iamdata 0.1.202504261__py3-none-any.whl → 0.1.202511181__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (315) hide show
  1. iamdata/data/actions/access-analyzer.json +4 -1
  2. iamdata/data/actions/acm.json +23 -3
  3. iamdata/data/actions/action-recommendations.json +10 -0
  4. iamdata/data/actions/aiops.json +189 -1
  5. iamdata/data/actions/airflow-serverless.json +225 -0
  6. iamdata/data/actions/amplify.json +2 -12
  7. iamdata/data/actions/aoss.json +36 -4
  8. iamdata/data/actions/apigateway.json +104 -0
  9. iamdata/data/actions/app-integrations.json +108 -0
  10. iamdata/data/actions/application-signals.json +40 -0
  11. iamdata/data/actions/appstream.json +138 -103
  12. iamdata/data/actions/appsync.json +1 -1
  13. iamdata/data/actions/aps.json +309 -0
  14. iamdata/data/actions/arc-region-switch.json +334 -0
  15. iamdata/data/actions/arc-zonal-shift.json +53 -1
  16. iamdata/data/actions/artifact.json +0 -36
  17. iamdata/data/actions/athena.json +88 -1
  18. iamdata/data/actions/auditmanager.json +60 -7
  19. iamdata/data/actions/autoscaling.json +26 -3
  20. iamdata/data/actions/aws-marketplace.json +0 -32
  21. iamdata/data/actions/backup-search.json +1 -0
  22. iamdata/data/actions/backup.json +80 -0
  23. iamdata/data/actions/batch.json +183 -17
  24. iamdata/data/actions/bcm-dashboards.json +79 -0
  25. iamdata/data/actions/bcm-recommended-actions.json +10 -0
  26. iamdata/data/actions/bedrock-agentcore.json +1801 -0
  27. iamdata/data/actions/bedrock.json +814 -23
  28. iamdata/data/actions/billing.json +88 -5
  29. iamdata/data/actions/braket.json +2 -9
  30. iamdata/data/actions/budgets.json +6 -2
  31. iamdata/data/actions/cases.json +22 -2
  32. iamdata/data/actions/cassandra.json +67 -2
  33. iamdata/data/actions/ce.json +34 -0
  34. iamdata/data/actions/chatbot.json +87 -20
  35. iamdata/data/actions/cleanrooms-ml.json +11 -0
  36. iamdata/data/actions/cleanrooms.json +93 -0
  37. iamdata/data/actions/cloud9.json +4 -10
  38. iamdata/data/actions/cloudformation.json +22 -0
  39. iamdata/data/actions/cloudfront.json +457 -85
  40. iamdata/data/actions/cloudtrail.json +33 -0
  41. iamdata/data/actions/cloudwatch.json +8 -0
  42. iamdata/data/actions/codebuild.json +367 -12
  43. iamdata/data/actions/codepipeline.json +15 -0
  44. iamdata/data/actions/cognito-idp.json +83 -0
  45. iamdata/data/actions/connect-campaigns.json +16 -0
  46. iamdata/data/actions/connect.json +160 -2
  47. iamdata/data/actions/controlcatalog.json +8 -0
  48. iamdata/data/actions/cur.json +5 -1
  49. iamdata/data/actions/databrew.json +14 -7
  50. iamdata/data/actions/dataexchange.json +61 -9
  51. iamdata/data/actions/datazone.json +300 -6
  52. iamdata/data/actions/deadline.json +71 -16
  53. iamdata/data/actions/dms.json +40 -311
  54. iamdata/data/actions/ds.json +170 -0
  55. iamdata/data/actions/dsql.json +226 -22
  56. iamdata/data/actions/dynamodb.json +32 -0
  57. iamdata/data/actions/ec2.json +1466 -146
  58. iamdata/data/actions/ecs.json +59 -9
  59. iamdata/data/actions/eks-mcp.json +26 -0
  60. iamdata/data/actions/eks.json +100 -2
  61. iamdata/data/actions/elasticloadbalancing.json +9 -0
  62. iamdata/data/actions/elasticmapreduce.json +15 -0
  63. iamdata/data/actions/emr-containers.json +34 -1
  64. iamdata/data/actions/emr-serverless.json +16 -0
  65. iamdata/data/actions/entityresolution.json +16 -8
  66. iamdata/data/actions/es.json +60 -0
  67. iamdata/data/actions/events.json +40 -0
  68. iamdata/data/actions/evs.json +193 -0
  69. iamdata/data/actions/freetier.json +32 -0
  70. iamdata/data/actions/fsx.json +59 -6
  71. iamdata/data/actions/glacier.json +1 -4
  72. iamdata/data/actions/glue.json +228 -54
  73. iamdata/data/actions/groundstation.json +15 -0
  74. iamdata/data/actions/guardduty.json +199 -1
  75. iamdata/data/actions/healthlake.json +225 -0
  76. iamdata/data/actions/iam.json +13 -4
  77. iamdata/data/actions/identitystore.json +91 -19
  78. iamdata/data/actions/imagebuilder.json +198 -241
  79. iamdata/data/actions/inspector2.json +208 -12
  80. iamdata/data/actions/invoicing.json +28 -3
  81. iamdata/data/actions/iot.json +37 -5
  82. iamdata/data/actions/iotfleetwise.json +6 -63
  83. iamdata/data/actions/iotmanagedintegrations.json +507 -75
  84. iamdata/data/actions/iotsitewise.json +271 -0
  85. iamdata/data/actions/ivs.json +48 -0
  86. iamdata/data/actions/kafka.json +15 -0
  87. iamdata/data/actions/kinesis.json +163 -5
  88. iamdata/data/actions/kms.json +125 -2
  89. iamdata/data/actions/lambda.json +4 -2
  90. iamdata/data/actions/lex.json +42 -0
  91. iamdata/data/actions/license-manager.json +70 -8
  92. iamdata/data/actions/logs.json +8 -0
  93. iamdata/data/actions/mediaconnect.json +85 -26
  94. iamdata/data/actions/mediaconvert.json +15 -0
  95. iamdata/data/actions/medialive.json +26 -2
  96. iamdata/data/actions/medical-imaging.json +105 -0
  97. iamdata/data/actions/memorydb.json +18 -0
  98. iamdata/data/actions/mgn.json +20 -2
  99. iamdata/data/actions/mpa.json +313 -0
  100. iamdata/data/actions/mq.json +16 -0
  101. iamdata/data/actions/neptune-graph.json +37 -0
  102. iamdata/data/actions/network-firewall.json +236 -3
  103. iamdata/data/actions/network-security-director.json +74 -0
  104. iamdata/data/actions/notifications.json +62 -2
  105. iamdata/data/actions/observabilityadmin.json +330 -0
  106. iamdata/data/actions/odb.json +811 -0
  107. iamdata/data/actions/one.json +8 -0
  108. iamdata/data/actions/opensearch.json +1 -1
  109. iamdata/data/actions/organizations.json +39 -8
  110. iamdata/data/actions/osis.json +111 -0
  111. iamdata/data/actions/outposts.json +41 -3
  112. iamdata/data/actions/partnercentral.json +96 -32
  113. iamdata/data/actions/payment-cryptography.json +154 -11
  114. iamdata/data/actions/pcs.json +27 -1
  115. iamdata/data/actions/pi.json +6 -0
  116. iamdata/data/actions/profile.json +670 -20
  117. iamdata/data/actions/q.json +37 -0
  118. iamdata/data/actions/qapps.json +0 -78
  119. iamdata/data/actions/qbusiness.json +177 -46
  120. iamdata/data/actions/quicksight.json +484 -7
  121. iamdata/data/actions/rds.json +102 -45
  122. iamdata/data/actions/redshift-serverless.json +2 -2
  123. iamdata/data/actions/redshift.json +0 -6
  124. iamdata/data/actions/rekognition.json +1 -8
  125. iamdata/data/actions/repostspace.json +90 -0
  126. iamdata/data/actions/resiliencehub.json +19 -5
  127. iamdata/data/actions/resource-explorer-2.json +84 -2
  128. iamdata/data/actions/route53resolver.json +14 -2
  129. iamdata/data/actions/rtbfabric.json +481 -0
  130. iamdata/data/actions/s3.json +340 -143
  131. iamdata/data/actions/s3express.json +110 -6
  132. iamdata/data/actions/s3tables.json +85 -2
  133. iamdata/data/actions/s3vectors.json +242 -0
  134. iamdata/data/actions/sagemaker-mlflow.json +135 -0
  135. iamdata/data/actions/sagemaker-unified-studio-mcp.json +26 -0
  136. iamdata/data/actions/sagemaker.json +312 -11
  137. iamdata/data/actions/scn.json +151 -4
  138. iamdata/data/actions/security-ir.json +23 -8
  139. iamdata/data/actions/securityhub.json +360 -4
  140. iamdata/data/actions/securitylake.json +1 -0
  141. iamdata/data/actions/servicediscovery.json +140 -14
  142. iamdata/data/actions/servicequotas.json +40 -0
  143. iamdata/data/actions/ses.json +286 -2
  144. iamdata/data/actions/shield.json +47 -0
  145. iamdata/data/actions/snow-device-management.json +1 -0
  146. iamdata/data/actions/social-messaging.json +120 -0
  147. iamdata/data/actions/ssm-guiconnect.json +24 -0
  148. iamdata/data/actions/ssm-sap.json +51 -3
  149. iamdata/data/actions/ssm.json +63 -2
  150. iamdata/data/actions/sso-directory.json +108 -36
  151. iamdata/data/actions/sso-oauth.json +40 -2
  152. iamdata/data/actions/sso.json +369 -157
  153. iamdata/data/actions/sts.json +40 -0
  154. iamdata/data/actions/support-console.json +119 -0
  155. iamdata/data/actions/support.json +58 -0
  156. iamdata/data/actions/synthetics.json +18 -0
  157. iamdata/data/actions/tax.json +48 -0
  158. iamdata/data/actions/thinclient.json +1 -0
  159. iamdata/data/actions/transcribe.json +12 -0
  160. iamdata/data/actions/transfer.json +30 -14
  161. iamdata/data/actions/transform.json +185 -0
  162. iamdata/data/actions/user-subscriptions.json +8 -0
  163. iamdata/data/actions/uxc.json +26 -0
  164. iamdata/data/actions/verifiedpermissions.json +58 -2
  165. iamdata/data/actions/vpc-lattice-svcs.json +2 -0
  166. iamdata/data/actions/vpc-lattice.json +90 -0
  167. iamdata/data/actions/wisdom.json +31 -214
  168. iamdata/data/actions/workspaces-instances.json +186 -0
  169. iamdata/data/actions/workspaces-web.json +136 -8
  170. iamdata/data/actions/workspaces.json +98 -0
  171. iamdata/data/actions/xray.json +15 -5
  172. iamdata/data/conditionKeys/acm.json +5 -0
  173. iamdata/data/conditionKeys/airflow-serverless.json +17 -0
  174. iamdata/data/conditionKeys/apigateway.json +30 -0
  175. iamdata/data/conditionKeys/arc-region-switch.json +17 -0
  176. iamdata/data/conditionKeys/autoscaling.json +5 -0
  177. iamdata/data/conditionKeys/backup.json +6 -1
  178. iamdata/data/conditionKeys/bcm-dashboards.json +12 -0
  179. iamdata/data/conditionKeys/bedrock-agentcore.json +72 -0
  180. iamdata/data/conditionKeys/bedrock.json +10 -0
  181. iamdata/data/conditionKeys/chatbot.json +17 -1
  182. iamdata/data/conditionKeys/cloudformation.json +5 -0
  183. iamdata/data/conditionKeys/codebuild.json +550 -0
  184. iamdata/data/conditionKeys/connect.json +15 -0
  185. iamdata/data/conditionKeys/deadline.json +5 -0
  186. iamdata/data/conditionKeys/dsql.json +12 -2
  187. iamdata/data/conditionKeys/ebs.json +2 -2
  188. iamdata/data/conditionKeys/ec2.json +30 -15
  189. iamdata/data/conditionKeys/eks.json +5 -0
  190. iamdata/data/conditionKeys/events.json +1 -1
  191. iamdata/data/conditionKeys/evs.json +17 -0
  192. iamdata/data/conditionKeys/glacier.json +0 -10
  193. iamdata/data/conditionKeys/glue.json +10 -0
  194. iamdata/data/conditionKeys/iam.json +10 -0
  195. iamdata/data/conditionKeys/imagebuilder.json +2 -2
  196. iamdata/data/conditionKeys/iotmanagedintegrations.json +27 -1
  197. iamdata/data/conditionKeys/kinesis.json +15 -0
  198. iamdata/data/conditionKeys/kms.json +127 -7
  199. iamdata/data/conditionKeys/lambda.json +5 -0
  200. iamdata/data/conditionKeys/license-manager.json +5 -0
  201. iamdata/data/conditionKeys/mediaconnect.json +17 -1
  202. iamdata/data/conditionKeys/mpa.json +27 -0
  203. iamdata/data/conditionKeys/observabilityadmin.json +32 -1
  204. iamdata/data/conditionKeys/odb.json +17 -0
  205. iamdata/data/conditionKeys/quicksight.json +0 -5
  206. iamdata/data/conditionKeys/rds.json +5 -0
  207. iamdata/data/conditionKeys/route53.json +1 -1
  208. iamdata/data/conditionKeys/rtbfabric.json +47 -0
  209. iamdata/data/conditionKeys/s3.json +15 -0
  210. iamdata/data/conditionKeys/s3express.json +26 -1
  211. iamdata/data/conditionKeys/s3tables.json +20 -0
  212. iamdata/data/conditionKeys/s3vectors.json +12 -0
  213. iamdata/data/conditionKeys/sagemaker.json +25 -0
  214. iamdata/data/conditionKeys/savingsplans.json +1 -1
  215. iamdata/data/conditionKeys/secretsmanager.json +1 -1
  216. iamdata/data/conditionKeys/securityhub.json +5 -0
  217. iamdata/data/conditionKeys/servicediscovery.json +5 -0
  218. iamdata/data/conditionKeys/ses.json +5 -0
  219. iamdata/data/conditionKeys/ssm.json +15 -0
  220. iamdata/data/conditionKeys/sso.json +11 -1
  221. iamdata/data/conditionKeys/sts.json +10 -0
  222. iamdata/data/conditionKeys/transcribe.json +1 -1
  223. iamdata/data/conditionKeys/transfer.json +20 -0
  224. iamdata/data/conditionKeys/transform.json +12 -0
  225. iamdata/data/conditionKeys/uxc.json +1 -0
  226. iamdata/data/conditionKeys/verifiedpermissions.json +17 -1
  227. iamdata/data/conditionKeys/vpc-lattice-svcs.json +5 -0
  228. iamdata/data/conditionKeys/vpc-lattice.json +15 -0
  229. iamdata/data/conditionKeys/workspaces-instances.json +17 -0
  230. iamdata/data/conditionKeys/xray.json +15 -0
  231. iamdata/data/conditionPatterns.json +141 -0
  232. iamdata/data/metadata.json +2 -2
  233. iamdata/data/resourceTypes/action-recommendations.json +1 -0
  234. iamdata/data/resourceTypes/airflow-serverless.json +9 -0
  235. iamdata/data/resourceTypes/apigateway.json +12 -0
  236. iamdata/data/resourceTypes/aps.json +9 -0
  237. iamdata/data/resourceTypes/arc-region-switch.json +9 -0
  238. iamdata/data/resourceTypes/artifact.json +5 -5
  239. iamdata/data/resourceTypes/athena.json +7 -0
  240. iamdata/data/resourceTypes/auditmanager.json +8 -2
  241. iamdata/data/resourceTypes/backup-gateway.json +3 -3
  242. iamdata/data/resourceTypes/batch.json +14 -0
  243. iamdata/data/resourceTypes/bcm-dashboards.json +1 -0
  244. iamdata/data/resourceTypes/bcm-recommended-actions.json +1 -0
  245. iamdata/data/resourceTypes/bedrock-agentcore.json +87 -0
  246. iamdata/data/resourceTypes/bedrock.json +45 -3
  247. iamdata/data/resourceTypes/cassandra.json +7 -0
  248. iamdata/data/resourceTypes/chatbot.json +8 -2
  249. iamdata/data/resourceTypes/cloudformation.json +4 -0
  250. iamdata/data/resourceTypes/cloudfront.json +14 -0
  251. iamdata/data/resourceTypes/dataexchange.json +4 -1
  252. iamdata/data/resourceTypes/deadline.json +5 -1
  253. iamdata/data/resourceTypes/ec2.json +125 -6
  254. iamdata/data/resourceTypes/eks-mcp.json +1 -0
  255. iamdata/data/resourceTypes/eks.json +7 -0
  256. iamdata/data/resourceTypes/emr-containers.json +0 -4
  257. iamdata/data/resourceTypes/events.json +8 -0
  258. iamdata/data/resourceTypes/evs.json +9 -0
  259. iamdata/data/resourceTypes/guardduty.json +18 -1
  260. iamdata/data/resourceTypes/imagebuilder.json +12 -18
  261. iamdata/data/resourceTypes/inspector2.json +14 -0
  262. iamdata/data/resourceTypes/iotmanagedintegrations.json +31 -12
  263. iamdata/data/resourceTypes/iotsitewise.json +7 -0
  264. iamdata/data/resourceTypes/kinesis.json +4 -1
  265. iamdata/data/resourceTypes/license-manager.json +10 -2
  266. iamdata/data/resourceTypes/mediaconnect.json +16 -4
  267. iamdata/data/resourceTypes/mpa.json +23 -0
  268. iamdata/data/resourceTypes/network-firewall.json +7 -0
  269. iamdata/data/resourceTypes/network-security-director.json +1 -0
  270. iamdata/data/resourceTypes/observabilityadmin.json +23 -1
  271. iamdata/data/resourceTypes/odb.json +44 -0
  272. iamdata/data/resourceTypes/osis.json +7 -0
  273. iamdata/data/resourceTypes/partnercentral.json +8 -2
  274. iamdata/data/resourceTypes/pi.json +4 -1
  275. iamdata/data/resourceTypes/profile.json +21 -0
  276. iamdata/data/resourceTypes/qbusiness.json +7 -4
  277. iamdata/data/resourceTypes/quicksight.json +26 -1
  278. iamdata/data/resourceTypes/rds.json +4 -1
  279. iamdata/data/resourceTypes/redshift.json +1 -4
  280. iamdata/data/resourceTypes/route53resolver.json +7 -0
  281. iamdata/data/resourceTypes/rtbfabric.json +46 -0
  282. iamdata/data/resourceTypes/s3.json +19 -1
  283. iamdata/data/resourceTypes/s3express.json +10 -2
  284. iamdata/data/resourceTypes/s3tables.json +7 -1
  285. iamdata/data/resourceTypes/s3vectors.json +10 -0
  286. iamdata/data/resourceTypes/sagemaker-unified-studio-mcp.json +1 -0
  287. iamdata/data/resourceTypes/sagemaker.json +18 -3
  288. iamdata/data/resourceTypes/scn.json +19 -3
  289. iamdata/data/resourceTypes/securityhub.json +36 -2
  290. iamdata/data/resourceTypes/ses.json +11 -0
  291. iamdata/data/resourceTypes/sts.json +8 -0
  292. iamdata/data/resourceTypes/support-console.json +1 -0
  293. iamdata/data/resourceTypes/transform.json +10 -0
  294. iamdata/data/resourceTypes/uxc.json +1 -0
  295. iamdata/data/resourceTypes/verifiedpermissions.json +4 -1
  296. iamdata/data/resourceTypes/vpc-lattice.json +12 -0
  297. iamdata/data/resourceTypes/workspaces-instances.json +16 -0
  298. iamdata/data/resourceTypes/workspaces-web.json +7 -0
  299. iamdata/data/resourceTypes/workspaces.json +4 -0
  300. iamdata/data/serviceNames.json +23 -8
  301. iamdata/data/services.json +18 -3
  302. iamdata/data/unassociatedConditions.json +23 -0
  303. {iamdata-0.1.202504261.dist-info → iamdata-0.1.202511181.dist-info}/METADATA +1 -1
  304. {iamdata-0.1.202504261.dist-info → iamdata-0.1.202511181.dist-info}/RECORD +312 -265
  305. iamdata/data/actions/application-cost-profiler.json +0 -50
  306. iamdata/data/actions/sagemaker-groundtruth-synthetic.json +0 -110
  307. iamdata/data/actions/supportrecommendations.json +0 -20
  308. /iamdata/data/conditionKeys/{application-cost-profiler.json → action-recommendations.json} +0 -0
  309. /iamdata/data/conditionKeys/{sagemaker-groundtruth-synthetic.json → bcm-recommended-actions.json} +0 -0
  310. /iamdata/data/conditionKeys/{supportrecommendations.json → eks-mcp.json} +0 -0
  311. /iamdata/data/{resourceTypes/application-cost-profiler.json → conditionKeys/network-security-director.json} +0 -0
  312. /iamdata/data/{resourceTypes/sagemaker-groundtruth-synthetic.json → conditionKeys/sagemaker-unified-studio-mcp.json} +0 -0
  313. /iamdata/data/{resourceTypes/supportrecommendations.json → conditionKeys/support-console.json} +0 -0
  314. {iamdata-0.1.202504261.dist-info → iamdata-0.1.202511181.dist-info}/WHEEL +0 -0
  315. {iamdata-0.1.202504261.dist-info → iamdata-0.1.202511181.dist-info}/licenses/LICENSE.txt +0 -0
@@ -38,20 +38,21 @@
38
38
  "name": "component",
39
39
  "required": true,
40
40
  "conditionKeys": [],
41
- "dependentActions": []
41
+ "dependentActions": [
42
+ "imagebuilder:TagResource",
43
+ "kms:Encrypt",
44
+ "kms:GenerateDataKey",
45
+ "kms:GenerateDataKeyWithoutPlaintext",
46
+ "s3:GetObject",
47
+ "s3:ListBucket"
48
+ ]
42
49
  }
43
50
  ],
44
51
  "conditionKeys": [
45
52
  "aws:RequestTag/${TagKey}",
46
53
  "aws:TagKeys"
47
54
  ],
48
- "dependentActions": [
49
- "iam:CreateServiceLinkedRole",
50
- "imagebuilder:TagResource",
51
- "kms:Encrypt",
52
- "kms:GenerateDataKey",
53
- "kms:GenerateDataKeyWithoutPlaintext"
54
- ]
55
+ "dependentActions": []
55
56
  },
56
57
  "createcontainerrecipe": {
57
58
  "name": "CreateContainerRecipe",
@@ -62,24 +63,27 @@
62
63
  "name": "containerRecipe",
63
64
  "required": true,
64
65
  "conditionKeys": [],
65
- "dependentActions": []
66
+ "dependentActions": [
67
+ "ec2:DescribeImages",
68
+ "ecr:DescribeImages",
69
+ "ecr:DescribeRepositories",
70
+ "imagebuilder:GetComponent",
71
+ "imagebuilder:GetImage",
72
+ "imagebuilder:TagResource",
73
+ "kms:Encrypt",
74
+ "kms:GenerateDataKey",
75
+ "kms:GenerateDataKeyWithoutPlaintext",
76
+ "s3:GetObject",
77
+ "s3:ListBucket",
78
+ "ssm:GetParameter"
79
+ ]
66
80
  }
67
81
  ],
68
82
  "conditionKeys": [
69
83
  "aws:RequestTag/${TagKey}",
70
84
  "aws:TagKeys"
71
85
  ],
72
- "dependentActions": [
73
- "ecr:DescribeImages",
74
- "ecr:DescribeRepositories",
75
- "iam:CreateServiceLinkedRole",
76
- "imagebuilder:GetComponent",
77
- "imagebuilder:GetImage",
78
- "imagebuilder:TagResource",
79
- "kms:Encrypt",
80
- "kms:GenerateDataKey",
81
- "kms:GenerateDataKeyWithoutPlaintext"
82
- ]
86
+ "dependentActions": []
83
87
  },
84
88
  "createdistributionconfiguration": {
85
89
  "name": "CreateDistributionConfiguration",
@@ -90,17 +94,21 @@
90
94
  "name": "distributionConfiguration",
91
95
  "required": true,
92
96
  "conditionKeys": [],
93
- "dependentActions": []
97
+ "dependentActions": [
98
+ "ec2:CreateLaunchTemplateVersion",
99
+ "ec2:DescribeLaunchTemplates",
100
+ "ec2:ModifyLaunchTemplate",
101
+ "imagebuilder:TagResource",
102
+ "s3:ListBucket",
103
+ "ssm:GetParameter"
104
+ ]
94
105
  }
95
106
  ],
96
107
  "conditionKeys": [
97
108
  "aws:RequestTag/${TagKey}",
98
109
  "aws:TagKeys"
99
110
  ],
100
- "dependentActions": [
101
- "iam:CreateServiceLinkedRole",
102
- "imagebuilder:TagResource"
103
- ]
111
+ "dependentActions": []
104
112
  },
105
113
  "createimage": {
106
114
  "name": "CreateImage",
@@ -111,23 +119,26 @@
111
119
  "name": "image",
112
120
  "required": true,
113
121
  "conditionKeys": [],
114
- "dependentActions": []
122
+ "dependentActions": [
123
+ "ecr:BatchGetRepositoryScanningConfiguration",
124
+ "ecr:DescribeRepositories",
125
+ "iam:CreateServiceLinkedRole",
126
+ "iam:PassRole",
127
+ "imagebuilder:GetContainerRecipe",
128
+ "imagebuilder:GetDistributionConfiguration",
129
+ "imagebuilder:GetImageRecipe",
130
+ "imagebuilder:GetInfrastructureConfiguration",
131
+ "imagebuilder:GetWorkflow",
132
+ "imagebuilder:TagResource",
133
+ "inspector2:BatchGetAccountStatus"
134
+ ]
115
135
  }
116
136
  ],
117
137
  "conditionKeys": [
118
138
  "aws:RequestTag/${TagKey}",
119
139
  "aws:TagKeys"
120
140
  ],
121
- "dependentActions": [
122
- "iam:CreateServiceLinkedRole",
123
- "iam:PassRole",
124
- "imagebuilder:GetContainerRecipe",
125
- "imagebuilder:GetDistributionConfiguration",
126
- "imagebuilder:GetImageRecipe",
127
- "imagebuilder:GetInfrastructureConfiguration",
128
- "imagebuilder:GetWorkflow",
129
- "imagebuilder:TagResource"
130
- ]
141
+ "dependentActions": []
131
142
  },
132
143
  "createimagepipeline": {
133
144
  "name": "CreateImagePipeline",
@@ -138,23 +149,26 @@
138
149
  "name": "imagePipeline",
139
150
  "required": true,
140
151
  "conditionKeys": [],
141
- "dependentActions": []
152
+ "dependentActions": [
153
+ "ecr:BatchGetRepositoryScanningConfiguration",
154
+ "ecr:DescribeRepositories",
155
+ "iam:CreateServiceLinkedRole",
156
+ "iam:PassRole",
157
+ "imagebuilder:GetContainerRecipe",
158
+ "imagebuilder:GetDistributionConfiguration",
159
+ "imagebuilder:GetImageRecipe",
160
+ "imagebuilder:GetInfrastructureConfiguration",
161
+ "imagebuilder:GetWorkflow",
162
+ "imagebuilder:TagResource",
163
+ "inspector2:BatchGetAccountStatus"
164
+ ]
142
165
  }
143
166
  ],
144
167
  "conditionKeys": [
145
168
  "aws:RequestTag/${TagKey}",
146
169
  "aws:TagKeys"
147
170
  ],
148
- "dependentActions": [
149
- "iam:CreateServiceLinkedRole",
150
- "iam:PassRole",
151
- "imagebuilder:GetContainerRecipe",
152
- "imagebuilder:GetDistributionConfiguration",
153
- "imagebuilder:GetImageRecipe",
154
- "imagebuilder:GetInfrastructureConfiguration",
155
- "imagebuilder:GetWorkflow",
156
- "imagebuilder:TagResource"
157
- ]
171
+ "dependentActions": []
158
172
  },
159
173
  "createimagerecipe": {
160
174
  "name": "CreateImageRecipe",
@@ -165,20 +179,20 @@
165
179
  "name": "imageRecipe",
166
180
  "required": true,
167
181
  "conditionKeys": [],
168
- "dependentActions": []
182
+ "dependentActions": [
183
+ "ec2:DescribeImages",
184
+ "imagebuilder:GetComponent",
185
+ "imagebuilder:GetImage",
186
+ "imagebuilder:TagResource",
187
+ "ssm:GetParameter"
188
+ ]
169
189
  }
170
190
  ],
171
191
  "conditionKeys": [
172
192
  "aws:RequestTag/${TagKey}",
173
193
  "aws:TagKeys"
174
194
  ],
175
- "dependentActions": [
176
- "ec2:DescribeImages",
177
- "iam:CreateServiceLinkedRole",
178
- "imagebuilder:GetComponent",
179
- "imagebuilder:GetImage",
180
- "imagebuilder:TagResource"
181
- ]
195
+ "dependentActions": []
182
196
  },
183
197
  "createinfrastructureconfiguration": {
184
198
  "name": "CreateInfrastructureConfiguration",
@@ -189,23 +203,25 @@
189
203
  "name": "infrastructureConfiguration",
190
204
  "required": true,
191
205
  "conditionKeys": [],
192
- "dependentActions": []
206
+ "dependentActions": [
207
+ "ec2:DescribeAvailabilityZones",
208
+ "ec2:DescribeHosts",
209
+ "iam:PassRole",
210
+ "imagebuilder:TagResource",
211
+ "resource-groups:GetGroup",
212
+ "sns:Publish"
213
+ ]
193
214
  }
194
215
  ],
195
216
  "conditionKeys": [
196
217
  "aws:RequestTag/${TagKey}",
197
218
  "aws:TagKeys",
198
219
  "imagebuilder:CreatedResourceTagKeys",
199
- "imagebuilder:CreatedResourceTag/<key>",
220
+ "imagebuilder:CreatedResourceTag/${TagKey}",
200
221
  "imagebuilder:Ec2MetadataHttpTokens",
201
222
  "imagebuilder:StatusTopicArn"
202
223
  ],
203
- "dependentActions": [
204
- "iam:CreateServiceLinkedRole",
205
- "iam:PassRole",
206
- "imagebuilder:TagResource",
207
- "sns:Publish"
208
- ]
224
+ "dependentActions": []
209
225
  },
210
226
  "createlifecyclepolicy": {
211
227
  "name": "CreateLifecyclePolicy",
@@ -216,7 +232,10 @@
216
232
  "name": "lifecyclePolicy",
217
233
  "required": true,
218
234
  "conditionKeys": [],
219
- "dependentActions": []
235
+ "dependentActions": [
236
+ "iam:PassRole",
237
+ "imagebuilder:TagResource"
238
+ ]
220
239
  }
221
240
  ],
222
241
  "conditionKeys": [
@@ -224,10 +243,7 @@
224
243
  "aws:TagKeys",
225
244
  "imagebuilder:LifecyclePolicyResourceType"
226
245
  ],
227
- "dependentActions": [
228
- "iam:PassRole",
229
- "imagebuilder:TagResource"
230
- ]
246
+ "dependentActions": []
231
247
  },
232
248
  "createworkflow": {
233
249
  "name": "CreateWorkflow",
@@ -238,21 +254,21 @@
238
254
  "name": "workflow",
239
255
  "required": true,
240
256
  "conditionKeys": [],
241
- "dependentActions": []
257
+ "dependentActions": [
258
+ "imagebuilder:TagResource",
259
+ "kms:Encrypt",
260
+ "kms:GenerateDataKey",
261
+ "kms:GenerateDataKeyWithoutPlaintext",
262
+ "s3:GetObject",
263
+ "s3:ListBucket"
264
+ ]
242
265
  }
243
266
  ],
244
267
  "conditionKeys": [
245
268
  "aws:RequestTag/${TagKey}",
246
269
  "aws:TagKeys"
247
270
  ],
248
- "dependentActions": [
249
- "imagebuilder:TagResource",
250
- "kms:Encrypt",
251
- "kms:GenerateDataKey",
252
- "kms:GenerateDataKeyWithoutPlaintext",
253
- "s3:GetObject",
254
- "s3:ListBucket"
255
- ]
271
+ "dependentActions": []
256
272
  },
257
273
  "deletecomponent": {
258
274
  "name": "DeleteComponent",
@@ -478,9 +494,7 @@
478
494
  "dependentActions": []
479
495
  }
480
496
  ],
481
- "conditionKeys": [
482
- "aws:ResourceTag/${TagKey}"
483
- ],
497
+ "conditionKeys": [],
484
498
  "dependentActions": []
485
499
  },
486
500
  "getimagepipeline": {
@@ -648,7 +662,9 @@
648
662
  }
649
663
  ],
650
664
  "conditionKeys": [],
651
- "dependentActions": []
665
+ "dependentActions": [
666
+ "kms:Decrypt"
667
+ ]
652
668
  },
653
669
  "importcomponent": {
654
670
  "name": "ImportComponent",
@@ -659,20 +675,21 @@
659
675
  "name": "component",
660
676
  "required": true,
661
677
  "conditionKeys": [],
662
- "dependentActions": []
678
+ "dependentActions": [
679
+ "imagebuilder:TagResource",
680
+ "kms:Encrypt",
681
+ "kms:GenerateDataKey",
682
+ "kms:GenerateDataKeyWithoutPlaintext",
683
+ "s3:GetObject",
684
+ "s3:ListBucket"
685
+ ]
663
686
  }
664
687
  ],
665
688
  "conditionKeys": [
666
689
  "aws:RequestTag/${TagKey}",
667
690
  "aws:TagKeys"
668
691
  ],
669
- "dependentActions": [
670
- "iam:CreateServiceLinkedRole",
671
- "imagebuilder:TagResource",
672
- "kms:Encrypt",
673
- "kms:GenerateDataKey",
674
- "kms:GenerateDataKeyWithoutPlaintext"
675
- ]
692
+ "dependentActions": []
676
693
  },
677
694
  "importdiskimage": {
678
695
  "name": "ImportDiskImage",
@@ -683,22 +700,22 @@
683
700
  "name": "imageVersion",
684
701
  "required": true,
685
702
  "conditionKeys": [],
686
- "dependentActions": []
703
+ "dependentActions": [
704
+ "iam:CreateServiceLinkedRole",
705
+ "iam:PassRole",
706
+ "imagebuilder:GetInfrastructureConfiguration",
707
+ "imagebuilder:GetWorkflow",
708
+ "imagebuilder:TagResource",
709
+ "s3:GetObject",
710
+ "s3:ListBucket"
711
+ ]
687
712
  }
688
713
  ],
689
714
  "conditionKeys": [
690
715
  "aws:RequestTag/${TagKey}",
691
716
  "aws:TagKeys"
692
717
  ],
693
- "dependentActions": [
694
- "iam:CreateServiceLinkedRole",
695
- "iam:PassRole",
696
- "imagebuilder:GetInfrastructureConfiguration",
697
- "imagebuilder:GetWorkflow",
698
- "imagebuilder:TagResource",
699
- "s3:GetObject",
700
- "s3:ListBucket"
701
- ]
718
+ "dependentActions": []
702
719
  },
703
720
  "importvmimage": {
704
721
  "name": "ImportVmImage",
@@ -709,18 +726,19 @@
709
726
  "name": "imageVersion",
710
727
  "required": true,
711
728
  "conditionKeys": [],
712
- "dependentActions": []
729
+ "dependentActions": [
730
+ "ec2:DescribeImages",
731
+ "ec2:DescribeImportImageTasks",
732
+ "iam:CreateServiceLinkedRole",
733
+ "imagebuilder:TagResource"
734
+ ]
713
735
  }
714
736
  ],
715
737
  "conditionKeys": [
716
738
  "aws:RequestTag/${TagKey}",
717
739
  "aws:TagKeys"
718
740
  ],
719
- "dependentActions": [
720
- "ec2:DescribeImages",
721
- "ec2:DescribeImportImageTasks",
722
- "iam:CreateServiceLinkedRole"
723
- ]
741
+ "dependentActions": []
724
742
  },
725
743
  "listcomponentbuildversions": {
726
744
  "name": "ListComponentBuildVersions",
@@ -728,7 +746,7 @@
728
746
  "accessLevel": "List",
729
747
  "resourceTypes": [
730
748
  {
731
- "name": "componentVersion",
749
+ "name": "allComponentBuildVersions",
732
750
  "required": true,
733
751
  "conditionKeys": [],
734
752
  "dependentActions": []
@@ -767,7 +785,7 @@
767
785
  "accessLevel": "List",
768
786
  "resourceTypes": [
769
787
  {
770
- "name": "imageVersion",
788
+ "name": "allImageBuildVersions",
771
789
  "required": true,
772
790
  "conditionKeys": [],
773
791
  "dependentActions": []
@@ -788,9 +806,7 @@
788
806
  "dependentActions": []
789
807
  }
790
808
  ],
791
- "conditionKeys": [
792
- "aws:ResourceTag/${TagKey}"
793
- ],
809
+ "conditionKeys": [],
794
810
  "dependentActions": []
795
811
  },
796
812
  "listimagepipelineimages": {
@@ -936,73 +952,55 @@
936
952
  {
937
953
  "name": "component",
938
954
  "required": false,
939
- "conditionKeys": [
940
- "aws:ResourceTag/${TagKey}"
941
- ],
955
+ "conditionKeys": [],
942
956
  "dependentActions": []
943
957
  },
944
958
  {
945
959
  "name": "containerRecipe",
946
960
  "required": false,
947
- "conditionKeys": [
948
- "aws:ResourceTag/${TagKey}"
949
- ],
961
+ "conditionKeys": [],
950
962
  "dependentActions": []
951
963
  },
952
964
  {
953
965
  "name": "distributionConfiguration",
954
966
  "required": false,
955
- "conditionKeys": [
956
- "aws:ResourceTag/${TagKey}"
957
- ],
967
+ "conditionKeys": [],
958
968
  "dependentActions": []
959
969
  },
960
970
  {
961
971
  "name": "image",
962
972
  "required": false,
963
- "conditionKeys": [
964
- "aws:ResourceTag/${TagKey}"
965
- ],
973
+ "conditionKeys": [],
966
974
  "dependentActions": []
967
975
  },
968
976
  {
969
977
  "name": "imagePipeline",
970
978
  "required": false,
971
- "conditionKeys": [
972
- "aws:ResourceTag/${TagKey}"
973
- ],
979
+ "conditionKeys": [],
974
980
  "dependentActions": []
975
981
  },
976
982
  {
977
983
  "name": "imageRecipe",
978
984
  "required": false,
979
- "conditionKeys": [
980
- "aws:ResourceTag/${TagKey}"
981
- ],
985
+ "conditionKeys": [],
982
986
  "dependentActions": []
983
987
  },
984
988
  {
985
989
  "name": "infrastructureConfiguration",
986
990
  "required": false,
987
- "conditionKeys": [
988
- "aws:ResourceTag/${TagKey}"
989
- ],
991
+ "conditionKeys": [],
990
992
  "dependentActions": []
991
993
  },
992
994
  {
993
995
  "name": "lifecyclePolicy",
994
996
  "required": false,
995
- "conditionKeys": [
996
- "aws:ResourceTag/${TagKey}"
997
- ],
997
+ "conditionKeys": [],
998
998
  "dependentActions": []
999
999
  },
1000
1000
  {
1001
1001
  "name": "workflow",
1002
1002
  "required": false,
1003
- "conditionKeys": [
1004
- "aws:ResourceTag/${TagKey}"
1005
- ],
1003
+ "conditionKeys": [],
1006
1004
  "dependentActions": []
1007
1005
  }
1008
1006
  ],
@@ -1023,7 +1021,7 @@
1023
1021
  "accessLevel": "List",
1024
1022
  "resourceTypes": [
1025
1023
  {
1026
- "name": "workflowVersion",
1024
+ "name": "allWorkflowBuildVersions",
1027
1025
  "required": true,
1028
1026
  "conditionKeys": [],
1029
1027
  "dependentActions": []
@@ -1060,7 +1058,9 @@
1060
1058
  }
1061
1059
  ],
1062
1060
  "conditionKeys": [],
1063
- "dependentActions": []
1061
+ "dependentActions": [
1062
+ "kms:Decrypt"
1063
+ ]
1064
1064
  },
1065
1065
  "listworkflows": {
1066
1066
  "name": "ListWorkflows",
@@ -1160,14 +1160,18 @@
1160
1160
  "name": "imagePipeline",
1161
1161
  "required": true,
1162
1162
  "conditionKeys": [],
1163
- "dependentActions": []
1163
+ "dependentActions": [
1164
+ "iam:CreateServiceLinkedRole",
1165
+ "imagebuilder:GetImagePipeline",
1166
+ "imagebuilder:TagResource"
1167
+ ]
1164
1168
  }
1165
1169
  ],
1166
- "conditionKeys": [],
1167
- "dependentActions": [
1168
- "iam:CreateServiceLinkedRole",
1169
- "imagebuilder:GetImagePipeline"
1170
- ]
1170
+ "conditionKeys": [
1171
+ "aws:RequestTag/${TagKey}",
1172
+ "aws:TagKeys"
1173
+ ],
1174
+ "dependentActions": []
1171
1175
  },
1172
1176
  "startresourcestateupdate": {
1173
1177
  "name": "StartResourceStateUpdate",
@@ -1192,95 +1196,62 @@
1192
1196
  {
1193
1197
  "name": "component",
1194
1198
  "required": false,
1195
- "conditionKeys": [
1196
- "aws:TagKeys",
1197
- "aws:RequestTag/${TagKey}",
1198
- "aws:ResourceTag/${TagKey}"
1199
- ],
1199
+ "conditionKeys": [],
1200
1200
  "dependentActions": []
1201
1201
  },
1202
1202
  {
1203
1203
  "name": "containerRecipe",
1204
1204
  "required": false,
1205
- "conditionKeys": [
1206
- "aws:TagKeys",
1207
- "aws:RequestTag/${TagKey}",
1208
- "aws:ResourceTag/${TagKey}"
1209
- ],
1205
+ "conditionKeys": [],
1210
1206
  "dependentActions": []
1211
1207
  },
1212
1208
  {
1213
1209
  "name": "distributionConfiguration",
1214
1210
  "required": false,
1215
- "conditionKeys": [
1216
- "aws:TagKeys",
1217
- "aws:RequestTag/${TagKey}",
1218
- "aws:ResourceTag/${TagKey}"
1219
- ],
1211
+ "conditionKeys": [],
1220
1212
  "dependentActions": []
1221
1213
  },
1222
1214
  {
1223
1215
  "name": "image",
1224
1216
  "required": false,
1225
- "conditionKeys": [
1226
- "aws:TagKeys",
1227
- "aws:RequestTag/${TagKey}",
1228
- "aws:ResourceTag/${TagKey}"
1229
- ],
1217
+ "conditionKeys": [],
1230
1218
  "dependentActions": []
1231
1219
  },
1232
1220
  {
1233
1221
  "name": "imagePipeline",
1234
1222
  "required": false,
1235
- "conditionKeys": [
1236
- "aws:TagKeys",
1237
- "aws:RequestTag/${TagKey}",
1238
- "aws:ResourceTag/${TagKey}"
1239
- ],
1223
+ "conditionKeys": [],
1240
1224
  "dependentActions": []
1241
1225
  },
1242
1226
  {
1243
1227
  "name": "imageRecipe",
1244
1228
  "required": false,
1245
- "conditionKeys": [
1246
- "aws:TagKeys",
1247
- "aws:RequestTag/${TagKey}",
1248
- "aws:ResourceTag/${TagKey}"
1249
- ],
1229
+ "conditionKeys": [],
1250
1230
  "dependentActions": []
1251
1231
  },
1252
1232
  {
1253
1233
  "name": "infrastructureConfiguration",
1254
1234
  "required": false,
1255
- "conditionKeys": [
1256
- "aws:TagKeys",
1257
- "aws:RequestTag/${TagKey}",
1258
- "aws:ResourceTag/${TagKey}"
1259
- ],
1235
+ "conditionKeys": [],
1260
1236
  "dependentActions": []
1261
1237
  },
1262
1238
  {
1263
1239
  "name": "lifecyclePolicy",
1264
1240
  "required": false,
1265
- "conditionKeys": [
1266
- "aws:TagKeys",
1267
- "aws:RequestTag/${TagKey}",
1268
- "aws:ResourceTag/${TagKey}"
1269
- ],
1241
+ "conditionKeys": [],
1270
1242
  "dependentActions": []
1271
1243
  },
1272
1244
  {
1273
1245
  "name": "workflow",
1274
1246
  "required": false,
1275
- "conditionKeys": [
1276
- "aws:TagKeys",
1277
- "aws:RequestTag/${TagKey}",
1278
- "aws:ResourceTag/${TagKey}"
1279
- ],
1247
+ "conditionKeys": [],
1280
1248
  "dependentActions": []
1281
1249
  }
1282
1250
  ],
1283
- "conditionKeys": [],
1251
+ "conditionKeys": [
1252
+ "aws:TagKeys",
1253
+ "aws:RequestTag/${TagKey}"
1254
+ ],
1284
1255
  "dependentActions": []
1285
1256
  },
1286
1257
  "untagresource": {
@@ -1291,86 +1262,61 @@
1291
1262
  {
1292
1263
  "name": "component",
1293
1264
  "required": false,
1294
- "conditionKeys": [
1295
- "aws:ResourceTag/${TagKey}",
1296
- "aws:TagKeys"
1297
- ],
1265
+ "conditionKeys": [],
1298
1266
  "dependentActions": []
1299
1267
  },
1300
1268
  {
1301
1269
  "name": "containerRecipe",
1302
1270
  "required": false,
1303
- "conditionKeys": [
1304
- "aws:ResourceTag/${TagKey}",
1305
- "aws:TagKeys"
1306
- ],
1271
+ "conditionKeys": [],
1307
1272
  "dependentActions": []
1308
1273
  },
1309
1274
  {
1310
1275
  "name": "distributionConfiguration",
1311
1276
  "required": false,
1312
- "conditionKeys": [
1313
- "aws:ResourceTag/${TagKey}",
1314
- "aws:TagKeys"
1315
- ],
1277
+ "conditionKeys": [],
1316
1278
  "dependentActions": []
1317
1279
  },
1318
1280
  {
1319
1281
  "name": "image",
1320
1282
  "required": false,
1321
- "conditionKeys": [
1322
- "aws:ResourceTag/${TagKey}",
1323
- "aws:TagKeys"
1324
- ],
1283
+ "conditionKeys": [],
1325
1284
  "dependentActions": []
1326
1285
  },
1327
1286
  {
1328
1287
  "name": "imagePipeline",
1329
1288
  "required": false,
1330
- "conditionKeys": [
1331
- "aws:ResourceTag/${TagKey}",
1332
- "aws:TagKeys"
1333
- ],
1289
+ "conditionKeys": [],
1334
1290
  "dependentActions": []
1335
1291
  },
1336
1292
  {
1337
1293
  "name": "imageRecipe",
1338
1294
  "required": false,
1339
- "conditionKeys": [
1340
- "aws:ResourceTag/${TagKey}",
1341
- "aws:TagKeys"
1342
- ],
1295
+ "conditionKeys": [],
1343
1296
  "dependentActions": []
1344
1297
  },
1345
1298
  {
1346
1299
  "name": "infrastructureConfiguration",
1347
1300
  "required": false,
1348
- "conditionKeys": [
1349
- "aws:ResourceTag/${TagKey}",
1350
- "aws:TagKeys"
1351
- ],
1301
+ "conditionKeys": [],
1352
1302
  "dependentActions": []
1353
1303
  },
1354
1304
  {
1355
1305
  "name": "lifecyclePolicy",
1356
1306
  "required": false,
1357
- "conditionKeys": [
1358
- "aws:ResourceTag/${TagKey}",
1359
- "aws:TagKeys"
1360
- ],
1307
+ "conditionKeys": [],
1361
1308
  "dependentActions": []
1362
1309
  },
1363
1310
  {
1364
1311
  "name": "workflow",
1365
1312
  "required": false,
1366
- "conditionKeys": [
1367
- "aws:ResourceTag/${TagKey}",
1368
- "aws:TagKeys"
1369
- ],
1313
+ "conditionKeys": [],
1370
1314
  "dependentActions": []
1371
1315
  }
1372
1316
  ],
1373
- "conditionKeys": [],
1317
+ "conditionKeys": [
1318
+ "aws:TagKeys"
1319
+ ],
1374
1320
  "dependentActions": []
1375
1321
  },
1376
1322
  "updatedistributionconfiguration": {
@@ -1386,7 +1332,13 @@
1386
1332
  }
1387
1333
  ],
1388
1334
  "conditionKeys": [],
1389
- "dependentActions": []
1335
+ "dependentActions": [
1336
+ "ec2:CreateLaunchTemplateVersion",
1337
+ "ec2:DescribeLaunchTemplates",
1338
+ "ec2:ModifyLaunchTemplate",
1339
+ "s3:ListBucket",
1340
+ "ssm:GetParameter"
1341
+ ]
1390
1342
  },
1391
1343
  "updateimagepipeline": {
1392
1344
  "name": "UpdateImagePipeline",
@@ -1402,13 +1354,16 @@
1402
1354
  ],
1403
1355
  "conditionKeys": [],
1404
1356
  "dependentActions": [
1357
+ "ecr:BatchGetRepositoryScanningConfiguration",
1358
+ "ecr:DescribeRepositories",
1405
1359
  "iam:CreateServiceLinkedRole",
1406
1360
  "iam:PassRole",
1407
1361
  "imagebuilder:GetContainerRecipe",
1408
1362
  "imagebuilder:GetDistributionConfiguration",
1409
1363
  "imagebuilder:GetImageRecipe",
1410
1364
  "imagebuilder:GetInfrastructureConfiguration",
1411
- "imagebuilder:GetWorkflow"
1365
+ "imagebuilder:GetWorkflow",
1366
+ "inspector2:BatchGetAccountStatus"
1412
1367
  ]
1413
1368
  },
1414
1369
  "updateinfrastructureconfiguration": {
@@ -1420,20 +1375,22 @@
1420
1375
  "name": "infrastructureConfiguration",
1421
1376
  "required": true,
1422
1377
  "conditionKeys": [],
1423
- "dependentActions": []
1378
+ "dependentActions": [
1379
+ "ec2:DescribeAvailabilityZones",
1380
+ "ec2:DescribeHosts",
1381
+ "iam:PassRole",
1382
+ "resource-groups:GetGroup",
1383
+ "sns:Publish"
1384
+ ]
1424
1385
  }
1425
1386
  ],
1426
1387
  "conditionKeys": [
1427
- "aws:ResourceTag/${TagKey}",
1428
1388
  "imagebuilder:CreatedResourceTagKeys",
1429
- "imagebuilder:CreatedResourceTag/<key>",
1389
+ "imagebuilder:CreatedResourceTag/${TagKey}",
1430
1390
  "imagebuilder:Ec2MetadataHttpTokens",
1431
1391
  "imagebuilder:StatusTopicArn"
1432
1392
  ],
1433
- "dependentActions": [
1434
- "iam:PassRole",
1435
- "sns:Publish"
1436
- ]
1393
+ "dependentActions": []
1437
1394
  },
1438
1395
  "updatelifecyclepolicy": {
1439
1396
  "name": "UpdateLifecyclePolicy",
@@ -1444,14 +1401,14 @@
1444
1401
  "name": "lifecyclePolicy",
1445
1402
  "required": true,
1446
1403
  "conditionKeys": [],
1447
- "dependentActions": []
1404
+ "dependentActions": [
1405
+ "iam:PassRole"
1406
+ ]
1448
1407
  }
1449
1408
  ],
1450
1409
  "conditionKeys": [
1451
1410
  "imagebuilder:LifecyclePolicyResourceType"
1452
1411
  ],
1453
- "dependentActions": [
1454
- "iam:PassRole"
1455
- ]
1412
+ "dependentActions": []
1456
1413
  }
1457
1414
  }