys": [
42159
+ "aws:ResourceTag/${TagKey}"
42160
+ ]
41786
42161
  },
41787
42162
  {
41788
42163
  "name": "recommendation",
41789
42164
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/recommendation.html",
41790
42165
  "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:recommendation/${RecommendationId}",
41791
- "conditionKeys": []
42166
+ "conditionKeys": [
42167
+ "aws:ResourceTag/${TagKey}"
42168
+ ]
41792
42169
  },
41793
42170
  {
41794
42171
  "name": "configuration-bundle",
41795
42172
  "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/configurationBundle.html",
41796
42173
  "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:configuration-bundle/${ConfigurationBundleId}",
41797
- "conditionKeys": []
42174
+ "conditionKeys": [
42175
+ "aws:ResourceTag/${TagKey}"
42176
+ ]
41798
42177
  },
41799
42178
  {
41800
42179
  "name": "payment-manager",
@@ -41811,6 +42190,12 @@
41811
42190
  "conditionKeys": [
41812
42191
  "aws:ResourceTag/${TagKey}"
41813
42192
  ]
42193
+ },
42194
+ {
42195
+ "name": "web-search",
42196
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/webSearch.html",
42197
+ "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:tool/web-search.v1",
42198
+ "conditionKeys": []
41814
42199
  }
41815
42200
  ],
41816
42201
  "conditionKeys": [
@@ -103246,8 +103631,8 @@
103246
103631
  "accessLevel": "Write",
103247
103632
  "resourceTypes": [
103248
103633
  {
103249
- "resourceType": "contact",
103250
- "required": true,
103634
+ "resourceType": "",
103635
+ "required": false,
103251
103636
  "conditionKeys": [],
103252
103637
  "dependentActions": []
103253
103638
  }
@@ -121206,6 +121591,21 @@
121206
121591
  }
121207
121592
  ]
121208
121593
  },
121594
+ {
121595
+ "name": "DeleteLineageEvent",
121596
+ "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteLineageEvent.html",
121597
+ "permissionOnly": false,
121598
+ "description": "Grants permission to delete lineage events",
121599
+ "accessLevel": "Write",
121600
+ "resourceTypes": [
121601
+ {
121602
+ "resourceType": "",
121603
+ "required": false,
121604
+ "conditionKeys": [],
121605
+ "dependentActions": []
121606
+ }
121607
+ ]
121608
+ },
121209
121609
  {
121210
121610
  "name": "DeleteListing",
121211
121611
  "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteListing.html",
@@ -240296,14 +240696,6 @@
240296
240696
  "conditionKeys": [
240297
240697
  "aws:ResourceTag/${TagKey}"
240298
240698
  ]
240299
- },
240300
- {
240301
- "name": "Connector",
240302
- "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html",
240303
- "arnPattern": "arn:${Partition}:inspector2:${Region}:${Account}:connector/${ConnectorId}",
240304
- "conditionKeys": [
240305
- "aws:ResourceTag/${TagKey}"
240306
- ]
240307
240699
  }
240308
240700
  ],
240309
240701
  "conditionKeys": [
@@ -311724,6 +312116,21 @@
311724
312116
  }
311725
312117
  ]
311726
312118
  },
312119
+ {
312120
+ "name": "AttachDataSource",
312121
+ "apiReferenceUrl": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_AttachDataSource.html",
312122
+ "permissionOnly": false,
312123
+ "description": "Grants permission to attach a data source to an OpenSearch Application",
312124
+ "accessLevel": "Write",
312125
+ "resourceTypes": [
312126
+ {
312127
+ "resourceType": "application",
312128
+ "required": true,
312129
+ "conditionKeys": [],
312130
+ "dependentActions": []
312131
+ }
312132
+ ]
312133
+ },
311727
312134
  {
311728
312135
  "name": "AuthorizeVpcEndpointAccess",
311729
312136
  "apiReferenceUrl": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_AuthorizeVpcEndpointAccess.html",
@@ -312165,6 +312572,21 @@
312165
312572
  }
312166
312573
  ]
312167
312574
  },
312575
+ {
312576
+ "name": "DescribeDataSourceAttachment",
312577
+ "apiReferenceUrl": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeDataSourceAttachment.html",
312578
+ "permissionOnly": false,
312579
+ "description": "Grants permission to describe the status of a data source attachment for an OpenSearch Application",
312580
+ "accessLevel": "Read",
312581
+ "resourceTypes": [
312582
+ {
312583
+ "resourceType": "application",
312584
+ "required": true,
312585
+ "conditionKeys": [],
312586
+ "dependentActions": []
312587
+ }
312588
+ ]
312589
+ },
312168
312590
  {
312169
312591
  "name": "DescribeDomain",
312170
312592
  "apiReferenceUrl": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeDomain.html",
@@ -312525,6 +312947,21 @@
312525
312947
  }
312526
312948
  ]
312527
312949
  },
312950
+ {
312951
+ "name": "DetachDataSource",
312952
+ "apiReferenceUrl": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DetachDataSource.html",
312953
+ "permissionOnly": false,
312954
+ "description": "Grants permission to detach a data source from an OpenSearch Application",
312955
+ "accessLevel": "Write",
312956
+ "resourceTypes": [
312957
+ {
312958
+ "resourceType": "application",
312959
+ "required": true,
312960
+ "conditionKeys": [],
312961
+ "dependentActions": []
312962
+ }
312963
+ ]
312964
+ },
312528
312965
  {
312529
312966
  "name": "DissociatePackage",
312530
312967
  "apiReferenceUrl": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DissociatePackage.html",
@@ -312855,6 +313292,21 @@
312855
313292
  }
312856
313293
  ]
312857
313294
  },
313295
+ {
313296
+ "name": "ListDataSourceAttachments",
313297
+ "apiReferenceUrl": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListDataSourceAttachments.html",
313298
+ "permissionOnly": false,
313299
+ "description": "Grants permission to list data source attachments for an OpenSearch Application",
313300
+ "accessLevel": "List",
313301
+ "resourceTypes": [
313302
+ {
313303
+ "resourceType": "application",
313304
+ "required": true,
313305
+ "conditionKeys": [],
313306
+ "dependentActions": []
313307
+ }
313308
+ ]
313309
+ },
312858
313310
  {
312859
313311
  "name": "ListDataSources",
312860
313312
  "apiReferenceUrl": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListDataSources.html",
@@ -319670,6 +320122,29 @@
319670
320122
  }
319671
320123
  ]
319672
320124
  },
320125
+ {
320126
+ "name": "GetProspectingFromEngagementTask",
320127
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_GetProspectingFromEngagementTask.html",
320128
+ "permissionOnly": false,
320129
+ "description": "Grants permission to retrieve prospecting from engagement task details in AWS Partner Central",
320130
+ "accessLevel": "Read",
320131
+ "resourceTypes": [
320132
+ {
320133
+ "resourceType": "ProspectingFromEngagementTask",
320134
+ "required": true,
320135
+ "conditionKeys": [],
320136
+ "dependentActions": []
320137
+ },
320138
+ {
320139
+ "resourceType": "",
320140
+ "required": false,
320141
+ "conditionKeys": [
320142
+ "partnercentral:Catalog"
320143
+ ],
320144
+ "dependentActions": []
320145
+ }
320146
+ ]
320147
+ },
319673
320148
  {
319674
320149
  "name": "GetRelationship",
319675
320150
  "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_channel_GetRelationship.html",
@@ -320140,6 +320615,23 @@
320140
320615
  }
320141
320616
  ]
320142
320617
  },
320618
+ {
320619
+ "name": "ListProspectingFromEngagementTasks",
320620
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_ListProspectingFromEngagementTasks.html",
320621
+ "permissionOnly": false,
320622
+ "description": "Grants permission to list prospecting from engagement tasks in AWS Partner Central",
320623
+ "accessLevel": "List",
320624
+ "resourceTypes": [
320625
+ {
320626
+ "resourceType": "",
320627
+ "required": false,
320628
+ "conditionKeys": [
320629
+ "partnercentral:Catalog"
320630
+ ],
320631
+ "dependentActions": []
320632
+ }
320633
+ ]
320634
+ },
320143
320635
  {
320144
320636
  "name": "ListRelationships",
320145
320637
  "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_channel_ListRelationships.html",
@@ -320224,7 +320716,7 @@
320224
320716
  "name": "ListTagsForResource",
320225
320717
  "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_ListTagsForResource.html",
320226
320718
  "permissionOnly": false,
320227
- "description": "Grants permission to add lists tags to a resource. Supported resource: ResourceSnapshotJob",
320719
+ "description": "Grants permission to list tags for a resource in AWS Partner Central",
320228
320720
  "accessLevel": "Read",
320229
320721
  "resourceTypes": [
320230
320722
  {
@@ -320572,6 +321064,29 @@
320572
321064
  }
320573
321065
  ]
320574
321066
  },
321067
+ {
321068
+ "name": "StartProspectingFromEngagementTask",
321069
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_StartProspectingFromEngagementTask.html",
321070
+ "permissionOnly": false,
321071
+ "description": "Grants permission to initiate tasks that start prospecting from an engagement in AWS Partner Central",
321072
+ "accessLevel": "Write",
321073
+ "resourceTypes": [
321074
+ {
321075
+ "resourceType": "Engagement",
321076
+ "required": true,
321077
+ "conditionKeys": [],
321078
+ "dependentActions": []
321079
+ },
321080
+ {
321081
+ "resourceType": "",
321082
+ "required": false,
321083
+ "conditionKeys": [
321084
+ "partnercentral:Catalog"
321085
+ ],
321086
+ "dependentActions": []
321087
+ }
321088
+ ]
321089
+ },
320575
321090
  {
320576
321091
  "name": "StartResourceSnapshotJob",
320577
321092
  "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/API_StartResourceSnapshotJob.html",
@@ -321101,6 +321616,12 @@
321101
321616
  "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/getting-started/partner-analytics.html",
321102
321617
  "arnPattern": "arn:${Partition}:partnercentral::${Account}:catalog/${Catalog}/ReportingData/${TableId}/Dashboard/${DashboardId}",
321103
321618
  "conditionKeys": []
321619
+ },
321620
+ {
321621
+ "name": "ProspectingFromEngagementTask",
321622
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/APIReference/working-with-your-leads.html",
321623
+ "arnPattern": "arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/prospecting-from-engagement-task/${TaskIdentifier}",
321624
+ "conditionKeys": []
321104
321625
  }
321105
321626
  ],
321106
321627
  "conditionKeys": [
@@ -370416,6 +370937,42 @@
370416
370937
  }
370417
370938
  ]
370418
370939
  },
370940
+ {
370941
+ "name": "DeleteObjectAnnotation",
370942
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectAnnotation.html",
370943
+ "permissionOnly": false,
370944
+ "description": "Grants permission to delete an annotation from an object",
370945
+ "accessLevel": "Write",
370946
+ "resourceTypes": [
370947
+ {
370948
+ "resourceType": "accesspointobject",
370949
+ "required": false,
370950
+ "conditionKeys": [],
370951
+ "dependentActions": []
370952
+ },
370953
+ {
370954
+ "resourceType": "object",
370955
+ "required": false,
370956
+ "conditionKeys": [],
370957
+ "dependentActions": []
370958
+ },
370959
+ {
370960
+ "resourceType": "",
370961
+ "required": false,
370962
+ "conditionKeys": [
370963
+ "s3:authType",
370964
+ "s3:signatureAge",
370965
+ "s3:signatureversion",
370966
+ "s3:TlsVersion",
370967
+ "s3:x-amz-content-sha256",
370968
+ "s3:ResourceAccount",
370969
+ "s3:x-amz-object-if-match",
370970
+ "s3:ExistingObjectTag/<key>"
370971
+ ],
370972
+ "dependentActions": []
370973
+ }
370974
+ ]
370975
+ },
370419
370976
  {
370420
370977
  "name": "DeleteObjectTagging",
370421
370978
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectTagging.html",
@@ -370487,6 +371044,43 @@
370487
371044
  }
370488
371045
  ]
370489
371046
  },
371047
+ {
371048
+ "name": "DeleteObjectVersionAnnotation",
371049
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectAnnotation.html",
371050
+ "permissionOnly": false,
371051
+ "description": "Grants permission to delete an annotation from a specific version of an object",
371052
+ "accessLevel": "Write",
371053
+ "resourceTypes": [
371054
+ {
371055
+ "resourceType": "accesspointobject",
371056
+ "required": false,
371057
+ "conditionKeys": [],
371058
+ "dependentActions": []
371059
+ },
371060
+ {
371061
+ "resourceType": "object",
371062
+ "required": false,
371063
+ "conditionKeys": [],
371064
+ "dependentActions": []
371065
+ },
371066
+ {
371067
+ "resourceType": "",
371068
+ "required": false,
371069
+ "conditionKeys": [
371070
+ "s3:authType",
371071
+ "s3:signatureAge",
371072
+ "s3:signatureversion",
371073
+ "s3:TlsVersion",
371074
+ "s3:x-amz-content-sha256",
371075
+ "s3:ResourceAccount",
371076
+ "s3:versionid",
371077
+ "s3:x-amz-object-if-match",
371078
+ "s3:ExistingObjectTag/<key>"
371079
+ ],
371080
+ "dependentActions": []
371081
+ }
371082
+ ]
371083
+ },
370490
371084
  {
370491
371085
  "name": "DeleteObjectVersionTagging",
370492
371086
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectTagging.html",
@@ -371965,10 +372559,46 @@
371965
372559
  ]
371966
372560
  },
371967
372561
  {
371968
- "name": "GetObjectAcl",
371969
- "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAcl.html",
372562
+ "name": "GetObjectAcl",
372563
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAcl.html",
372564
+ "permissionOnly": false,
372565
+ "description": "Grants permission to return the access control list (ACL) of an object",
372566
+ "accessLevel": "Read",
372567
+ "resourceTypes": [
372568
+ {
372569
+ "resourceType": "accesspointobject",
372570
+ "required": false,
372571
+ "conditionKeys": [],
372572
+ "dependentActions": []
372573
+ },
372574
+ {
372575
+ "resourceType": "object",
372576
+ "required": false,
372577
+ "conditionKeys": [],
372578
+ "dependentActions": []
372579
+ },
372580
+ {
372581
+ "resourceType": "",
372582
+ "required": false,
372583
+ "conditionKeys": [
372584
+ "s3:AccessGrantsInstanceArn",
372585
+ "s3:ExistingObjectTag/<key>",
372586
+ "s3:authType",
372587
+ "s3:ResourceAccount",
372588
+ "s3:signatureAge",
372589
+ "s3:signatureversion",
372590
+ "s3:TlsVersion",
372591
+ "s3:x-amz-content-sha256"
372592
+ ],
372593
+ "dependentActions": []
372594
+ }
372595
+ ]
372596
+ },
372597
+ {
372598
+ "name": "GetObjectAnnotation",
372599
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAnnotation.html",
371970
372600
  "permissionOnly": false,
371971
- "description": "Grants permission to return the access control list (ACL) of an object",
372601
+ "description": "Grants permission to retrieve an annotation from an object",
371972
372602
  "accessLevel": "Read",
371973
372603
  "resourceTypes": [
371974
372604
  {
@@ -371987,14 +372617,13 @@
371987
372617
  "resourceType": "",
371988
372618
  "required": false,
371989
372619
  "conditionKeys": [
371990
- "s3:AccessGrantsInstanceArn",
371991
- "s3:ExistingObjectTag/<key>",
371992
372620
  "s3:authType",
371993
- "s3:ResourceAccount",
371994
372621
  "s3:signatureAge",
371995
372622
  "s3:signatureversion",
371996
372623
  "s3:TlsVersion",
371997
- "s3:x-amz-content-sha256"
372624
+ "s3:x-amz-content-sha256",
372625
+ "s3:ResourceAccount",
372626
+ "s3:ExistingObjectTag/<key>"
371998
372627
  ],
371999
372628
  "dependentActions": []
372000
372629
  }
@@ -372240,6 +372869,70 @@
372240
372869
  }
372241
372870
  ]
372242
372871
  },
372872
+ {
372873
+ "name": "GetObjectVersionAnnotation",
372874
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAnnotation.html",
372875
+ "permissionOnly": false,
372876
+ "description": "Grants permission to retrieve an annotation from a specific version of an object",
372877
+ "accessLevel": "Read",
372878
+ "resourceTypes": [
372879
+ {
372880
+ "resourceType": "accesspointobject",
372881
+ "required": false,
372882
+ "conditionKeys": [],
372883
+ "dependentActions": []
372884
+ },
372885
+ {
372886
+ "resourceType": "object",
372887
+ "required": false,
372888
+ "conditionKeys": [],
372889
+ "dependentActions": []
372890
+ },
372891
+ {
372892
+ "resourceType": "",
372893
+ "required": false,
372894
+ "conditionKeys": [
372895
+ "s3:authType",
372896
+ "s3:signatureAge",
372897
+ "s3:signatureversion",
372898
+ "s3:TlsVersion",
372899
+ "s3:x-amz-content-sha256",
372900
+ "s3:ResourceAccount",
372901
+ "s3:versionid",
372902
+ "s3:ExistingObjectTag/<key>"
372903
+ ],
372904
+ "dependentActions": []
372905
+ }
372906
+ ]
372907
+ },
372908
+ {
372909
+ "name": "GetObjectVersionAnnotationForReplication",
372910
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html",
372911
+ "permissionOnly": false,
372912
+ "description": "Grants permission to get an object version annotation for replication",
372913
+ "accessLevel": "Read",
372914
+ "resourceTypes": [
372915
+ {
372916
+ "resourceType": "object",
372917
+ "required": true,
372918
+ "conditionKeys": [],
372919
+ "dependentActions": []
372920
+ },
372921
+ {
372922
+ "resourceType": "",
372923
+ "required": false,
372924
+ "conditionKeys": [
372925
+ "s3:authType",
372926
+ "s3:ResourceAccount",
372927
+ "s3:signatureAge",
372928
+ "s3:signatureversion",
372929
+ "s3:TlsVersion",
372930
+ "s3:x-amz-content-sha256"
372931
+ ],
372932
+ "dependentActions": []
372933
+ }
372934
+ ]
372935
+ },
372243
372936
  {
372244
372937
  "name": "GetObjectVersionAttributes",
372245
372938
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAttributes.html",
@@ -372895,6 +373588,81 @@
372895
373588
  }
372896
373589
  ]
372897
373590
  },
373591
+ {
373592
+ "name": "ListObjectAnnotations",
373593
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectAnnotations.html",
373594
+ "permissionOnly": false,
373595
+ "description": "Grants permission to list annotations on an object",
373596
+ "accessLevel": "List",
373597
+ "resourceTypes": [
373598
+ {
373599
+ "resourceType": "accesspointobject",
373600
+ "required": false,
373601
+ "conditionKeys": [],
373602
+ "dependentActions": []
373603
+ },
373604
+ {
373605
+ "resourceType": "object",
373606
+ "required": false,
373607
+ "conditionKeys": [],
373608
+ "dependentActions": []
373609
+ },
373610
+ {
373611
+ "resourceType": "",
373612
+ "required": false,
373613
+ "conditionKeys": [
373614
+ "s3:authType",
373615
+ "s3:signatureAge",
373616
+ "s3:signatureversion",
373617
+ "s3:TlsVersion",
373618
+ "s3:x-amz-content-sha256",
373619
+ "s3:ResourceAccount",
373620
+ "s3:annotation-prefix",
373621
+ "s3:max-annotation-results",
373622
+ "s3:ExistingObjectTag/<key>"
373623
+ ],
373624
+ "dependentActions": []
373625
+ }
373626
+ ]
373627
+ },
373628
+ {
373629
+ "name": "ListObjectVersionAnnotations",
373630
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectAnnotations.html",
373631
+ "permissionOnly": false,
373632
+ "description": "Grants permission to list annotations on a specific version of an object",
373633
+ "accessLevel": "List",
373634
+ "resourceTypes": [
373635
+ {
373636
+ "resourceType": "accesspointobject",
373637
+ "required": false,
373638
+ "conditionKeys": [],
373639
+ "dependentActions": []
373640
+ },
373641
+ {
373642
+ "resourceType": "object",
373643
+ "required": false,
373644
+ "conditionKeys": [],
373645
+ "dependentActions": []
373646
+ },
373647
+ {
373648
+ "resourceType": "",
373649
+ "required": false,
373650
+ "conditionKeys": [
373651
+ "s3:authType",
373652
+ "s3:signatureAge",
373653
+ "s3:signatureversion",
373654
+ "s3:TlsVersion",
373655
+ "s3:x-amz-content-sha256",
373656
+ "s3:ResourceAccount",
373657
+ "s3:versionid",
373658
+ "s3:annotation-prefix",
373659
+ "s3:max-annotation-results",
373660
+ "s3:ExistingObjectTag/<key>"
373661
+ ],
373662
+ "dependentActions": []
373663
+ }
373664
+ ]
373665
+ },
372898
373666
  {
372899
373667
  "name": "ListStorageLensConfigurations",
372900
373668
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListStorageLensConfigurations.html",
@@ -373881,6 +374649,7 @@
373881
374649
  "s3:x-amz-grant-write",
373882
374650
  "s3:x-amz-grant-write-acp",
373883
374651
  "s3:x-amz-metadata-directive",
374652
+ "s3:x-amz-object-annotation-directive",
373884
374653
  "s3:x-amz-server-side-encryption",
373885
374654
  "s3:x-amz-server-side-encryption-aws-kms-key-id",
373886
374655
  "s3:x-amz-server-side-encryption-customer-algorithm",
@@ -373941,6 +374710,42 @@
373941
374710
  }
373942
374711
  ]
373943
374712
  },
374713
+ {
374714
+ "name": "PutObjectAnnotation",
374715
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectAnnotation.html",
374716
+ "permissionOnly": false,
374717
+ "description": "Grants permission to add or replace an annotation on an object",
374718
+ "accessLevel": "Write",
374719
+ "resourceTypes": [
374720
+ {
374721
+ "resourceType": "accesspointobject",
374722
+ "required": false,
374723
+ "conditionKeys": [],
374724
+ "dependentActions": []
374725
+ },
374726
+ {
374727
+ "resourceType": "object",
374728
+ "required": false,
374729
+ "conditionKeys": [],
374730
+ "dependentActions": []
374731
+ },
374732
+ {
374733
+ "resourceType": "",
374734
+ "required": false,
374735
+ "conditionKeys": [
374736
+ "s3:authType",
374737
+ "s3:signatureAge",
374738
+ "s3:signatureversion",
374739
+ "s3:TlsVersion",
374740
+ "s3:x-amz-content-sha256",
374741
+ "s3:ResourceAccount",
374742
+ "s3:x-amz-object-if-match",
374743
+ "s3:ExistingObjectTag/<key>"
374744
+ ],
374745
+ "dependentActions": []
374746
+ }
374747
+ ]
374748
+ },
373944
374749
  {
373945
374750
  "name": "PutObjectLegalHold",
373946
374751
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectLegalHold.html",
@@ -374094,6 +374899,43 @@
374094
374899
  }
374095
374900
  ]
374096
374901
  },
374902
+ {
374903
+ "name": "PutObjectVersionAnnotation",
374904
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectAnnotation.html",
374905
+ "permissionOnly": false,
374906
+ "description": "Grants permission to add or replace an annotation on a specific version of an object",
374907
+ "accessLevel": "Write",
374908
+ "resourceTypes": [
374909
+ {
374910
+ "resourceType": "accesspointobject",
374911
+ "required": false,
374912
+ "conditionKeys": [],
374913
+ "dependentActions": []
374914
+ },
374915
+ {
374916
+ "resourceType": "object",
374917
+ "required": false,
374918
+ "conditionKeys": [],
374919
+ "dependentActions": []
374920
+ },
374921
+ {
374922
+ "resourceType": "",
374923
+ "required": false,
374924
+ "conditionKeys": [
374925
+ "s3:authType",
374926
+ "s3:signatureAge",
374927
+ "s3:signatureversion",
374928
+ "s3:TlsVersion",
374929
+ "s3:x-amz-content-sha256",
374930
+ "s3:ResourceAccount",
374931
+ "s3:versionid",
374932
+ "s3:x-amz-object-if-match",
374933
+ "s3:ExistingObjectTag/<key>"
374934
+ ],
374935
+ "dependentActions": []
374936
+ }
374937
+ ]
374938
+ },
374097
374939
  {
374098
374940
  "name": "PutObjectVersionTagging",
374099
374941
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectTagging.html",
@@ -374276,6 +375118,34 @@
374276
375118
  }
374277
375119
  ]
374278
375120
  },
375121
+ {
375122
+ "name": "ReplicateObjectAnnotation",
375123
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html",
375124
+ "permissionOnly": false,
375125
+ "description": "Grants permission to replicate annotations to the destination bucket",
375126
+ "accessLevel": "Write",
375127
+ "resourceTypes": [
375128
+ {
375129
+ "resourceType": "object",
375130
+ "required": true,
375131
+ "conditionKeys": [],
375132
+ "dependentActions": []
375133
+ },
375134
+ {
375135
+ "resourceType": "",
375136
+ "required": false,
375137
+ "conditionKeys": [
375138
+ "s3:authType",
375139
+ "s3:ResourceAccount",
375140
+ "s3:signatureAge",
375141
+ "s3:signatureversion",
375142
+ "s3:TlsVersion",
375143
+ "s3:x-amz-content-sha256"
375144
+ ],
375145
+ "dependentActions": []
375146
+ }
375147
+ ]
375148
+ },
374279
375149
  {
374280
375150
  "name": "ReplicateTags",
374281
375151
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html",
@@ -374517,6 +375387,34 @@
374517
375387
  }
374518
375388
  ]
374519
375389
  },
375390
+ {
375391
+ "name": "UpdateBucketMetadataAnnotationTableConfiguration",
375392
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_UpdateBucketMetadataAnnotationTableConfiguration.html",
375393
+ "permissionOnly": false,
375394
+ "description": "Grants permission to update the annotation table configuration for a bucket",
375395
+ "accessLevel": "Write",
375396
+ "resourceTypes": [
375397
+ {
375398
+ "resourceType": "bucket",
375399
+ "required": true,
375400
+ "conditionKeys": [],
375401
+ "dependentActions": []
375402
+ },
375403
+ {
375404
+ "resourceType": "",
375405
+ "required": false,
375406
+ "conditionKeys": [
375407
+ "s3:authType",
375408
+ "s3:ResourceAccount",
375409
+ "s3:signatureAge",
375410
+ "s3:signatureversion",
375411
+ "s3:TlsVersion",
375412
+ "s3:x-amz-content-sha256"
375413
+ ],
375414
+ "dependentActions": []
375415
+ }
375416
+ ]
375417
+ },
374520
375418
  {
374521
375419
  "name": "UpdateBucketMetadataInventoryTableConfiguration",
374522
375420
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_UpdateBucketMetadataInventoryTableConfiguration.html",
@@ -374971,6 +375869,12 @@
374971
375869
  "description": "Filters access by the TLS version used by the client",
374972
375870
  "type": "Numeric"
374973
375871
  },
375872
+ {
375873
+ "name": "s3:annotation-prefix",
375874
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-annotation-prefix-condition",
375875
+ "description": "Filters access by the annotation name prefix specified in the request",
375876
+ "type": "String"
375877
+ },
374974
375878
  {
374975
375879
  "name": "s3:authType",
374976
375880
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/bucket-policy-s3-sigv4-conditions.html",
@@ -375025,6 +375929,12 @@
375025
375929
  "description": "Filters access by specific log type, currently supports S3_SERVER_ACCESS_LOGS",
375026
375930
  "type": "String"
375027
375931
  },
375932
+ {
375933
+ "name": "s3:max-annotation-results",
375934
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-annotation-max-results",
375935
+ "description": "Filters access by the maximum number of annotation results requested",
375936
+ "type": "Numeric"
375937
+ },
375028
375938
  {
375029
375939
  "name": "s3:max-keys",
375030
375940
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-numeric-condition-operators",
@@ -375145,6 +376055,18 @@
375145
376055
  "description": "Filters access by object metadata behavior (COPY or REPLACE) when objects are copied",
375146
376056
  "type": "String"
375147
376057
  },
376058
+ {
376059
+ "name": "s3:x-amz-object-annotation-directive",
376060
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_CopyObject.html",
376061
+ "description": "Filters access by the annotation copy directive specified in the request",
376062
+ "type": "String"
376063
+ },
376064
+ {
376065
+ "name": "s3:x-amz-object-if-match",
376066
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-annotation-conditional-writes",
376067
+ "description": "Filters access by the ETag of the object version specified in the request",
376068
+ "type": "String"
376069
+ },
375148
376070
  {
375149
376071
  "name": "s3:x-amz-object-ownership",
375150
376072
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/ensure-object-ownership.html#object-ownership-requiring-bucket-owner-enforced",