iamdata 0.1.202504261__py3-none-any.whl → 0.1.202511181__py3-none-any.whl

iamdata/data/actions/cloudtrail.json

@@ -407,6 +407,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "geteventconfiguration": {
+    "name": "GetEventConfiguration",
+    "description": "Grants permission to list event configurations that are configured for an event data store",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "eventdatastore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "geteventdatastore": {
     "name": "GetEventDataStore",
     "description": "Grants permission to list settings for the event data store",
@@ -696,6 +711,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "puteventconfiguration": {
+    "name": "PutEventConfiguration",
+    "description": "Grants permission to create and update event configurations for an event data store",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "eventdatastore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "iam:CreateServiceLinkedRole",
+      "iam:GetRole"
+    ]
+  },
   "puteventselectors": {
     "name": "PutEventSelectors",
     "description": "Grants permission to create and update event selectors for a trail",

iamdata/data/actions/cloudwatch.json

@@ -246,6 +246,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "generatequeryresultssummary": {
+    "name": "GenerateQueryResultsSummary",
+    "description": "Grants permission to generate a summary of CloudWatch LogInsights query results in natural language using generative AI",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdashboard": {
     "name": "GetDashboard",
     "description": "Grants permission to display the details of the CloudWatch dashboard you specify",

iamdata/data/actions/codebuild.json

@@ -180,7 +180,21 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "codebuild:imageId",
+      "codebuild:computeType",
+      "codebuild:vpcConfig",
+      "codebuild:vpcConfig.vpcId",
+      "codebuild:vpcConfig.securityGroupIds",
+      "codebuild:vpcConfig.subnets",
+      "codebuild:computeConfiguration",
+      "codebuild:computeConfiguration.disk",
+      "codebuild:computeConfiguration.instanceType",
+      "codebuild:computeConfiguration.machineType",
+      "codebuild:computeConfiguration.memory",
+      "codebuild:computeConfiguration.vCpu",
+      "codebuild:environmentType",
+      "codebuild:fleetServiceRole"
     ],
     "dependentActions": []
   },
@@ -198,7 +212,91 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "codebuild:autoRetryLimit",
+      "codebuild:concurrentBuildLimit",
+      "codebuild:artifacts",
+      "codebuild:artifacts.bucketOwnerAccess",
+      "codebuild:artifacts.encryptionDisabled",
+      "codebuild:artifacts.location",
+      "codebuild:secondaryArtifacts",
+      "codebuild:secondaryArtifacts.artifactIdentifier",
+      "codebuild:secondaryArtifacts.bucketOwnerAccess",
+      "codebuild:secondaryArtifacts.encryptionDisabled",
+      "codebuild:secondaryArtifacts.location",
+      "codebuild:secondaryArtifacts/${artifactIdentifier}.bucketOwnerAccess",
+      "codebuild:secondaryArtifacts/${artifactIdentifier}.encryptionDisabled",
+      "codebuild:secondaryArtifacts/${artifactIdentifier}.location",
+      "codebuild:source",
+      "codebuild:source.buildStatusConfig.targetUrl",
+      "codebuild:source.buildStatusConfig.context",
+      "codebuild:source.location",
+      "codebuild:source.insecureSsl",
+      "codebuild:source.buildspec",
+      "codebuild:source.auth.resource",
+      "codebuild:source.auth.type",
+      "codebuild:secondarySources",
+      "codebuild:secondarySources.sourceIdentifier",
+      "codebuild:secondarySources.buildStatusConfig.targetUrl",
+      "codebuild:secondarySources.buildStatusConfig.context",
+      "codebuild:secondarySources.location",
+      "codebuild:secondarySources.auth.resource",
+      "codebuild:secondarySources.auth.type",
+      "codebuild:secondarySources.buildspec",
+      "codebuild:secondarySources.insecureSsl",
+      "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.targetUrl",
+      "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.context",
+      "codebuild:secondarySources/${sourceIdentifier}.location",
+      "codebuild:secondarySources/${sourceIdentifier}.auth.resource",
+      "codebuild:secondarySources/${sourceIdentifier}.auth.type",
+      "codebuild:secondarySources/${sourceIdentifier}.buildspec",
+      "codebuild:secondarySources/${sourceIdentifier}.insecureSsl",
+      "codebuild:logsConfig",
+      "codebuild:logsConfig.s3Logs",
+      "codebuild:logsConfig.s3Logs.bucketOwnerAccess",
+      "codebuild:logsConfig.s3Logs.encryptionDisabled",
+      "codebuild:logsConfig.s3Logs.location",
+      "codebuild:logsConfig.s3Logs.status",
+      "codebuild:fileSystemLocations.identifier",
+      "codebuild:fileSystemLocations.type",
+      "codebuild:fileSystemLocations.location",
+      "codebuild:fileSystemLocations/${identifier}.type",
+      "codebuild:fileSystemLocations/${identifier}.location",
+      "codebuild:buildBatchConfig",
+      "codebuild:buildBatchConfig.serviceRole",
+      "codebuild:buildBatchConfig.restrictions.computeTypesAllowed",
+      "codebuild:buildBatchConfig.restrictions.fleetsAllowed",
+      "codebuild:vpcConfig",
+      "codebuild:vpcConfig.subnets",
+      "codebuild:vpcConfig.vpcId",
+      "codebuild:vpcConfig.securityGroupIds",
+      "codebuild:environment",
+      "codebuild:environment.type",
+      "codebuild:environment.fleet.fleetArn",
+      "codebuild:environment.computeType",
+      "codebuild:environment.image",
+      "codebuild:environment.imagePullCredentialsType",
+      "codebuild:environment.privilegedMode",
+      "codebuild:environment.certificate",
+      "codebuild:environment.computeConfiguration",
+      "codebuild:environment.computeConfiguration.disk",
+      "codebuild:environment.computeConfiguration.instanceType",
+      "codebuild:environment.computeConfiguration.machineType",
+      "codebuild:environment.computeConfiguration.memory",
+      "codebuild:environment.computeConfiguration.vCpu",
+      "codebuild:environment.environmentVariables",
+      "codebuild:environment.environmentVariables.name",
+      "codebuild:environment.environmentVariables.value",
+      "codebuild:environment.environmentVariables/${name}.value",
+      "codebuild:environment.registryCredential",
+      "codebuild:environment.registryCredential.credential",
+      "codebuild:environment.registryCredential.credentialProvider",
+      "codebuild:encryptionKey",
+      "codebuild:cache",
+      "codebuild:cache.type",
+      "codebuild:cache.location",
+      "codebuild:cache.modes",
+      "codebuild:serviceRole"
     ],
     "dependentActions": []
   },
@@ -232,7 +330,12 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "codebuild:exportConfig.s3Destination.bucket",
+      "codebuild:exportConfig.s3Destination.bucketOwner",
+      "codebuild:exportConfig.s3Destination.encryptionKey",
+      "codebuild:exportConfig.s3Destination.encryptionDisabled",
+      "codebuild:exportConfig.s3Destination.path"
     ],
     "dependentActions": []
   },
@@ -248,7 +351,13 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "codebuild:buildType",
+      "codebuild:manualCreation",
+      "codebuild:scopeConfiguration.domain",
+      "codebuild:scopeConfiguration.name",
+      "codebuild:scopeConfiguration.scope"
+    ],
     "dependentActions": []
   },
   "deletebuildbatch": {
@@ -450,7 +559,13 @@
     "description": "Grants permission to import the source repository credentials for an AWS CodeBuild project that has its source code stored in a GitHub, GitHub Enterprise, or Bitbucket repository",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "codebuild:authType",
+      "codebuild:serverType",
+      "codebuild:shouldOverwrite",
+      "codebuild:token",
+      "codebuild:username"
+    ],
     "dependentActions": []
   },
   "invalidateprojectcache": {
@@ -721,7 +836,72 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "codebuild:autoRetryLimit",
+      "codebuild:artifacts",
+      "codebuild:artifacts.bucketOwnerAccess",
+      "codebuild:artifacts.encryptionDisabled",
+      "codebuild:artifacts.location",
+      "codebuild:secondaryArtifacts",
+      "codebuild:secondaryArtifacts.artifactIdentifier",
+      "codebuild:secondaryArtifacts.bucketOwnerAccess",
+      "codebuild:secondaryArtifacts.encryptionDisabled",
+      "codebuild:secondaryArtifacts.location",
+      "codebuild:secondaryArtifacts/${artifactIdentifier}.bucketOwnerAccess",
+      "codebuild:secondaryArtifacts/${artifactIdentifier}.encryptionDisabled",
+      "codebuild:secondaryArtifacts/${artifactIdentifier}.location",
+      "codebuild:source",
+      "codebuild:source.buildStatusConfig.targetUrl",
+      "codebuild:source.buildStatusConfig.context",
+      "codebuild:source.location",
+      "codebuild:source.insecureSsl",
+      "codebuild:source.buildspec",
+      "codebuild:source.auth.resource",
+      "codebuild:source.auth.type",
+      "codebuild:secondarySources",
+      "codebuild:secondarySources.sourceIdentifier",
+      "codebuild:secondarySources.buildStatusConfig.targetUrl",
+      "codebuild:secondarySources.buildStatusConfig.context",
+      "codebuild:secondarySources.location",
+      "codebuild:secondarySources.auth.resource",
+      "codebuild:secondarySources.auth.type",
+      "codebuild:secondarySources.buildspec",
+      "codebuild:secondarySources.insecureSsl",
+      "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.targetUrl",
+      "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.context",
+      "codebuild:secondarySources/${sourceIdentifier}.location",
+      "codebuild:secondarySources/${sourceIdentifier}.auth.resource",
+      "codebuild:secondarySources/${sourceIdentifier}.auth.type",
+      "codebuild:secondarySources/${sourceIdentifier}.buildspec",
+      "codebuild:secondarySources/${sourceIdentifier}.insecureSsl",
+      "codebuild:logsConfig",
+      "codebuild:logsConfig.s3Logs",
+      "codebuild:logsConfig.s3Logs.bucketOwnerAccess",
+      "codebuild:logsConfig.s3Logs.encryptionDisabled",
+      "codebuild:logsConfig.s3Logs.location",
+      "codebuild:logsConfig.s3Logs.status",
+      "codebuild:environment",
+      "codebuild:environment.type",
+      "codebuild:environment.fleet.fleetArn",
+      "codebuild:environment.computeType",
+      "codebuild:environment.image",
+      "codebuild:environment.imagePullCredentialsType",
+      "codebuild:environment.privilegedMode",
+      "codebuild:environment.certificate",
+      "codebuild:environment.environmentVariables",
+      "codebuild:environment.environmentVariables.name",
+      "codebuild:environment.environmentVariables.value",
+      "codebuild:environment.environmentVariables/${name}.value",
+      "codebuild:environment.registryCredential",
+      "codebuild:environment.registryCredential.credential",
+      "codebuild:environment.registryCredential.credentialProvider",
+      "codebuild:encryptionKey",
+      "codebuild:cache",
+      "codebuild:cache.type",
+      "codebuild:cache.location",
+      "codebuild:cache.modes",
+      "codebuild:serviceRole"
+    ],
     "dependentActions": []
   },
   "startbuildbatch": {
@@ -736,7 +916,72 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "codebuild:artifacts",
+      "codebuild:artifacts.bucketOwnerAccess",
+      "codebuild:artifacts.encryptionDisabled",
+      "codebuild:artifacts.location",
+      "codebuild:secondaryArtifacts",
+      "codebuild:secondaryArtifacts.artifactIdentifier",
+      "codebuild:secondaryArtifacts.bucketOwnerAccess",
+      "codebuild:secondaryArtifacts.encryptionDisabled",
+      "codebuild:secondaryArtifacts.location",
+      "codebuild:secondaryArtifacts/${artifactIdentifier}.bucketOwnerAccess",
+      "codebuild:secondaryArtifacts/${artifactIdentifier}.encryptionDisabled",
+      "codebuild:secondaryArtifacts/${artifactIdentifier}.location",
+      "codebuild:source",
+      "codebuild:source.location",
+      "codebuild:source.insecureSsl",
+      "codebuild:source.buildspec",
+      "codebuild:source.auth.resource",
+      "codebuild:source.auth.type",
+      "codebuild:secondarySources",
+      "codebuild:secondarySources.sourceIdentifier",
+      "codebuild:secondarySources.buildStatusConfig.targetUrl",
+      "codebuild:secondarySources.buildStatusConfig.context",
+      "codebuild:secondarySources.location",
+      "codebuild:secondarySources.auth.resource",
+      "codebuild:secondarySources.auth.type",
+      "codebuild:secondarySources.buildspec",
+      "codebuild:secondarySources.insecureSsl",
+      "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.targetUrl",
+      "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.context",
+      "codebuild:secondarySources/${sourceIdentifier}.location",
+      "codebuild:secondarySources/${sourceIdentifier}.auth.resource",
+      "codebuild:secondarySources/${sourceIdentifier}.auth.type",
+      "codebuild:secondarySources/${sourceIdentifier}.buildspec",
+      "codebuild:secondarySources/${sourceIdentifier}.insecureSsl",
+      "codebuild:logsConfig",
+      "codebuild:logsConfig.s3Logs",
+      "codebuild:logsConfig.s3Logs.bucketOwnerAccess",
+      "codebuild:logsConfig.s3Logs.encryptionDisabled",
+      "codebuild:logsConfig.s3Logs.location",
+      "codebuild:logsConfig.s3Logs.status",
+      "codebuild:buildBatchConfig",
+      "codebuild:buildBatchConfig.serviceRole",
+      "codebuild:buildBatchConfig.restrictions.computeTypesAllowed",
+      "codebuild:buildBatchConfig.restrictions.fleetsAllowed",
+      "codebuild:environment",
+      "codebuild:environment.type",
+      "codebuild:environment.computeType",
+      "codebuild:environment.image",
+      "codebuild:environment.imagePullCredentialsType",
+      "codebuild:environment.privilegedMode",
+      "codebuild:environment.certificate",
+      "codebuild:environment.environmentVariables",
+      "codebuild:environment.environmentVariables.name",
+      "codebuild:environment.environmentVariables.value",
+      "codebuild:environment.environmentVariables/${name}.value",
+      "codebuild:environment.registryCredential",
+      "codebuild:environment.registryCredential.credential",
+      "codebuild:environment.registryCredential.credentialProvider",
+      "codebuild:encryptionKey",
+      "codebuild:cache",
+      "codebuild:cache.type",
+      "codebuild:cache.location",
+      "codebuild:cache.modes",
+      "codebuild:serviceRole"
+    ],
     "dependentActions": []
   },
   "startcommandexecution": {
@@ -843,7 +1088,21 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "codebuild:imageId",
+      "codebuild:computeType",
+      "codebuild:vpcConfig",
+      "codebuild:vpcConfig.vpcId",
+      "codebuild:vpcConfig.securityGroupIds",
+      "codebuild:vpcConfig.subnets",
+      "codebuild:computeConfiguration",
+      "codebuild:computeConfiguration.disk",
+      "codebuild:computeConfiguration.instanceType",
+      "codebuild:computeConfiguration.machineType",
+      "codebuild:computeConfiguration.memory",
+      "codebuild:computeConfiguration.vCpu",
+      "codebuild:environmentType",
+      "codebuild:fleetServiceRole"
     ],
     "dependentActions": []
   },
@@ -861,7 +1120,91 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "codebuild:autoRetryLimit",
+      "codebuild:concurrentBuildLimit",
+      "codebuild:artifacts",
+      "codebuild:artifacts.bucketOwnerAccess",
+      "codebuild:artifacts.encryptionDisabled",
+      "codebuild:artifacts.location",
+      "codebuild:secondaryArtifacts",
+      "codebuild:secondaryArtifacts.artifactIdentifier",
+      "codebuild:secondaryArtifacts.bucketOwnerAccess",
+      "codebuild:secondaryArtifacts.encryptionDisabled",
+      "codebuild:secondaryArtifacts.location",
+      "codebuild:secondaryArtifacts/${artifactIdentifier}.bucketOwnerAccess",
+      "codebuild:secondaryArtifacts/${artifactIdentifier}.encryptionDisabled",
+      "codebuild:secondaryArtifacts/${artifactIdentifier}.location",
+      "codebuild:source",
+      "codebuild:source.buildStatusConfig.targetUrl",
+      "codebuild:source.buildStatusConfig.context",
+      "codebuild:source.location",
+      "codebuild:source.insecureSsl",
+      "codebuild:source.buildspec",
+      "codebuild:source.auth.resource",
+      "codebuild:source.auth.type",
+      "codebuild:secondarySources",
+      "codebuild:secondarySources.sourceIdentifier",
+      "codebuild:secondarySources.buildStatusConfig.targetUrl",
+      "codebuild:secondarySources.buildStatusConfig.context",
+      "codebuild:secondarySources.location",
+      "codebuild:secondarySources.auth.resource",
+      "codebuild:secondarySources.auth.type",
+      "codebuild:secondarySources.buildspec",
+      "codebuild:secondarySources.insecureSsl",
+      "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.targetUrl",
+      "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.context",
+      "codebuild:secondarySources/${sourceIdentifier}.location",
+      "codebuild:secondarySources/${sourceIdentifier}.auth.resource",
+      "codebuild:secondarySources/${sourceIdentifier}.auth.type",
+      "codebuild:secondarySources/${sourceIdentifier}.buildspec",
+      "codebuild:secondarySources/${sourceIdentifier}.insecureSsl",
+      "codebuild:logsConfig",
+      "codebuild:logsConfig.s3Logs",
+      "codebuild:logsConfig.s3Logs.bucketOwnerAccess",
+      "codebuild:logsConfig.s3Logs.encryptionDisabled",
+      "codebuild:logsConfig.s3Logs.location",
+      "codebuild:logsConfig.s3Logs.status",
+      "codebuild:fileSystemLocations.identifier",
+      "codebuild:fileSystemLocations.type",
+      "codebuild:fileSystemLocations.location",
+      "codebuild:fileSystemLocations/${identifier}.type",
+      "codebuild:fileSystemLocations/${identifier}.location",
+      "codebuild:buildBatchConfig",
+      "codebuild:buildBatchConfig.serviceRole",
+      "codebuild:buildBatchConfig.restrictions.computeTypesAllowed",
+      "codebuild:buildBatchConfig.restrictions.fleetsAllowed",
+      "codebuild:vpcConfig",
+      "codebuild:vpcConfig.subnets",
+      "codebuild:vpcConfig.vpcId",
+      "codebuild:vpcConfig.securityGroupIds",
+      "codebuild:environment",
+      "codebuild:environment.type",
+      "codebuild:environment.fleet.fleetArn",
+      "codebuild:environment.computeType",
+      "codebuild:environment.image",
+      "codebuild:environment.imagePullCredentialsType",
+      "codebuild:environment.privilegedMode",
+      "codebuild:environment.certificate",
+      "codebuild:environment.computeConfiguration",
+      "codebuild:environment.computeConfiguration.disk",
+      "codebuild:environment.computeConfiguration.instanceType",
+      "codebuild:environment.computeConfiguration.machineType",
+      "codebuild:environment.computeConfiguration.memory",
+      "codebuild:environment.computeConfiguration.vCpu",
+      "codebuild:environment.environmentVariables",
+      "codebuild:environment.environmentVariables.name",
+      "codebuild:environment.environmentVariables.value",
+      "codebuild:environment.environmentVariables/${name}.value",
+      "codebuild:environment.registryCredential",
+      "codebuild:environment.registryCredential.credential",
+      "codebuild:environment.registryCredential.credentialProvider",
+      "codebuild:encryptionKey",
+      "codebuild:cache",
+      "codebuild:cache.type",
+      "codebuild:cache.location",
+      "codebuild:cache.modes",
+      "codebuild:serviceRole"
     ],
     "dependentActions": []
   },
@@ -879,7 +1222,8 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "codebuild:projectVisibility"
     ],
     "dependentActions": []
   },
@@ -913,7 +1257,12 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "codebuild:exportConfig.s3Destination.bucket",
+      "codebuild:exportConfig.s3Destination.bucketOwner",
+      "codebuild:exportConfig.s3Destination.encryptionKey",
+      "codebuild:exportConfig.s3Destination.encryptionDisabled",
+      "codebuild:exportConfig.s3Destination.path"
     ],
     "dependentActions": []
   },
@@ -929,7 +1278,13 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "codebuild:buildType",
+      "codebuild:manualCreation",
+      "codebuild:scopeConfiguration.domain",
+      "codebuild:scopeConfiguration.name",
+      "codebuild:scopeConfiguration.scope"
+    ],
     "dependentActions": []
   }
 }

iamdata/data/actions/codepipeline.json

@@ -233,6 +233,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdeployactionexecutiontargets": {
+    "name": "ListDeployActionExecutionTargets",
+    "description": "Grants permission to list the deployment details for deploy action executions that have occurred in a pipeline",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "pipeline",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listpipelineexecutions": {
     "name": "ListPipelineExecutions",
     "description": "Grants permission to list a summary of the most recent executions for a pipeline",

iamdata/data/actions/cognito-idp.json

@@ -526,6 +526,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createterms": {
+    "name": "CreateTerms",
+    "description": "Grants permission to create terms and associate it with an app client",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createuserimportjob": {
     "name": "CreateUserImportJob",
     "description": "Grants permission to create user CSV import jobs",
@@ -643,6 +658,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteterms": {
+    "name": "DeleteTerms",
+    "description": "Grants permission to delete terms for an app client",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteuser": {
     "name": "DeleteUser",
     "description": "Grants permission to allow a user to delete one's self",
@@ -779,6 +809,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeterms": {
+    "name": "DescribeTerms",
+    "description": "Grants permission to get the detailed information about terms for an app client",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeuserimportjob": {
     "name": "DescribeUserImportJob",
     "description": "Grants permission to describe any user import job",
@@ -947,6 +992,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettokensfromrefreshtoken": {
+    "name": "GetTokensFromRefreshToken",
+    "description": "Grants permission to update user tokens with refresh tokens",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getuicustomization": {
     "name": "GetUICustomization",
     "description": "Grants permission to get UI customization information for the hosted UI of any app client",
@@ -1109,6 +1162,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listterms": {
+    "name": "ListTerms",
+    "description": "Grants permission to list all terms for a user pool",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listuserimportjobs": {
     "name": "ListUserImportJobs",
     "description": "Grants permission to list all user import jobs",
@@ -1433,6 +1501,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateterms": {
+    "name": "UpdateTerms",
+    "description": "Grants permission to update terms for an app client",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateuserattributes": {
     "name": "UpdateUserAttributes",
     "description": "Grants permission to allow a user to update a specific attribute (one at a time)",