iamdata 0.1.202504261__py3-none-any.whl → 0.1.202511181__py3-none-any.whl

iamdata/data/actions/network-firewall.json

@@ -1,4 +1,34 @@
 {
+  "acceptnetworkfirewalltransitgatewayattachment": {
+    "name": "AcceptNetworkFirewallTransitGatewayAttachment",
+    "description": "Grants permission to accept pending Network Firewall attachments on a transit gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Firewall",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "associateavailabilityzones": {
+    "name": "AssociateAvailabilityZones",
+    "description": "Grants permission to associate availability zones to a firewall",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Firewall",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "associatefirewallpolicy": {
     "name": "AssociateFirewallPolicy",
     "description": "Grants permission to create an association between a firewall policy and a firewall",
@@ -141,6 +171,32 @@
     ],
     "dependentActions": []
   },
+  "createvpcendpointassociation": {
+    "name": "CreateVpcEndpointAssociation",
+    "description": "Grants permission to create an AWS Network Firewall vpc endpoint association",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Firewall",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:CreateServiceLinkedRole"
+        ]
+      },
+      {
+        "name": "VpcEndpointAssociation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "deletefirewall": {
     "name": "DeleteFirewall",
     "description": "Grants permission to delete a firewall",
@@ -171,11 +227,32 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletenetworkfirewalltransitgatewayattachment": {
+    "name": "DeleteNetworkFirewallTransitGatewayAttachment",
+    "description": "Grants permission to delete Network Firewall attachments on a transit gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Firewall",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteresourcepolicy": {
     "name": "DeleteResourcePolicy",
-    "description": "Grants permission to delete a resource policy for a firewall policy or rule group",
+    "description": "Grants permission to delete a resource policy for a firewall policy or rule group or firewall",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "Firewall",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "FirewallPolicy",
         "required": false,
@@ -234,6 +311,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletevpcendpointassociation": {
+    "name": "DeleteVpcEndpointAssociation",
+    "description": "Grants permission to delete a vpc endpoint association",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "VpcEndpointAssociation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describefirewall": {
     "name": "DescribeFirewall",
     "description": "Grants permission to retrieve the data objects that define a firewall",
@@ -249,6 +341,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describefirewallmetadata": {
+    "name": "DescribeFirewallMetadata",
+    "description": "Grants permission to retrieve the high-level information about a firewall",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Firewall",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describefirewallpolicy": {
     "name": "DescribeFirewallPolicy",
     "description": "Grants permission to retrieve the data objects that define a firewall policy",
@@ -317,9 +424,15 @@
   },
   "describeresourcepolicy": {
     "name": "DescribeResourcePolicy",
-    "description": "Grants permission to describe a resource policy for a firewall policy or rule group",
+    "description": "Grants permission to describe a resource policy for a firewall policy or rule group or firewall",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "Firewall",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "FirewallPolicy",
         "required": false,
@@ -384,6 +497,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describerulegroupsummary": {
+    "name": "DescribeRuleGroupSummary",
+    "description": "Grants permission to retrieve the summary information about a rule group",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "StatefulRuleGroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "StatelessRuleGroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describetlsinspectionconfiguration": {
     "name": "DescribeTLSInspectionConfiguration",
     "description": "Grants permission to retrieve the data objects that define a tls inspection configuration",
@@ -399,6 +533,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describevpcendpointassociation": {
+    "name": "DescribeVpcEndpointAssociation",
+    "description": "Grants permission to retrieve the data objects that define a vpc endpoint association",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "VpcEndpointAssociation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disassociateavailabilityzones": {
+    "name": "DisassociateAvailabilityZones",
+    "description": "Grants permission to disassociate availability zones to a firewall",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Firewall",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disassociatesubnets": {
     "name": "DisassociateSubnets",
     "description": "Grants permission to disassociate VPC subnets from a firewall",
@@ -561,6 +725,27 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "VpcEndpointAssociation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listvpcendpointassociations": {
+    "name": "ListVpcEndpointAssociations",
+    "description": "Grants permission to retrieve the metadata for vpc endpoint associations",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "VpcEndpointAssociation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -568,9 +753,15 @@
   },
   "putresourcepolicy": {
     "name": "PutResourcePolicy",
-    "description": "Grants permission to put a resource policy for a firewall policy or rule group",
+    "description": "Grants permission to put a resource policy for a firewall policy or rule group or firewall",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "Firewall",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "FirewallPolicy",
         "required": false,
@@ -593,6 +784,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "rejectnetworkfirewalltransitgatewayattachment": {
+    "name": "RejectNetworkFirewallTransitGatewayAttachment",
+    "description": "Grants permission to reject pending Network Firewall attachments on a transit gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Firewall",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startanalysisreport": {
     "name": "StartAnalysisReport",
     "description": "Grants permission to start an analysis report on a firewall",
@@ -672,6 +878,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "VpcEndpointAssociation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -714,6 +926,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "VpcEndpointAssociation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -721,6 +939,21 @@
     ],
     "dependentActions": []
   },
+  "updateavailabilityzonechangeprotection": {
+    "name": "UpdateAvailabilityZoneChangeProtection",
+    "description": "Grants permission to add or remove availability zone change protection for a firewall",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Firewall",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatefirewallanalysissettings": {
     "name": "UpdateFirewallAnalysisSettings",
     "description": "Grants permission to modify firewall analysis settings of a firewall",

iamdata/data/actions/network-security-director.json

@@ -0,0 +1,74 @@
+{
+  "getfinding": {
+    "name": "GetFinding",
+    "description": "Grants permission to get a finding",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getnetworksecurityscan": {
+    "name": "GetNetworkSecurityScan",
+    "description": "Grants permission to get the status of network security scan",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getresource": {
+    "name": "GetResource",
+    "description": "Grants permission to get a resource",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listfindings": {
+    "name": "ListFindings",
+    "description": "Grants permission to list findings",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listinsights": {
+    "name": "ListInsights",
+    "description": "Grants permission to list insights about the latest network security scan",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listremediations": {
+    "name": "ListRemediations",
+    "description": "Grants permission to list remediations for a finding",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listresources": {
+    "name": "ListResources",
+    "description": "Grants permission to list resources",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startnetworksecurityscan": {
+    "name": "StartNetworkSecurityScan",
+    "description": "Grants permission to start a network security scan",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatefinding": {
+    "name": "UpdateFinding",
+    "description": "Grants permission to update the status of a finding",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

iamdata/data/actions/notifications.json

@@ -44,6 +44,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "associateorganizationalunit": {
+    "name": "AssociateOrganizationalUnit",
+    "description": "Grants permission to associate an Organizational Unit to a particular Notification Configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NotificationConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createeventrule": {
     "name": "CreateEventRule",
     "description": "Grants permission to create a new EventRule, associating it with a NotificationConfiguration",
@@ -104,7 +119,7 @@
   "disablenotificationsaccessfororganization": {
     "name": "DisableNotificationsAccessForOrganization",
     "description": "Grants permission to disable Service Trust for AWS User Notifications",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": [
@@ -156,10 +171,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disassociateorganizationalunit": {
+    "name": "DisassociateOrganizationalUnit",
+    "description": "Grants permission to disassociate an Organizational Unit to a particular Notification Configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NotificationConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "enablenotificationsaccessfororganization": {
     "name": "EnableNotificationsAccessForOrganization",
     "description": "Grants permission to enable Service Trust for AWS User Notifications",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": [
@@ -336,6 +366,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listmemberaccounts": {
+    "name": "ListMemberAccounts",
+    "description": "Grants permission to list Member Accounts for a Notification Configuration",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NotificationConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listnotificationconfigurations": {
     "name": "ListNotificationConfigurations",
     "description": "Grants permission to list NotificationConfigurations",
@@ -360,6 +405,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listorganizationalunits": {
+    "name": "ListOrganizationalUnits",
+    "description": "Grants permission to list Organizational Units for a Notification Configuration",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NotificationConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to get tags for a resource",