iamdata 0.1.202504261__py3-none-any.whl → 0.1.202511181__py3-none-any.whl

iamdata/data/actions/s3express.json

@@ -20,7 +20,9 @@
       "s3express:ResourceAccount",
       "s3express:signatureversion",
       "s3express:TlsVersion",
-      "s3express:x-amz-content-sha256"
+      "s3express:x-amz-content-sha256",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -42,20 +44,30 @@
       "s3express:ResourceAccount",
       "s3express:signatureversion",
       "s3express:TlsVersion",
-      "s3express:x-amz-content-sha256"
+      "s3express:x-amz-content-sha256",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "createsession": {
     "name": "CreateSession",
-    "description": "Grants permission to Create Session token which is used for object APIs such as PutObject, GetObject, ect",
-    "accessLevel": "Read",
+    "description": "Grants permission to Create Session token which is used for object APIs such as PutObject, GetObject, etc",
+    "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "bucket",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "accesspoint",
+        "required": false,
+        "conditionKeys": [
+          "s3express:Permissions"
+        ],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -68,7 +80,8 @@
       "s3express:x-amz-content-sha256",
       "s3express:x-amz-server-side-encryption",
       "s3express:x-amz-server-side-encryption-aws-kms-key-id",
-      "s3express:AllAccessRestrictedToLocalZoneGroup"
+      "s3express:AllAccessRestrictedToLocalZoneGroup",
+      "s3express:Permissions"
     ],
     "dependentActions": []
   },
@@ -190,7 +203,14 @@
     "name": "GetAccessPoint",
     "description": "Grants permission to return configuration information about the specified access point",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "s3express:DataAccessPointAccount",
       "s3express:DataAccessPointArn",
@@ -342,6 +362,33 @@
     ],
     "dependentActions": []
   },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to lists all of the tags for a specified resource",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "bucket",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "putaccesspointpolicy": {
     "name": "PutAccessPointPolicy",
     "description": "Grants permission to associate an access policy with a specified access point",
@@ -452,5 +499,62 @@
       "s3express:x-amz-content-sha256"
     ],
     "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to create a new user-defined tag or update an existing tag",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "bucket",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove the specified user-defined tags from an S3 resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "bucket",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
   }
 }

iamdata/data/actions/s3tables.json

@@ -29,7 +29,11 @@
     "conditionKeys": [
       "s3tables:namespace",
       "s3tables:SSEAlgorithm",
-      "s3tables:KMSKeyArn"
+      "s3tables:KMSKeyArn",
+      "s3tables:TableBucketTag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -47,7 +51,11 @@
     ],
     "conditionKeys": [
       "s3tables:SSEAlgorithm",
-      "s3tables:KMSKeyArn"
+      "s3tables:KMSKeyArn",
+      "s3tables:TableBucketTag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -393,6 +401,30 @@
     ],
     "dependentActions": []
   },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list the tag for a S3Table's resource",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "TableBucket",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "s3tables:TableBucketTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "puttablebucketencryption": {
     "name": "PutTableBucketEncryption",
     "description": "Grants permission to put or overwrite encryption configuration on a table bucket",
@@ -534,6 +566,57 @@
     ],
     "dependentActions": []
   },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to tag a S3Table's resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "Table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "TableBucket",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "s3tables:TableBucketTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to untag a S3Table's resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "Table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "TableBucket",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:ResourceTag/${TagKey}",
+      "s3tables:TableBucketTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "updatetablemetadatalocation": {
     "name": "UpdateTableMetadataLocation",
     "description": "Grants permission to update the metadata location of a table",

iamdata/data/actions/s3vectors.json

@@ -0,0 +1,242 @@
+{
+  "createindex": {
+    "name": "CreateIndex",
+    "description": "Grants permission to create a new vector index within a specified vector bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createvectorbucket": {
+    "name": "CreateVectorBucket",
+    "description": "Grants permission to create a new vector bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3vectors:sseType",
+      "s3vectors:kmsKeyArn"
+    ],
+    "dependentActions": []
+  },
+  "deleteindex": {
+    "name": "DeleteIndex",
+    "description": "Grants permission to delete a specified vector index",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletevectorbucket": {
+    "name": "DeleteVectorBucket",
+    "description": "Grants permission to delete a specified vector bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletevectorbucketpolicy": {
+    "name": "DeleteVectorBucketPolicy",
+    "description": "Grants permission to delete the IAM resource policy from a specified vector bucket",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletevectors": {
+    "name": "DeleteVectors",
+    "description": "Grants permission to delete a batch of vectors from a specified vector index",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getindex": {
+    "name": "GetIndex",
+    "description": "Grants permission to get the attributes of a specified vector index",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getvectorbucket": {
+    "name": "GetVectorBucket",
+    "description": "Grants permission to get the attributes of a specified vector bucket",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getvectorbucketpolicy": {
+    "name": "GetVectorBucketPolicy",
+    "description": "Grants permission to get the IAM resource policy for a specific vector bucket",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getvectors": {
+    "name": "GetVectors",
+    "description": "Grants permission to get a batch of vectors by their vector keys",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listindexes": {
+    "name": "ListIndexes",
+    "description": "Grants permission to get a paginated list of all indexes in a specified vector bucket",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listvectorbuckets": {
+    "name": "ListVectorBuckets",
+    "description": "Grants permission to get a paginated list of all vector buckets in the account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listvectors": {
+    "name": "ListVectors",
+    "description": "Grants permission to get a paginated list of all vectors in a specified vector index",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "s3vectors:GetVectors"
+    ]
+  },
+  "putvectorbucketpolicy": {
+    "name": "PutVectorBucketPolicy",
+    "description": "Grants permission to add an IAM resource policy to a specified vector bucket",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putvectors": {
+    "name": "PutVectors",
+    "description": "Grants permission to add a batch of vectors to a specified vector index",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "queryvectors": {
+    "name": "QueryVectors",
+    "description": "Grants permission to find approximate nearest neighbors within a specified search vector index for a given query vector",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "s3vectors:GetVectors"
+    ]
+  }
+}