aws-iam-managed-policies 0.0.652 → 0.0.653

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -982108,8 +982108,8 @@
982108
982108
  },
982109
982109
  "AmazonInspector2AgentlessServiceRolePolicy": {
982110
982110
  "arn": "arn:aws:iam::aws:policy/aws-service-role/AmazonInspector2AgentlessServiceRolePolicy",
982111
- "latestVersionId": "v1",
982112
- "versionsCount": 1,
982111
+ "latestVersionId": "v2",
982112
+ "versionsCount": 2,
982113
982113
  "versions": {
982114
982114
  "v1": {
982115
982115
  "createdDate": "2023-11-20T15:18:32.000Z",
@@ -982265,10 +982265,209 @@
982265
982265
  }
982266
982266
  ]
982267
982267
  }
982268
+ },
982269
+ "v2": {
982270
+ "createdDate": "2023-11-20T15:18:32.000Z",
982271
+ "document": {
982272
+ "Version": "2012-10-17",
982273
+ "Statement": [
982274
+ {
982275
+ "Sid": "InstanceIdentification",
982276
+ "Effect": "Allow",
982277
+ "Action": [
982278
+ "ec2:DescribeInstances",
982279
+ "ec2:DescribeVolumes",
982280
+ "ec2:DescribeSnapshots"
982281
+ ],
982282
+ "Resource": "*"
982283
+ },
982284
+ {
982285
+ "Sid": "GetSnapshotData",
982286
+ "Effect": "Allow",
982287
+ "Action": [
982288
+ "ebs:ListSnapshotBlocks",
982289
+ "ebs:GetSnapshotBlock"
982290
+ ],
982291
+ "Resource": "arn:aws:ec2:*:*:snapshot/*",
982292
+ "Condition": {
982293
+ "StringLike": {
982294
+ "aws:ResourceTag/InspectorScan": "*"
982295
+ }
982296
+ }
982297
+ },
982298
+ {
982299
+ "Sid": "CreateSnapshotsAnyInstanceOrVolume",
982300
+ "Effect": "Allow",
982301
+ "Action": "ec2:CreateSnapshots",
982302
+ "Resource": [
982303
+ "arn:aws:ec2:*:*:instance/*",
982304
+ "arn:aws:ec2:*:*:volume/*"
982305
+ ]
982306
+ },
982307
+ {
982308
+ "Sid": "DenyCreateSnapshotsOnExcludedInstances",
982309
+ "Effect": "Deny",
982310
+ "Action": "ec2:CreateSnapshots",
982311
+ "Resource": "arn:aws:ec2:*:*:instance/*",
982312
+ "Condition": {
982313
+ "StringEquals": {
982314
+ "ec2:ResourceTag/InspectorEc2Exclusion": "true"
982315
+ }
982316
+ }
982317
+ },
982318
+ {
982319
+ "Sid": "CreateSnapshotsOnAnySnapshotOnlyWithTag",
982320
+ "Effect": "Allow",
982321
+ "Action": "ec2:CreateSnapshots",
982322
+ "Resource": "arn:aws:ec2:*:*:snapshot/*",
982323
+ "Condition": {
982324
+ "Null": {
982325
+ "aws:TagKeys": "false"
982326
+ },
982327
+ "ForAllValues:StringEquals": {
982328
+ "aws:TagKeys": "InspectorScan"
982329
+ }
982330
+ }
982331
+ },
982332
+ {
982333
+ "Sid": "CreateOnlyInspectorScanTagOnlyUsingCreateSnapshots",
982334
+ "Effect": "Allow",
982335
+ "Action": "ec2:CreateTags",
982336
+ "Resource": "arn:aws:ec2:*:*:snapshot/*",
982337
+ "Condition": {
982338
+ "StringLike": {
982339
+ "ec2:CreateAction": "CreateSnapshots"
982340
+ },
982341
+ "Null": {
982342
+ "aws:TagKeys": "false"
982343
+ },
982344
+ "ForAllValues:StringEquals": {
982345
+ "aws:TagKeys": "InspectorScan"
982346
+ }
982347
+ }
982348
+ },
982349
+ {
982350
+ "Sid": "DeleteOnlySnapshotsTaggedForScanning",
982351
+ "Effect": "Allow",
982352
+ "Action": "ec2:DeleteSnapshot",
982353
+ "Resource": "arn:aws:ec2:*:*:snapshot/*",
982354
+ "Condition": {
982355
+ "StringLike": {
982356
+ "ec2:ResourceTag/InspectorScan": "*"
982357
+ }
982358
+ }
982359
+ },
982360
+ {
982361
+ "Sid": "DenyKmsDecryptForExcludedKeys",
982362
+ "Effect": "Deny",
982363
+ "Action": "kms:Decrypt",
982364
+ "Resource": "arn:aws:kms:*:*:key/*",
982365
+ "Condition": {
982366
+ "StringEquals": {
982367
+ "aws:ResourceTag/InspectorEc2Exclusion": "true"
982368
+ }
982369
+ }
982370
+ },
982371
+ {
982372
+ "Sid": "DecryptSnapshotBlocksVolContext",
982373
+ "Effect": "Allow",
982374
+ "Action": "kms:Decrypt",
982375
+ "Resource": "arn:aws:kms:*:*:key/*",
982376
+ "Condition": {
982377
+ "StringEquals": {
982378
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
982379
+ },
982380
+ "StringLike": {
982381
+ "kms:ViaService": "ec2.*.amazonaws.com",
982382
+ "kms:EncryptionContext:aws:ebs:id": "vol-*"
982383
+ }
982384
+ }
982385
+ },
982386
+ {
982387
+ "Sid": "DecryptSnapshotBlocksSnapContext",
982388
+ "Effect": "Allow",
982389
+ "Action": "kms:Decrypt",
982390
+ "Resource": "arn:aws:kms:*:*:key/*",
982391
+ "Condition": {
982392
+ "StringEquals": {
982393
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
982394
+ },
982395
+ "StringLike": {
982396
+ "kms:ViaService": "ec2.*.amazonaws.com",
982397
+ "kms:EncryptionContext:aws:ebs:id": "snap-*"
982398
+ }
982399
+ }
982400
+ },
982401
+ {
982402
+ "Sid": "DescribeKeysForEbsOperations",
982403
+ "Effect": "Allow",
982404
+ "Action": "kms:DescribeKey",
982405
+ "Resource": "arn:aws:kms:*:*:key/*",
982406
+ "Condition": {
982407
+ "StringEquals": {
982408
+ "aws:ResourceAccount": "${aws:PrincipalAccount}"
982409
+ },
982410
+ "StringLike": {
982411
+ "kms:ViaService": "ec2.*.amazonaws.com"
982412
+ }
982413
+ }
982414
+ },
982415
+ {
982416
+ "Sid": "DecryptCrossAccountOrgVolContext",
982417
+ "Effect": "Allow",
982418
+ "Action": "kms:Decrypt",
982419
+ "Resource": "arn:aws:kms:*:*:key/*",
982420
+ "Condition": {
982421
+ "StringEquals": {
982422
+ "aws:ResourceOrgID": "${aws:PrincipalOrgID}"
982423
+ },
982424
+ "StringLike": {
982425
+ "kms:ViaService": "ec2.*.amazonaws.com",
982426
+ "kms:EncryptionContext:aws:ebs:id": "vol-*"
982427
+ }
982428
+ }
982429
+ },
982430
+ {
982431
+ "Sid": "DecryptCrossAccountOrgSnapContext",
982432
+ "Effect": "Allow",
982433
+ "Action": "kms:Decrypt",
982434
+ "Resource": "arn:aws:kms:*:*:key/*",
982435
+ "Condition": {
982436
+ "StringEquals": {
982437
+ "aws:ResourceOrgID": "${aws:PrincipalOrgID}"
982438
+ },
982439
+ "StringLike": {
982440
+ "kms:ViaService": "ec2.*.amazonaws.com",
982441
+ "kms:EncryptionContext:aws:ebs:id": "snap-*"
982442
+ }
982443
+ }
982444
+ },
982445
+ {
982446
+ "Sid": "DescribeCrossAccountOrgKeysForEbsOperations",
982447
+ "Effect": "Allow",
982448
+ "Action": "kms:DescribeKey",
982449
+ "Resource": "arn:aws:kms:*:*:key/*",
982450
+ "Condition": {
982451
+ "StringEquals": {
982452
+ "aws:ResourceOrgID": "${aws:PrincipalOrgID}"
982453
+ },
982454
+ "StringLike": {
982455
+ "kms:ViaService": "ec2.*.amazonaws.com"
982456
+ }
982457
+ }
982458
+ },
982459
+ {
982460
+ "Sid": "ListKeyResourceTags",
982461
+ "Effect": "Allow",
982462
+ "Action": "kms:ListResourceTags",
982463
+ "Resource": "arn:aws:kms:*:*:key/*"
982464
+ }
982465
+ ]
982466
+ }
982268
982467
  }
982269
982468
  },
982270
982469
  "createdDate": "2023-11-20T15:18:32.000Z",
982271
- "lastUpdatedDate": "2023-11-20T15:18:32.000Z"
982470
+ "lastUpdatedDate": "2026-08-20T19:17:13.000Z"
982272
982471
  },
982273
982472
  "CostOptimizationHubServiceRolePolicy": {
982274
982473
  "arn": "arn:aws:iam::aws:policy/aws-service-role/CostOptimizationHubServiceRolePolicy",
@@ -1030022,8 +1030221,8 @@
1030022
1030221
  },
1030023
1030222
  "AmazonEKSLoadBalancingPolicy": {
1030024
1030223
  "arn": "arn:aws:iam::aws:policy/AmazonEKSLoadBalancingPolicy",
1030025
- "latestVersionId": "v9",
1030026
- "versionsCount": 9,
1030224
+ "latestVersionId": "v10",
1030225
+ "versionsCount": 10,
1030027
1030226
  "versions": {
1030028
1030227
  "v1": {
1030029
1030228
  "createdDate": "2024-10-30T20:18:06.000Z",
@@ -1032189,10 +1032388,249 @@
1032189
1032388
  }
1032190
1032389
  ]
1032191
1032390
  }
1032391
+ },
1032392
+ "v10": {
1032393
+ "createdDate": "2024-10-30T20:18:06.000Z",
1032394
+ "document": {
1032395
+ "Version": "2012-10-17",
1032396
+ "Statement": [
1032397
+ {
1032398
+ "Effect": "Allow",
1032399
+ "Action": [
1032400
+ "elasticloadbalancing:CreateLoadBalancer",
1032401
+ "elasticloadbalancing:CreateTargetGroup",
1032402
+ "elasticloadbalancing:CreateListener",
1032403
+ "elasticloadbalancing:CreateRule",
1032404
+ "ec2:CreateSecurityGroup"
1032405
+ ],
1032406
+ "Resource": "*",
1032407
+ "Condition": {
1032408
+ "StringEquals": {
1032409
+ "aws:RequestTag/eks:eks-cluster-name": "${aws:PrincipalTag/eks:eks-cluster-name}"
1032410
+ },
1032411
+ "ForAllValues:StringEquals": {
1032412
+ "aws:TagKeys": [
1032413
+ "eks:eks-cluster-name",
1032414
+ "ingress.eks.amazonaws.com/stack",
1032415
+ "ingress.eks.amazonaws.com/resource",
1032416
+ "service.eks.amazonaws.com/stack",
1032417
+ "service.eks.amazonaws.com/resource",
1032418
+ "gateway.eks.amazonaws.com.alb/stack",
1032419
+ "gateway.eks.amazonaws.com.alb/resource",
1032420
+ "gateway.eks.amazonaws.com.nlb/stack",
1032421
+ "gateway.eks.amazonaws.com.nlb/resource"
1032422
+ ]
1032423
+ }
1032424
+ }
1032425
+ },
1032426
+ {
1032427
+ "Effect": "Allow",
1032428
+ "Action": [
1032429
+ "ec2:CreateSecurityGroup"
1032430
+ ],
1032431
+ "Resource": "arn:aws:ec2:*:*:vpc/*"
1032432
+ },
1032433
+ {
1032434
+ "Effect": "Allow",
1032435
+ "Action": [
1032436
+ "elasticloadbalancing:RegisterTargets"
1032437
+ ],
1032438
+ "Resource": "arn:aws:elasticloadbalancing:*:*:targetgroup/*/*"
1032439
+ },
1032440
+ {
1032441
+ "Effect": "Allow",
1032442
+ "Action": [
1032443
+ "ec2:AuthorizeSecurityGroupIngress"
1032444
+ ],
1032445
+ "Resource": "arn:aws:ec2:*:*:security-group-rule/*",
1032446
+ "Condition": {
1032447
+ "StringEquals": {
1032448
+ "aws:RequestTag/eks:eks-cluster-name": "${aws:PrincipalTag/eks:eks-cluster-name}"
1032449
+ }
1032450
+ }
1032451
+ },
1032452
+ {
1032453
+ "Effect": "Allow",
1032454
+ "Action": [
1032455
+ "ec2:AuthorizeSecurityGroupIngress",
1032456
+ "ec2:RevokeSecurityGroupIngress"
1032457
+ ],
1032458
+ "Resource": "arn:aws:ec2:*:*:security-group/*",
1032459
+ "Condition": {
1032460
+ "StringLike": {
1032461
+ "aws:ResourceTag/Name": "eks-cluster-sg*"
1032462
+ }
1032463
+ }
1032464
+ },
1032465
+ {
1032466
+ "Effect": "Allow",
1032467
+ "Action": [
1032468
+ "ec2:AuthorizeSecurityGroupIngress",
1032469
+ "ec2:RevokeSecurityGroupIngress"
1032470
+ ],
1032471
+ "Resource": "arn:aws:ec2:*:*:security-group/*",
1032472
+ "Condition": {
1032473
+ "StringEquals": {
1032474
+ "aws:ResourceTag/eks:eks-cluster-name": "${aws:PrincipalTag/eks:eks-cluster-name}"
1032475
+ }
1032476
+ }
1032477
+ },
1032478
+ {
1032479
+ "Effect": "Allow",
1032480
+ "Action": [
1032481
+ "elasticloadbalancing:AddTags"
1032482
+ ],
1032483
+ "Resource": "*",
1032484
+ "Condition": {
1032485
+ "StringEquals": {
1032486
+ "elasticloadbalancing:CreateAction": [
1032487
+ "CreateLoadBalancer",
1032488
+ "CreateTargetGroup",
1032489
+ "CreateListener",
1032490
+ "CreateRule"
1032491
+ ]
1032492
+ }
1032493
+ }
1032494
+ },
1032495
+ {
1032496
+ "Effect": "Allow",
1032497
+ "Action": [
1032498
+ "ec2:CreateTags"
1032499
+ ],
1032500
+ "Resource": "*",
1032501
+ "Condition": {
1032502
+ "StringEquals": {
1032503
+ "ec2:CreateAction": [
1032504
+ "CreateSecurityGroup",
1032505
+ "AuthorizeSecurityGroupIngress"
1032506
+ ]
1032507
+ }
1032508
+ }
1032509
+ },
1032510
+ {
1032511
+ "Effect": "Allow",
1032512
+ "Action": [
1032513
+ "elasticloadbalancing:ModifyLoadBalancerAttributes",
1032514
+ "elasticloadbalancing:SetIpAddressType",
1032515
+ "elasticloadbalancing:SetSecurityGroups",
1032516
+ "elasticloadbalancing:SetSubnets",
1032517
+ "elasticloadbalancing:ModifyTargetGroup",
1032518
+ "elasticloadbalancing:ModifyTargetGroupAttributes",
1032519
+ "elasticloadbalancing:ModifyListener",
1032520
+ "elasticloadbalancing:AddListenerCertificates",
1032521
+ "elasticloadbalancing:ModifyListenerAttributes",
1032522
+ "elasticloadbalancing:RemoveListenerCertificates",
1032523
+ "elasticloadbalancing:ModifyRule",
1032524
+ "elasticloadbalancing:ModifyIpPools",
1032525
+ "elasticloadbalancing:ModifyCapacityReservation",
1032526
+ "elasticloadbalancing:DescribeLoadBalancers"
1032527
+ ],
1032528
+ "Resource": "*",
1032529
+ "Condition": {
1032530
+ "StringEquals": {
1032531
+ "aws:ResourceTag/eks:eks-cluster-name": "${aws:PrincipalTag/eks:eks-cluster-name}"
1032532
+ }
1032533
+ }
1032534
+ },
1032535
+ {
1032536
+ "Effect": "Allow",
1032537
+ "Action": [
1032538
+ "wafv2:AssociateWebACL",
1032539
+ "wafv2:DisassociateWebACL"
1032540
+ ],
1032541
+ "Resource": [
1032542
+ "arn:aws:wafv2:*:*:*/webacl/*/*",
1032543
+ "arn:aws:elasticloadbalancing:*:*:loadbalancer/app/*/*"
1032544
+ ]
1032545
+ },
1032546
+ {
1032547
+ "Effect": "Allow",
1032548
+ "Action": [
1032549
+ "shield:CreateProtection",
1032550
+ "shield:DeleteProtection"
1032551
+ ],
1032552
+ "Resource": "*"
1032553
+ },
1032554
+ {
1032555
+ "Effect": "Allow",
1032556
+ "Action": [
1032557
+ "shield:TagResource"
1032558
+ ],
1032559
+ "Resource": "arn:aws:shield::*:protection/*",
1032560
+ "Condition": {
1032561
+ "StringEquals": {
1032562
+ "aws:RequestTag/eks:eks-cluster-name": "${aws:PrincipalTag/eks:eks-cluster-name}"
1032563
+ },
1032564
+ "ForAllValues:StringEquals": {
1032565
+ "aws:TagKeys": [
1032566
+ "eks:eks-cluster-name",
1032567
+ "ingress.eks.amazonaws.com/stack",
1032568
+ "ingress.eks.amazonaws.com/resource",
1032569
+ "service.eks.amazonaws.com/stack",
1032570
+ "service.eks.amazonaws.com/resource",
1032571
+ "gateway.eks.amazonaws.com.alb/stack",
1032572
+ "gateway.eks.amazonaws.com.alb/resource",
1032573
+ "gateway.eks.amazonaws.com.nlb/stack",
1032574
+ "gateway.eks.amazonaws.com.nlb/resource"
1032575
+ ]
1032576
+ }
1032577
+ }
1032578
+ },
1032579
+ {
1032580
+ "Effect": "Allow",
1032581
+ "Action": [
1032582
+ "cognito-idp:DescribeUserPoolClient",
1032583
+ "acm:ListCertificates",
1032584
+ "acm:DescribeCertificate",
1032585
+ "wafv2:GetWebACL",
1032586
+ "wafv2:GetWebACLForResource",
1032587
+ "wafv2:ListWebACLs",
1032588
+ "elasticloadbalancing:SetWebAcl",
1032589
+ "elasticloadbalancing:DescribeTargetGroups",
1032590
+ "elasticloadbalancing:SetRulePriorities"
1032591
+ ],
1032592
+ "Resource": "*"
1032593
+ },
1032594
+ {
1032595
+ "Effect": "Allow",
1032596
+ "Action": [
1032597
+ "ec2:DescribeAccountAttributes",
1032598
+ "ec2:DescribeAddresses",
1032599
+ "ec2:DescribeInternetGateways",
1032600
+ "ec2:DescribeSecurityGroups",
1032601
+ "ec2:DescribeSubnets",
1032602
+ "ec2:DescribeVpcs",
1032603
+ "ec2:DescribeVpcClassicLink",
1032604
+ "ec2:DescribeInstances",
1032605
+ "ec2:DescribeNetworkInterfaces",
1032606
+ "ec2:DescribeClassicLinkInstances",
1032607
+ "ec2:DescribeRouteTables",
1032608
+ "ec2:DescribeCoipPools",
1032609
+ "ec2:GetCoipPoolUsage",
1032610
+ "ec2:GetSecurityGroupsForVpc",
1032611
+ "ec2:DescribeVpcPeeringConnections",
1032612
+ "ec2:DescribeIpamPools"
1032613
+ ],
1032614
+ "Resource": "*"
1032615
+ },
1032616
+ {
1032617
+ "Effect": "Allow",
1032618
+ "Action": [
1032619
+ "iam:CreateServiceLinkedRole"
1032620
+ ],
1032621
+ "Resource": "arn:aws:iam::*:role/aws-service-role/elasticloadbalancing.amazonaws.com/AWSServiceRoleForElasticLoadBalancing",
1032622
+ "Condition": {
1032623
+ "StringEquals": {
1032624
+ "iam:AWSServiceName": "elasticloadbalancing.amazonaws.com"
1032625
+ }
1032626
+ }
1032627
+ }
1032628
+ ]
1032629
+ }
1032192
1032630
  }
1032193
1032631
  },
1032194
1032632
  "createdDate": "2024-10-30T20:18:06.000Z",
1032195
- "lastUpdatedDate": "2026-06-16T00:12:08.000Z"
1032633
+ "lastUpdatedDate": "2026-08-20T23:07:13.000Z"
1032196
1032634
  },
1032197
1032635
  "AmazonEKSBlockStoragePolicy": {
1032198
1032636
  "arn": "arn:aws:iam::aws:policy/AmazonEKSBlockStoragePolicy",
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "aws-iam-managed-policies",
3
- "version": "0.0.652",
3
+ "version": "0.0.653",
4
4
  "description": "Provides AWS IAM Managed Policies historical data as a convenient npm package that can be used in other OSS projects.",
5
5
  "main": "./dist/index.js",
6
6
  "types": "./dist/index.d.ts",