aws-iam-managed-policies 0.0.618 → 0.0.620

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -568183,8 +568183,8 @@
568183
568183
  },
568184
568184
  "AmazonBraketServiceRolePolicy": {
568185
568185
  "arn": "arn:aws:iam::aws:policy/aws-service-role/AmazonBraketServiceRolePolicy",
568186
- "latestVersionId": "v3",
568187
- "versionsCount": 3,
568186
+ "latestVersionId": "v4",
568187
+ "versionsCount": 4,
568188
568188
  "versions": {
568189
568189
  "v1": {
568190
568190
  "createdDate": "2020-08-04T17:12:23.000Z",
@@ -568279,10 +568279,65 @@
568279
568279
  }
568280
568280
  ]
568281
568281
  }
568282
+ },
568283
+ "v4": {
568284
+ "createdDate": "2020-08-04T17:12:23.000Z",
568285
+ "document": {
568286
+ "Version": "2012-10-17",
568287
+ "Statement": [
568288
+ {
568289
+ "Effect": "Allow",
568290
+ "Action": [
568291
+ "s3:PutObject",
568292
+ "s3:GetObject",
568293
+ "s3:ListBucket"
568294
+ ],
568295
+ "Resource": "arn:aws:s3:::amazon-braket-*",
568296
+ "Condition": {
568297
+ "StringEquals": {
568298
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
568299
+ }
568300
+ }
568301
+ },
568302
+ {
568303
+ "Effect": "Allow",
568304
+ "Action": [
568305
+ "s3:PutObject",
568306
+ "s3:GetObject",
568307
+ "s3:ListBucket"
568308
+ ],
568309
+ "Resource": "arn:aws:s3:::*",
568310
+ "Condition": {
568311
+ "StringEquals": {
568312
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
568313
+ },
568314
+ "StringEqualsIgnoreCase": {
568315
+ "aws:ResourceTag/AmazonBraket": "true"
568316
+ }
568317
+ }
568318
+ },
568319
+ {
568320
+ "Effect": "Allow",
568321
+ "Action": [
568322
+ "logs:PutLogEvents",
568323
+ "logs:CreateLogStream",
568324
+ "logs:DescribeLogStreams",
568325
+ "logs:CreateLogGroup",
568326
+ "logs:DescribeLogGroups"
568327
+ ],
568328
+ "Resource": "arn:aws:logs:*:*:log-group:/aws/braket:*",
568329
+ "Condition": {
568330
+ "StringEquals": {
568331
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
568332
+ }
568333
+ }
568334
+ }
568335
+ ]
568336
+ }
568282
568337
  }
568283
568338
  },
568284
568339
  "createdDate": "2020-08-04T17:12:23.000Z",
568285
- "lastUpdatedDate": "2025-07-11T21:37:07.000Z"
568340
+ "lastUpdatedDate": "2026-07-06T18:42:30.000Z"
568286
568341
  },
568287
568342
  "AWSLakeFormationCrossAccountManager": {
568288
568343
  "arn": "arn:aws:iam::aws:policy/AWSLakeFormationCrossAccountManager",
@@ -576398,8 +576453,8 @@
576398
576453
  },
576399
576454
  "AmazonBraketFullAccess": {
576400
576455
  "arn": "arn:aws:iam::aws:policy/AmazonBraketFullAccess",
576401
- "latestVersionId": "v12",
576402
- "versionsCount": 12,
576456
+ "latestVersionId": "v13",
576457
+ "versionsCount": 13,
576403
576458
  "versions": {
576404
576459
  "v1": {
576405
576460
  "createdDate": "2020-08-06T20:12:37.000Z",
@@ -577995,10 +578050,210 @@
577995
578050
  }
577996
578051
  ]
577997
578052
  }
578053
+ },
578054
+ "v13": {
578055
+ "createdDate": "2020-08-06T20:12:37.000Z",
578056
+ "document": {
578057
+ "Version": "2012-10-17",
578058
+ "Statement": [
578059
+ {
578060
+ "Effect": "Allow",
578061
+ "Action": [
578062
+ "s3:GetObject",
578063
+ "s3:PutObject",
578064
+ "s3:ListBucket",
578065
+ "s3:CreateBucket",
578066
+ "s3:PutBucketPublicAccessBlock",
578067
+ "s3:PutBucketPolicy"
578068
+ ],
578069
+ "Resource": "arn:aws:s3:::amazon-braket-*",
578070
+ "Condition": {
578071
+ "StringEquals": {
578072
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
578073
+ }
578074
+ }
578075
+ },
578076
+ {
578077
+ "Effect": "Allow",
578078
+ "Action": [
578079
+ "s3:GetObject",
578080
+ "s3:PutObject",
578081
+ "s3:ListBucket",
578082
+ "s3:CreateBucket",
578083
+ "s3:PutBucketPublicAccessBlock",
578084
+ "s3:PutBucketPolicy"
578085
+ ],
578086
+ "Resource": "arn:aws:s3:::*",
578087
+ "Condition": {
578088
+ "StringEquals": {
578089
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
578090
+ },
578091
+ "StringEqualsIgnoreCase": {
578092
+ "aws:ResourceTag/AmazonBraket": "true"
578093
+ }
578094
+ }
578095
+ },
578096
+ {
578097
+ "Effect": "Allow",
578098
+ "Action": [
578099
+ "s3:ListAllMyBuckets",
578100
+ "servicequotas:GetServiceQuota",
578101
+ "cloudwatch:GetMetricData",
578102
+ "pricing:GetProducts"
578103
+ ],
578104
+ "Resource": "*"
578105
+ },
578106
+ {
578107
+ "Effect": "Allow",
578108
+ "Action": [
578109
+ "ecr:GetDownloadUrlForLayer",
578110
+ "ecr:BatchGetImage",
578111
+ "ecr:BatchCheckLayerAvailability"
578112
+ ],
578113
+ "Resource": "arn:aws:ecr:*:*:repository/amazon-braket*"
578114
+ },
578115
+ {
578116
+ "Effect": "Allow",
578117
+ "Action": [
578118
+ "ecr:GetAuthorizationToken"
578119
+ ],
578120
+ "Resource": "*"
578121
+ },
578122
+ {
578123
+ "Effect": "Allow",
578124
+ "Action": [
578125
+ "logs:Describe*",
578126
+ "logs:Get*",
578127
+ "logs:List*",
578128
+ "logs:StartQuery",
578129
+ "logs:StopQuery",
578130
+ "logs:TestMetricFilter",
578131
+ "logs:FilterLogEvents"
578132
+ ],
578133
+ "Resource": "arn:aws:logs:*:*:log-group:/aws/braket*"
578134
+ },
578135
+ {
578136
+ "Effect": "Allow",
578137
+ "Action": [
578138
+ "iam:ListRoles",
578139
+ "iam:ListRolePolicies",
578140
+ "iam:GetRole",
578141
+ "iam:GetRolePolicy",
578142
+ "iam:ListAttachedRolePolicies"
578143
+ ],
578144
+ "Resource": "*"
578145
+ },
578146
+ {
578147
+ "Effect": "Allow",
578148
+ "Action": [
578149
+ "sagemaker:ListNotebookInstances"
578150
+ ],
578151
+ "Resource": "*"
578152
+ },
578153
+ {
578154
+ "Effect": "Allow",
578155
+ "Action": [
578156
+ "sagemaker:CreatePresignedNotebookInstanceUrl",
578157
+ "sagemaker:CreateNotebookInstance",
578158
+ "sagemaker:DeleteNotebookInstance",
578159
+ "sagemaker:DescribeNotebookInstance",
578160
+ "sagemaker:StartNotebookInstance",
578161
+ "sagemaker:StopNotebookInstance",
578162
+ "sagemaker:UpdateNotebookInstance",
578163
+ "sagemaker:ListTags",
578164
+ "sagemaker:AddTags",
578165
+ "sagemaker:DeleteTags"
578166
+ ],
578167
+ "Resource": "arn:aws:sagemaker:*:*:notebook-instance/amazon-braket-*"
578168
+ },
578169
+ {
578170
+ "Effect": "Allow",
578171
+ "Action": [
578172
+ "sagemaker:DescribeNotebookInstanceLifecycleConfig",
578173
+ "sagemaker:CreateNotebookInstanceLifecycleConfig",
578174
+ "sagemaker:DeleteNotebookInstanceLifecycleConfig",
578175
+ "sagemaker:ListNotebookInstanceLifecycleConfigs",
578176
+ "sagemaker:UpdateNotebookInstanceLifecycleConfig"
578177
+ ],
578178
+ "Resource": "arn:aws:sagemaker:*:*:notebook-instance-lifecycle-config/amazon-braket-*"
578179
+ },
578180
+ {
578181
+ "Effect": "Allow",
578182
+ "Action": "braket:*",
578183
+ "Resource": "*"
578184
+ },
578185
+ {
578186
+ "Effect": "Allow",
578187
+ "Action": "iam:CreateServiceLinkedRole",
578188
+ "Resource": "arn:aws:iam::*:role/aws-service-role/braket.amazonaws.com/AWSServiceRoleForAmazonBraket*",
578189
+ "Condition": {
578190
+ "StringEquals": {
578191
+ "iam:AWSServiceName": "braket.amazonaws.com"
578192
+ }
578193
+ }
578194
+ },
578195
+ {
578196
+ "Effect": "Allow",
578197
+ "Action": [
578198
+ "iam:PassRole"
578199
+ ],
578200
+ "Resource": "arn:aws:iam::*:role/service-role/AmazonBraketServiceSageMakerNotebookRole*",
578201
+ "Condition": {
578202
+ "StringLike": {
578203
+ "iam:PassedToService": [
578204
+ "sagemaker.amazonaws.com"
578205
+ ]
578206
+ }
578207
+ }
578208
+ },
578209
+ {
578210
+ "Effect": "Allow",
578211
+ "Action": [
578212
+ "iam:PassRole"
578213
+ ],
578214
+ "Resource": "arn:aws:iam::*:role/service-role/AmazonBraketJobsExecutionRole*",
578215
+ "Condition": {
578216
+ "StringLike": {
578217
+ "iam:PassedToService": [
578218
+ "braket.amazonaws.com"
578219
+ ]
578220
+ }
578221
+ }
578222
+ },
578223
+ {
578224
+ "Effect": "Allow",
578225
+ "Action": [
578226
+ "logs:GetQueryResults"
578227
+ ],
578228
+ "Resource": [
578229
+ "arn:aws:logs:*:*:log-group:*"
578230
+ ]
578231
+ },
578232
+ {
578233
+ "Effect": "Allow",
578234
+ "Action": [
578235
+ "logs:PutLogEvents",
578236
+ "logs:CreateLogStream",
578237
+ "logs:CreateLogGroup"
578238
+ ],
578239
+ "Resource": "arn:aws:logs:*:*:log-group:/aws/braket*"
578240
+ },
578241
+ {
578242
+ "Effect": "Allow",
578243
+ "Action": "cloudwatch:PutMetricData",
578244
+ "Resource": "*",
578245
+ "Condition": {
578246
+ "StringEquals": {
578247
+ "cloudwatch:namespace": "/aws/braket"
578248
+ }
578249
+ }
578250
+ }
578251
+ ]
578252
+ }
577998
578253
  }
577999
578254
  },
578000
578255
  "createdDate": "2020-08-06T20:12:37.000Z",
578001
- "lastUpdatedDate": "2026-02-12T18:01:26.000Z"
578256
+ "lastUpdatedDate": "2026-07-06T19:57:33.000Z"
578002
578257
  },
578003
578258
  "AWSLambdaMSKExecutionRole": {
578004
578259
  "arn": "arn:aws:iam::aws:policy/service-role/AWSLambdaMSKExecutionRole",
@@ -848997,8 +849252,8 @@
848997
849252
  },
848998
849253
  "AmazonBraketJobsExecutionPolicy": {
848999
849254
  "arn": "arn:aws:iam::aws:policy/AmazonBraketJobsExecutionPolicy",
849000
- "latestVersionId": "v2",
849001
- "versionsCount": 2,
849255
+ "latestVersionId": "v3",
849256
+ "versionsCount": 3,
849002
849257
  "versions": {
849003
849258
  "v2": {
849004
849259
  "createdDate": "2021-11-28T05:34:55.000Z",
@@ -849215,10 +849470,135 @@
849215
849470
  }
849216
849471
  ]
849217
849472
  }
849473
+ },
849474
+ "v3": {
849475
+ "createdDate": "2021-11-26T19:34:41.000Z",
849476
+ "document": {
849477
+ "Version": "2012-10-17",
849478
+ "Statement": [
849479
+ {
849480
+ "Effect": "Allow",
849481
+ "Action": [
849482
+ "s3:GetObject",
849483
+ "s3:PutObject",
849484
+ "s3:ListBucket",
849485
+ "s3:CreateBucket",
849486
+ "s3:PutBucketPublicAccessBlock",
849487
+ "s3:PutBucketPolicy"
849488
+ ],
849489
+ "Resource": "arn:aws:s3:::amazon-braket-*"
849490
+ },
849491
+ {
849492
+ "Effect": "Allow",
849493
+ "Action": [
849494
+ "s3:GetObject",
849495
+ "s3:PutObject",
849496
+ "s3:ListBucket",
849497
+ "s3:CreateBucket",
849498
+ "s3:PutBucketPublicAccessBlock",
849499
+ "s3:PutBucketPolicy"
849500
+ ],
849501
+ "Resource": "arn:aws:s3:::*",
849502
+ "Condition": {
849503
+ "StringEqualsIgnoreCase": {
849504
+ "aws:ResourceTag/AmazonBraket": "true"
849505
+ }
849506
+ }
849507
+ },
849508
+ {
849509
+ "Effect": "Allow",
849510
+ "Action": [
849511
+ "ecr:GetDownloadUrlForLayer",
849512
+ "ecr:BatchGetImage",
849513
+ "ecr:BatchCheckLayerAvailability"
849514
+ ],
849515
+ "Resource": "arn:aws:ecr:*:*:repository/amazon-braket*"
849516
+ },
849517
+ {
849518
+ "Effect": "Allow",
849519
+ "Action": [
849520
+ "ecr:GetAuthorizationToken"
849521
+ ],
849522
+ "Resource": "*"
849523
+ },
849524
+ {
849525
+ "Effect": "Allow",
849526
+ "Action": [
849527
+ "braket:CancelJob",
849528
+ "braket:CancelQuantumTask",
849529
+ "braket:CreateJob",
849530
+ "braket:CreateQuantumTask",
849531
+ "braket:GetDevice",
849532
+ "braket:GetJob",
849533
+ "braket:GetQuantumTask",
849534
+ "braket:SearchDevices",
849535
+ "braket:SearchJobs",
849536
+ "braket:SearchQuantumTasks",
849537
+ "braket:ListTagsForResource",
849538
+ "braket:TagResource",
849539
+ "braket:UntagResource"
849540
+ ],
849541
+ "Resource": "*"
849542
+ },
849543
+ {
849544
+ "Effect": "Allow",
849545
+ "Action": [
849546
+ "iam:PassRole"
849547
+ ],
849548
+ "Resource": "arn:aws:iam::*:role/service-role/AmazonBraketJobsExecutionRole*",
849549
+ "Condition": {
849550
+ "StringLike": {
849551
+ "iam:PassedToService": [
849552
+ "braket.amazonaws.com"
849553
+ ]
849554
+ }
849555
+ }
849556
+ },
849557
+ {
849558
+ "Effect": "Allow",
849559
+ "Action": [
849560
+ "iam:ListRoles"
849561
+ ],
849562
+ "Resource": "arn:aws:iam::*:role/*"
849563
+ },
849564
+ {
849565
+ "Effect": "Allow",
849566
+ "Action": [
849567
+ "logs:GetQueryResults"
849568
+ ],
849569
+ "Resource": [
849570
+ "arn:aws:logs:*:*:log-group:*"
849571
+ ]
849572
+ },
849573
+ {
849574
+ "Effect": "Allow",
849575
+ "Action": [
849576
+ "logs:PutLogEvents",
849577
+ "logs:CreateLogStream",
849578
+ "logs:CreateLogGroup",
849579
+ "logs:GetLogEvents",
849580
+ "logs:DescribeLogStreams",
849581
+ "logs:StartQuery",
849582
+ "logs:StopQuery"
849583
+ ],
849584
+ "Resource": "arn:aws:logs:*:*:log-group:/aws/braket*"
849585
+ },
849586
+ {
849587
+ "Effect": "Allow",
849588
+ "Action": "cloudwatch:PutMetricData",
849589
+ "Resource": "*",
849590
+ "Condition": {
849591
+ "StringEquals": {
849592
+ "cloudwatch:namespace": "/aws/braket"
849593
+ }
849594
+ }
849595
+ }
849596
+ ]
849597
+ }
849218
849598
  }
849219
849599
  },
849220
849600
  "createdDate": "2021-11-26T19:34:41.000Z",
849221
- "lastUpdatedDate": "2021-11-28T05:34:55.000Z"
849601
+ "lastUpdatedDate": "2026-07-06T19:12:15.000Z"
849222
849602
  },
849223
849603
  "AWSECRPullThroughCache_ServiceRolePolicy": {
849224
849604
  "arn": "arn:aws:iam::aws:policy/aws-service-role/AWSECRPullThroughCache_ServiceRolePolicy",
@@ -854687,8 +855067,8 @@
854687
855067
  },
854688
855068
  "AmazonInspector2ReadOnlyAccess": {
854689
855069
  "arn": "arn:aws:iam::aws:policy/AmazonInspector2ReadOnlyAccess",
854690
- "latestVersionId": "v8",
854691
- "versionsCount": 8,
855070
+ "latestVersionId": "v9",
855071
+ "versionsCount": 9,
854692
855072
  "versions": {
854693
855073
  "v1": {
854694
855074
  "createdDate": "2022-01-21T14:45:14.000Z",
@@ -855046,10 +855426,82 @@
855046
855426
  }
855047
855427
  ]
855048
855428
  }
855429
+ },
855430
+ "v9": {
855431
+ "createdDate": "2022-01-21T14:45:14.000Z",
855432
+ "document": {
855433
+ "Version": "2012-10-17",
855434
+ "Statement": [
855435
+ {
855436
+ "Effect": "Allow",
855437
+ "Action": [
855438
+ "organizations:ListDelegatedAdministrators",
855439
+ "organizations:ListAWSServiceAccessForOrganization",
855440
+ "organizations:DescribeOrganizationalUnit",
855441
+ "organizations:DescribeAccount",
855442
+ "organizations:DescribeOrganization",
855443
+ "inspector2:BatchGet*",
855444
+ "inspector2:List*",
855445
+ "inspector2:Describe*",
855446
+ "inspector2:Get*",
855447
+ "inspector2:Search*",
855448
+ "codeguru-security:BatchGetFindings",
855449
+ "codeguru-security:GetAccountConfiguration"
855450
+ ],
855451
+ "Resource": "*"
855452
+ },
855453
+ {
855454
+ "Sid": "AllowListPoliciesForInspectorPolicyType",
855455
+ "Effect": "Allow",
855456
+ "Action": "organizations:ListPolicies",
855457
+ "Resource": "*",
855458
+ "Condition": {
855459
+ "StringEquals": {
855460
+ "organizations:PolicyType": [
855461
+ "INSPECTOR_POLICY"
855462
+ ]
855463
+ }
855464
+ }
855465
+ },
855466
+ {
855467
+ "Sid": "AllowDescribeResourcePolicyForDelegation",
855468
+ "Effect": "Allow",
855469
+ "Action": "organizations:DescribeResourcePolicy",
855470
+ "Resource": "*"
855471
+ },
855472
+ {
855473
+ "Sid": "AllowDescribeEffectivePolicyForInspector",
855474
+ "Effect": "Allow",
855475
+ "Action": "organizations:DescribeEffectivePolicy",
855476
+ "Resource": "*",
855477
+ "Condition": {
855478
+ "StringEquals": {
855479
+ "organizations:PolicyType": [
855480
+ "INSPECTOR_POLICY"
855481
+ ]
855482
+ }
855483
+ }
855484
+ },
855485
+ {
855486
+ "Sid": "AllowCrossServiceReadsForConnectorHealth",
855487
+ "Effect": "Allow",
855488
+ "Action": [
855489
+ "config:DescribeConfigurationRecorders",
855490
+ "config:DescribeConfigurationRecorderStatus",
855491
+ "config:ListConfigurationRecorders",
855492
+ "config:GetConnector",
855493
+ "config:ListConnectors",
855494
+ "ssm:GetCloudConnector",
855495
+ "ssm:ListCloudConnectors"
855496
+ ],
855497
+ "Resource": "*"
855498
+ }
855499
+ ]
855500
+ }
855049
855501
  }
855050
855502
  },
855051
855503
  "createdDate": "2022-01-21T14:45:14.000Z",
855052
- "lastUpdatedDate": "2026-02-12T17:58:22.000Z"
855504
+ "lastUpdatedDate": "2026-07-07T18:57:19.000Z"
855053
855505
  },
855054
855506
  "AWSBackupServiceRolePolicyForS3Restore": {
855055
855507
  "arn": "arn:aws:iam::aws:policy/AWSBackupServiceRolePolicyForS3Restore",
@@ -1265471,8 +1265923,8 @@
1265471
1265923
  },
1265472
1265924
  "AmazonInspector2FullAccess_v2": {
1265473
1265925
  "arn": "arn:aws:iam::aws:policy/AmazonInspector2FullAccess_v2",
1265474
- "latestVersionId": "v6",
1265475
- "versionsCount": 6,
1265926
+ "latestVersionId": "v8",
1265927
+ "versionsCount": 8,
1265476
1265928
  "versions": {
1265477
1265929
  "v1": {
1265478
1265930
  "createdDate": "2025-07-03T16:07:07.000Z",
@@ -1265889,10 +1266341,124 @@
1265889
1266341
  }
1265890
1266342
  ]
1265891
1266343
  }
1266344
+ },
1266345
+ "v8": {
1266346
+ "createdDate": "2025-07-03T16:07:07.000Z",
1266347
+ "document": {
1266348
+ "Version": "2012-10-17",
1266349
+ "Statement": [
1266350
+ {
1266351
+ "Sid": "AllowFullAccessToInspectorApis",
1266352
+ "Effect": "Allow",
1266353
+ "Action": "inspector2:*",
1266354
+ "Resource": "*"
1266355
+ },
1266356
+ {
1266357
+ "Sid": "AllowAccessToCodeGuruApis",
1266358
+ "Effect": "Allow",
1266359
+ "Action": [
1266360
+ "codeguru-security:BatchGetFindings",
1266361
+ "codeguru-security:GetAccountConfiguration"
1266362
+ ],
1266363
+ "Resource": "*"
1266364
+ },
1266365
+ {
1266366
+ "Sid": "AllowAccessToCreateSlr",
1266367
+ "Effect": "Allow",
1266368
+ "Action": "iam:CreateServiceLinkedRole",
1266369
+ "Resource": "*",
1266370
+ "Condition": {
1266371
+ "StringEquals": {
1266372
+ "iam:AWSServiceName": [
1266373
+ "agentless.inspector2.amazonaws.com",
1266374
+ "inspector2.amazonaws.com",
1266375
+ "thirdparty.inspector2.amazonaws.com"
1266376
+ ]
1266377
+ }
1266378
+ }
1266379
+ },
1266380
+ {
1266381
+ "Sid": "AllowServicePrincipalBasedAccessToOrganizationApis",
1266382
+ "Effect": "Allow",
1266383
+ "Action": [
1266384
+ "organizations:EnableAWSServiceAccess",
1266385
+ "organizations:RegisterDelegatedAdministrator",
1266386
+ "organizations:ListDelegatedAdministrators"
1266387
+ ],
1266388
+ "Resource": "*",
1266389
+ "Condition": {
1266390
+ "StringEquals": {
1266391
+ "organizations:ServicePrincipal": [
1266392
+ "inspector2.amazonaws.com",
1266393
+ "agentless.inspector2.amazonaws.com",
1266394
+ "thirdparty.inspector2.amazonaws.com"
1266395
+ ]
1266396
+ }
1266397
+ }
1266398
+ },
1266399
+ {
1266400
+ "Sid": "AllowOrganizationalBasedAccessToOrganizationApis",
1266401
+ "Effect": "Allow",
1266402
+ "Action": [
1266403
+ "organizations:DescribeOrganizationalUnit"
1266404
+ ],
1266405
+ "Resource": "arn:aws:organizations::*:ou/o-*/ou-*"
1266406
+ },
1266407
+ {
1266408
+ "Sid": "AllowAccountsBasedAccessToOrganizationApis",
1266409
+ "Effect": "Allow",
1266410
+ "Action": [
1266411
+ "organizations:DescribeAccount"
1266412
+ ],
1266413
+ "Resource": "arn:aws:organizations::*:account/o-*/*"
1266414
+ },
1266415
+ {
1266416
+ "Sid": "AllowAccessToOrganizationApis",
1266417
+ "Effect": "Allow",
1266418
+ "Action": [
1266419
+ "organizations:ListAWSServiceAccessForOrganization",
1266420
+ "organizations:DescribeOrganization"
1266421
+ ],
1266422
+ "Resource": "*"
1266423
+ },
1266424
+ {
1266425
+ "Sid": "AllowListPoliciesForInspectorPolicyType",
1266426
+ "Effect": "Allow",
1266427
+ "Action": "organizations:ListPolicies",
1266428
+ "Resource": "*",
1266429
+ "Condition": {
1266430
+ "StringEquals": {
1266431
+ "organizations:PolicyType": [
1266432
+ "INSPECTOR_POLICY"
1266433
+ ]
1266434
+ }
1266435
+ }
1266436
+ },
1266437
+ {
1266438
+ "Sid": "AllowDescribeResourcePolicyForDelegation",
1266439
+ "Effect": "Allow",
1266440
+ "Action": "organizations:DescribeResourcePolicy",
1266441
+ "Resource": "*"
1266442
+ },
1266443
+ {
1266444
+ "Sid": "AllowDescribeEffectivePolicyForInspector",
1266445
+ "Effect": "Allow",
1266446
+ "Action": "organizations:DescribeEffectivePolicy",
1266447
+ "Resource": "*",
1266448
+ "Condition": {
1266449
+ "StringEquals": {
1266450
+ "organizations:PolicyType": [
1266451
+ "INSPECTOR_POLICY"
1266452
+ ]
1266453
+ }
1266454
+ }
1266455
+ }
1266456
+ ]
1266457
+ }
1265892
1266458
  }
1265893
1266459
  },
1265894
1266460
  "createdDate": "2025-07-03T16:07:07.000Z",
1265895
- "lastUpdatedDate": "2026-02-12T18:03:17.000Z"
1266461
+ "lastUpdatedDate": "2026-07-07T20:12:29.000Z"
1265896
1266462
  },
1265897
1266463
  "SageMakerStudioAdminProjectUserRolePolicy": {
1265898
1266464
  "arn": "arn:aws:iam::aws:policy/SageMakerStudioAdminProjectUserRolePolicy",
@@ -1355676,8 +1356242,8 @@
1355676
1356242
  },
1355677
1356243
  "AWSResilienceHubServiceRolePolicy": {
1355678
1356244
  "arn": "arn:aws:iam::aws:policy/aws-service-role/AWSResilienceHubServiceRolePolicy",
1355679
- "latestVersionId": "v1",
1355680
- "versionsCount": 1,
1356245
+ "latestVersionId": "v2",
1356246
+ "versionsCount": 2,
1355681
1356247
  "versions": {
1355682
1356248
  "v1": {
1355683
1356249
  "createdDate": "2026-05-28T17:42:17.000Z",
@@ -1355700,10 +1356266,38 @@
1355700
1356266
  }
1355701
1356267
  ]
1355702
1356268
  }
1356269
+ },
1356270
+ "v2": {
1356271
+ "createdDate": "2026-05-28T17:42:17.000Z",
1356272
+ "document": {
1356273
+ "Version": "2012-10-17",
1356274
+ "Statement": [
1356275
+ {
1356276
+ "Sid": "AWSResilienceHubOrganizationsReadStatement",
1356277
+ "Effect": "Allow",
1356278
+ "Action": [
1356279
+ "organizations:DescribeAccount",
1356280
+ "organizations:DescribeOrganization",
1356281
+ "organizations:DescribeOrganizationalUnit",
1356282
+ "organizations:ListAWSServiceAccessForOrganization",
1356283
+ "organizations:ListAccounts",
1356284
+ "organizations:ListAccountsForParent",
1356285
+ "organizations:ListChildren",
1356286
+ "organizations:ListDelegatedAdministrators",
1356287
+ "organizations:ListDelegatedServicesForAccount",
1356288
+ "organizations:ListOrganizationalUnitsForParent",
1356289
+ "organizations:ListParents",
1356290
+ "organizations:ListRoots",
1356291
+ "organizations:ListTagsForResource"
1356292
+ ],
1356293
+ "Resource": "*"
1356294
+ }
1356295
+ ]
1356296
+ }
1355703
1356297
  }
1355704
1356298
  },
1355705
1356299
  "createdDate": "2026-05-28T17:42:17.000Z",
1355706
- "lastUpdatedDate": "2026-05-28T17:42:17.000Z"
1356300
+ "lastUpdatedDate": "2026-07-06T18:12:14.000Z"
1355707
1356301
  },
1355708
1356302
  "AWSApplicationMigrationFSxProxyPolicy": {
1355709
1356303
  "arn": "arn:aws:iam::aws:policy/service-role/AWSApplicationMigrationFSxProxyPolicy",
@@ -1358879,5 +1359473,231 @@
1358879
1359473
  },
1358880
1359474
  "createdDate": "2026-07-02T21:27:26.000Z",
1358881
1359475
  "lastUpdatedDate": "2026-07-02T21:27:26.000Z"
1359476
+ },
1359477
+ "DBModVirtualSource": {
1359478
+ "arn": "arn:aws:iam::aws:policy/DBModVirtualSource",
1359479
+ "latestVersionId": "v1",
1359480
+ "versionsCount": 1,
1359481
+ "versions": {
1359482
+ "v1": {
1359483
+ "createdDate": "2026-07-06T23:12:26.000Z",
1359484
+ "document": {
1359485
+ "Version": "2012-10-17",
1359486
+ "Statement": [
1359487
+ {
1359488
+ "Effect": "Allow",
1359489
+ "Action": [
1359490
+ "ec2:DescribeInstances",
1359491
+ "ec2:DescribeSubnets",
1359492
+ "ec2:DescribeVpcs",
1359493
+ "ec2:DescribeSecurityGroups",
1359494
+ "ec2:DescribeAvailabilityZones",
1359495
+ "ec2:DescribeVpcEndpoints",
1359496
+ "ec2:DescribeInternetGateways",
1359497
+ "rds:DescribeDBInstances",
1359498
+ "rds:DescribeDBClusters",
1359499
+ "rds:DescribeDBSubnetGroups",
1359500
+ "secretsmanager:ListSecrets",
1359501
+ "kms:ListAliases",
1359502
+ "kms:DescribeKey"
1359503
+ ],
1359504
+ "Resource": "*"
1359505
+ },
1359506
+ {
1359507
+ "Effect": "Allow",
1359508
+ "Action": "rds:ModifyDBSubnetGroup",
1359509
+ "Resource": "arn:aws:rds:*:*:subgrp:*",
1359510
+ "Condition": {
1359511
+ "StringEquals": {
1359512
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1359513
+ }
1359514
+ }
1359515
+ },
1359516
+ {
1359517
+ "Effect": "Allow",
1359518
+ "Action": [
1359519
+ "rds:EnableHttpEndpoint",
1359520
+ "rds:DisableHttpEndpoint",
1359521
+ "rds-data:ExecuteStatement"
1359522
+ ],
1359523
+ "Resource": "arn:aws:rds:*:*:cluster:*",
1359524
+ "Condition": {
1359525
+ "StringEquals": {
1359526
+ "aws:ResourceTag/Project": "atx-db-modernization",
1359527
+ "aws:ResourceTag/Owner": "database-connector",
1359528
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1359529
+ }
1359530
+ }
1359531
+ },
1359532
+ {
1359533
+ "Effect": "Allow",
1359534
+ "Action": [
1359535
+ "iam:GetPolicy",
1359536
+ "iam:GetPolicyVersion"
1359537
+ ],
1359538
+ "Resource": "arn:aws:iam::*:policy/*",
1359539
+ "Condition": {
1359540
+ "StringEquals": {
1359541
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1359542
+ }
1359543
+ }
1359544
+ },
1359545
+ {
1359546
+ "Effect": "Allow",
1359547
+ "Action": "kms:Decrypt",
1359548
+ "Resource": "arn:aws:kms:*:*:key/*",
1359549
+ "Condition": {
1359550
+ "StringEquals": {
1359551
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1359552
+ },
1359553
+ "StringLike": {
1359554
+ "kms:EncryptionContext:SecretArn": "arn:aws:secretsmanager:*:${aws:PrincipalAccount}:secret:*",
1359555
+ "kms:ViaService": "secretsmanager.*.amazonaws.com"
1359556
+ }
1359557
+ }
1359558
+ },
1359559
+ {
1359560
+ "Effect": "Allow",
1359561
+ "Action": "secretsmanager:UpdateSecret",
1359562
+ "Resource": "arn:aws:secretsmanager:*:*:secret:atx-db-modernization-*",
1359563
+ "Condition": {
1359564
+ "StringEquals": {
1359565
+ "aws:ResourceTag/Project": "atx-db-modernization",
1359566
+ "aws:ResourceTag/Owner": "database-connector",
1359567
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1359568
+ }
1359569
+ }
1359570
+ },
1359571
+ {
1359572
+ "Effect": "Allow",
1359573
+ "Action": [
1359574
+ "secretsmanager:CreateSecret",
1359575
+ "secretsmanager:TagResource"
1359576
+ ],
1359577
+ "Resource": "arn:aws:secretsmanager:*:*:secret:atx-db-modernization-*",
1359578
+ "Condition": {
1359579
+ "StringEquals": {
1359580
+ "aws:RequestTag/Project": "atx-db-modernization",
1359581
+ "aws:RequestTag/Owner": "database-connector",
1359582
+ "aws:ResourceTag/Project": "atx-db-modernization",
1359583
+ "aws:ResourceTag/Owner": "database-connector",
1359584
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1359585
+ }
1359586
+ }
1359587
+ },
1359588
+ {
1359589
+ "Effect": "Allow",
1359590
+ "Action": [
1359591
+ "s3:CreateBucket",
1359592
+ "s3:PutBucketTagging",
1359593
+ "s3:PutBucketVersioning",
1359594
+ "s3:ListBucket",
1359595
+ "s3:GetObject",
1359596
+ "s3:GetBucketLocation",
1359597
+ "s3:PutObject",
1359598
+ "s3:DeleteObject",
1359599
+ "s3:GetBucketVersioning"
1359600
+ ],
1359601
+ "Resource": [
1359602
+ "arn:aws:s3:::atx-db-modernization-*",
1359603
+ "arn:aws:s3:::atx-db-modernization-*/*"
1359604
+ ],
1359605
+ "Condition": {
1359606
+ "StringEquals": {
1359607
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1359608
+ }
1359609
+ }
1359610
+ },
1359611
+ {
1359612
+ "Effect": "Allow",
1359613
+ "Action": [
1359614
+ "rds:CreateDBSubnetGroup",
1359615
+ "rds:CreateDBCluster",
1359616
+ "rds:CreateDBInstance",
1359617
+ "rds:AddTagsToResource"
1359618
+ ],
1359619
+ "Resource": [
1359620
+ "arn:aws:rds:*:*:subgrp:*",
1359621
+ "arn:aws:rds:*:*:cluster:*",
1359622
+ "arn:aws:rds:*:*:db:*"
1359623
+ ],
1359624
+ "Condition": {
1359625
+ "StringEquals": {
1359626
+ "aws:RequestTag/Project": "atx-db-modernization",
1359627
+ "aws:RequestTag/Owner": "database-connector",
1359628
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1359629
+ }
1359630
+ }
1359631
+ },
1359632
+ {
1359633
+ "Effect": "Allow",
1359634
+ "Action": [
1359635
+ "secretsmanager:GetSecretValue",
1359636
+ "secretsmanager:DescribeSecret"
1359637
+ ],
1359638
+ "Resource": "arn:aws:secretsmanager:*:*:secret:*",
1359639
+ "Condition": {
1359640
+ "StringEquals": {
1359641
+ "aws:ResourceAccount": "${aws:PrincipalAccount}",
1359642
+ "aws:ResourceTag/Project": "atx-db-modernization",
1359643
+ "aws:ResourceTag/Owner": "database-connector"
1359644
+ }
1359645
+ }
1359646
+ },
1359647
+ {
1359648
+ "Effect": "Allow",
1359649
+ "Action": "iam:CreateServiceLinkedRole",
1359650
+ "Resource": "arn:aws:iam::*:role/aws-service-role/rds.amazonaws.com/AWSServiceRoleForRDS",
1359651
+ "Condition": {
1359652
+ "StringLike": {
1359653
+ "iam:AWSServiceName": "rds.amazonaws.com"
1359654
+ },
1359655
+ "StringEquals": {
1359656
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
1359657
+ }
1359658
+ }
1359659
+ }
1359660
+ ]
1359661
+ }
1359662
+ }
1359663
+ },
1359664
+ "createdDate": "2026-07-06T23:12:26.000Z",
1359665
+ "lastUpdatedDate": "2026-07-06T23:12:26.000Z"
1359666
+ },
1359667
+ "AWSTransformRevenueAttributionPolicy": {
1359668
+ "arn": "arn:aws:iam::aws:policy/AWSTransformRevenueAttributionPolicy",
1359669
+ "latestVersionId": "v1",
1359670
+ "versionsCount": 1,
1359671
+ "versions": {
1359672
+ "v1": {
1359673
+ "createdDate": "2026-07-07T16:42:19.000Z",
1359674
+ "document": {
1359675
+ "Version": "2012-10-17",
1359676
+ "Statement": [
1359677
+ {
1359678
+ "Sid": "PartnerCentralRevenueManagementAccess",
1359679
+ "Effect": "Allow",
1359680
+ "Action": [
1359681
+ "partnercentral:GetRevenueAttribution",
1359682
+ "partnercentral:UpdateRevenueAttribution",
1359683
+ "partnercentral:CreateRevenueAttribution",
1359684
+ "partnercentral:ListRevenueAttributions"
1359685
+ ],
1359686
+ "Resource": "arn:aws:partnercentral:*:*:catalog/*/revenue-attribution/*",
1359687
+ "Condition": {
1359688
+ "StringEquals": {
1359689
+ "partnercentral:Catalog": [
1359690
+ "AWS",
1359691
+ "Sandbox"
1359692
+ ]
1359693
+ }
1359694
+ }
1359695
+ }
1359696
+ ]
1359697
+ }
1359698
+ }
1359699
+ },
1359700
+ "createdDate": "2026-07-07T16:42:19.000Z",
1359701
+ "lastUpdatedDate": "2026-07-07T16:42:19.000Z"
1358882
1359702
  }
1358883
1359703
  }
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "aws-iam-managed-policies",
3
- "version": "0.0.618",
3
+ "version": "0.0.620",
4
4
  "description": "Provides AWS IAM Managed Policies historical data as a convenient npm package that can be used in other OSS projects.",
5
5
  "main": "./dist/index.js",
6
6
  "types": "./dist/index.d.ts",