iamdata 0.1.202502271__tar.gz → 0.1.202503011__tar.gz

{iamdata-0.1.202502271 → iamdata-0.1.202503011}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iamdata
-Version: 0.1.202502271
+Version: 0.1.202503011
 Summary: IAM data for AWS actions, resources, and conditions based on IAM policy documents. Checked for updates daily.
 Project-URL: Homepage, https://github.com/cloud-copilot/iam-data-python
 Project-URL: Issues, https://github.com/cloud-copilot/iam-data-python/issues

{iamdata-0.1.202502271 → iamdata-0.1.202503011}/iamdata/data/actions/application-signals.json

@@ -63,6 +63,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "link": {
+    "name": "Link",
+    "isPermissionOnly": true,
+    "description": "Grants permission to share Application Signals resources with a monitoring account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listobservedentities": {
     "name": "ListObservedEntities",
     "description": "Grants permission to list entities associated with other entities",

{iamdata-0.1.202502271 → iamdata-0.1.202503011}/iamdata/data/actions/bedrock.json

@@ -324,6 +324,21 @@
     ],
     "dependentActions": []
   },
+  "createinvocation": {
+    "name": "CreateInvocation",
+    "description": "Grants permission to create a new invocation in an existing session",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createknowledgebase": {
     "name": "CreateKnowledgeBase",
     "description": "Grants permission to create a knowledge base",
@@ -503,6 +518,17 @@
     ],
     "dependentActions": []
   },
+  "createsession": {
+    "name": "CreateSession",
+    "description": "Grants permission to create a new session",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "deleteagent": {
     "name": "DeleteAgent",
     "description": "Grants permission to delete an Agent that you created earlier",
@@ -849,6 +875,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletesession": {
+    "name": "DeleteSession",
+    "description": "Grants permission to delete a Session that you created earlier",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deregistermarketplacemodelendpoint": {
     "name": "DeregisterMarketplaceModelEndpoint",
     "description": "Grants permission to deregister a marketplace model endpoint to make it unusable in Bedrock Marketplace",
@@ -915,6 +956,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "endsession": {
+    "name": "EndSession",
+    "description": "Grants permission to end a Session that you created earlier",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "generatequery": {
     "name": "GenerateQuery",
     "description": "Grants permission to generate queries associated with user input",
@@ -1282,6 +1338,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getinvocationstep": {
+    "name": "GetInvocationStep",
+    "description": "Grants permission to get an invocation step from a session",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getknowledgebase": {
     "name": "GetKnowledgeBase",
     "description": "Grants permission to retrieve an existing knowledge base",
@@ -1477,6 +1548,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getsession": {
+    "name": "GetSession",
+    "description": "Grants permission to retrieve an existing session",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getusecaseformodelaccess": {
     "name": "GetUseCaseForModelAccess",
     "description": "Grants permission to retrieve a use case for model access",
@@ -1520,7 +1606,14 @@
     "isPermissionOnly": true,
     "description": "Grants permission to invoke blueprint recommendations asynchronously",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "data-automation-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -1544,6 +1637,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "data-automation-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "data-automation-project",
         "required": true,
@@ -1945,6 +2044,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listinvocationsteps": {
+    "name": "ListInvocationSteps",
+    "description": "Grants permission to get list of invocation step from a session",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listinvocations": {
+    "name": "ListInvocations",
+    "description": "Grants permission to list invocations in a session",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listknowledgebasedocuments": {
     "name": "ListKnowledgeBaseDocuments",
     "description": "Grants permission to list documents in a knowledge base",
@@ -2047,6 +2176,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listsessions": {
+    "name": "ListSessions",
+    "description": "Grants permission to list existing sessions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list tags for a Bedrock resource",
@@ -2076,12 +2213,30 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "blueprint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "custom-model",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "data-automation-invocation-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "data-automation-project",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "evaluation-job",
         "required": true,
@@ -2165,6 +2320,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -2216,6 +2377,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putinvocationstep": {
+    "name": "PutInvocationStep",
+    "description": "Grants permission to put an invocation step into an invocation in session",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putmodelinvocationloggingconfiguration": {
     "name": "PutModelInvocationLoggingConfiguration",
     "description": "Grants permission to create an existing Invocation logging configuration",
@@ -2423,12 +2599,30 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "blueprint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "custom-model",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "data-automation-invocation-job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "data-automation-project",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "evaluation-job",
         "required": false,
@@ -2512,6 +2706,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "session",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -2549,12 +2749,30 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "blueprint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "custom-model",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "data-automation-invocation-job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "data-automation-project",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "evaluation-job",
         "required": false,
@@ -2638,6 +2856,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "session",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -2894,6 +3118,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatesession": {
+    "name": "UpdateSession",
+    "description": "Grants permission to update an existing session",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "validateflowdefinition": {
     "name": "ValidateFlowDefinition",
     "description": "Grants permission to validate prompt flow definitions",

iamdata-0.1.202503011/iamdata/data/actions/qdeveloper.json

@@ -0,0 +1,111 @@
+{
+  "exportartifact": {
+    "name": "ExportArtifact",
+    "description": "Grants permission to export artifacts from Amazon Q Developer",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "codeTransformation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "importartifact": {
+    "name": "ImportArtifact",
+    "description": "Grants permission to import artifacts to Amazon Q Developer",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "codeTransformation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list all tags associated with an Amazon Q Developer resource",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "codeTransformation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startagentsession": {
+    "name": "StartAgentSession",
+    "description": "Grants permission to start an agent session with Amazon Q Developer",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to associate tags with an Amazon Q Developer resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "codeTransformation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "transformcode": {
+    "name": "TransformCode",
+    "description": "Grants permission to transform code with Amazon Q Developer Transform Agent",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "codeTransformation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to remove tags associated with an Amazon Q Developer resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "codeTransformation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  }
+}

{iamdata-0.1.202502271 → iamdata-0.1.202503011}/iamdata/data/actions/redshift-serverless.json

@@ -410,6 +410,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettrack": {
+    "name": "GetTrack",
+    "description": "Grants permission to get information about a track in Amazon Redshift Serverless",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getusagelimit": {
     "name": "GetUsageLimit",
     "description": "Grants permission to get information about a usage limit in Amazon Redshift Serverless",
@@ -556,6 +564,14 @@
     ],
     "dependentActions": []
   },
+  "listtracks": {
+    "name": "ListTracks",
+    "description": "Grants permission to list tracks available in Amazon Redshift Serverless",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listusagelimits": {
     "name": "ListUsageLimits",
     "description": "Grants permission to list all usage limits within Amazon Redshift Serverless",

{iamdata-0.1.202502271 → iamdata-0.1.202503011}/iamdata/data/actions/s3.json

@@ -84,11 +84,7 @@
       "s3:x-amz-server-side-encryption-aws-kms-key-id",
       "s3:x-amz-server-side-encryption-customer-algorithm",
       "s3:x-amz-storage-class",
-      "s3:x-amz-website-redirect-location",
-      "s3:object-lock-mode",
-      "s3:object-lock-retain-until-date",
-      "s3:object-lock-remaining-retention-days",
-      "s3:object-lock-legal-hold"
+      "s3:x-amz-website-redirect-location"
     ],
     "dependentActions": []
   },

{iamdata-0.1.202502271 → iamdata-0.1.202503011}/iamdata/data/actions/sagemaker.json

@@ -1376,7 +1376,8 @@
       "aws:TagKeys",
       "sagemaker:NetworkIsolation",
       "sagemaker:VpcSecurityGroupIds",
-      "sagemaker:VpcSubnets"
+      "sagemaker:VpcSubnets",
+      "sagemaker:DirectGatedModelAccess"
     ],
     "dependentActions": []
   },
@@ -1919,7 +1920,8 @@
       "sagemaker:VpcSecurityGroupIds",
       "sagemaker:VpcSubnets",
       "sagemaker:KeepAlivePeriod",
-      "sagemaker:EnableRemoteDebug"
+      "sagemaker:EnableRemoteDebug",
+      "sagemaker:DirectGatedModelAccess"
     ],
     "dependentActions": []
   },
@@ -6319,6 +6321,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "trainhubmodel": {
+    "name": "TrainHubModel",
+    "description": "Grants permission to train a model in hub",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "hub",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "hub-content",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateaction": {
     "name": "UpdateAction",
     "description": "Grants permission to update an action",
@@ -6625,6 +6648,48 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatehubcontent": {
+    "name": "UpdateHubContent",
+    "description": "Grants permission to update hub content",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "hub",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "hub-content",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatehubcontentreference": {
+    "name": "UpdateHubContentReference",
+    "description": "Grants permission to update hub content reference",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "hub",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "hub-content",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateimage": {
     "name": "UpdateImage",
     "description": "Grants permission to update the properties of a SageMaker Image",

{iamdata-0.1.202502271 → iamdata-0.1.202503011}/iamdata/data/actions/ses.json

@@ -2848,6 +2848,24 @@
     ],
     "dependentActions": []
   },
+  "putconfigurationsetarchivingoptions": {
+    "name": "PutConfigurationSetArchivingOptions",
+    "description": "Grants permission to associate a configuration set with a Mail Manager archive",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "configuration-set",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ses:ApiVersion",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "putconfigurationsetsuppressionoptions": {
     "name": "PutConfigurationSetSuppressionOptions",
     "description": "Grants permission to specify the account suppression list preferences for a particular configuration set",

iamdata-0.1.202503011/iamdata/data/conditionKeys/qdeveloper.json

@@ -0,0 +1,17 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the Amazon Q Developer resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}