iamdata 0.1.202504261__py3-none-any.whl → 0.1.202511181__py3-none-any.whl

iamdata/data/actions/securityhub.json

@@ -175,10 +175,17 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "securityhub:ASFFSyntaxPath/${ASFFSyntaxPath}"
+      "securityhub:ASFFSyntaxPath/${ASFFSyntaxPath}",
+      "securityhub:OCSFSyntaxPath/${OCSFSyntaxPath}"
     ],
     "dependentActions": []
   },
@@ -192,6 +199,14 @@
       "securityhub:UpdateStandardsControl"
     ]
   },
+  "connectorregistrationsv2": {
+    "name": "ConnectorRegistrationsV2",
+    "description": "Grants permission to complete the OAuth 2.0 authorization code flow based on input parameters",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createactiontarget": {
     "name": "CreateActionTarget",
     "description": "Grants permission to create custom actions in Security Hub",
@@ -207,6 +222,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createaggregatorv2": {
+    "name": "CreateAggregatorV2",
+    "description": "Grants permission to create an aggregatorV2, which configures data aggregation across Regions",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createautomationrule": {
     "name": "CreateAutomationRule",
     "description": "Grants permission to create an automation rule based on input parameters",
@@ -218,6 +241,17 @@
     ],
     "dependentActions": []
   },
+  "createautomationrulev2": {
+    "name": "CreateAutomationRuleV2",
+    "description": "Grants permission to create an automation rule V2 based on input parameters",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createconfigurationpolicy": {
     "name": "CreateConfigurationPolicy",
     "description": "Grants permission to create a configuration policy to manage organization member settings in Security Hub",
@@ -229,6 +263,17 @@
     ],
     "dependentActions": []
   },
+  "createconnectorv2": {
+    "name": "CreateConnectorV2",
+    "description": "Grants permission to create a connector V2 based on input parameters",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createfindingaggregator": {
     "name": "CreateFindingAggregator",
     "description": "Grants permission to create a finding aggregator, which contains the cross-Region finding aggregation configuration",
@@ -267,6 +312,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createticketv2": {
+    "name": "CreateTicketV2",
+    "description": "Grants permission to create ticket for a selected OCSF finding",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connectorv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "declineinvitations": {
     "name": "DeclineInvitations",
     "description": "Grants permission to decline Security Hub invitations to become a member account",
@@ -297,6 +357,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteaggregatorv2": {
+    "name": "DeleteAggregatorV2",
+    "description": "Grants permission to delete an aggregatorV2, which configures data aggregation across Regions",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "aggregatorv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteautomationrulev2": {
+    "name": "DeleteAutomationRuleV2",
+    "description": "Grants permission to delete an automation rule V2 in Security Hub",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "automation-rulev2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteconfigurationpolicy": {
     "name": "DeleteConfigurationPolicy",
     "description": "Grants permission to delete an existing configuration policy",
@@ -312,6 +402,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteconnectorv2": {
+    "name": "DeleteConnectorV2",
+    "description": "Grants permission to delete a connector V2 in Security Hub",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connectorv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletefindingaggregator": {
     "name": "DeleteFindingAggregator",
     "description": "Grants permission to delete a finding aggregator, which disables finding aggregation across Regions",
@@ -432,6 +537,29 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeproductsv2": {
+    "name": "DescribeProductsV2",
+    "description": "Grants permission to retrieve information about the available Security Hub V2 product integrations",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describesecurityhubv2": {
+    "name": "DescribeSecurityHubV2",
+    "description": "Grants permission to retrieve information about the hub V2 resource in your account",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describestandards": {
     "name": "DescribeStandards",
     "description": "Grants permission to retrieve information about Security Hub standards",
@@ -491,7 +619,9 @@
     ],
     "conditionKeys": [],
     "dependentActions": [
-      "organizations:DescribeOrganization"
+      "organizations:DeregisterDelegatedAdministrator",
+      "organizations:DescribeOrganization",
+      "organizations:ListDelegatedAdministrators"
     ]
   },
   "disablesecurityhub": {
@@ -509,6 +639,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disablesecurityhubv2": {
+    "name": "DisableSecurityHubV2",
+    "description": "Grants permission to disable Security Hub V2",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disassociatefromadministratoraccount": {
     "name": "DisassociateFromAdministratorAccount",
     "description": "Grants permission to a Security Hub member account to disassociate from the associated administrator account",
@@ -585,6 +723,8 @@
     "dependentActions": [
       "organizations:DescribeOrganization",
       "organizations:EnableAWSServiceAccess",
+      "organizations:ListAWSServiceAccessForOrganization",
+      "organizations:ListDelegatedAdministrators",
       "organizations:RegisterDelegatedAdministrator"
     ]
   },
@@ -606,10 +746,21 @@
     ],
     "dependentActions": []
   },
+  "enablesecurityhubv2": {
+    "name": "EnableSecurityHubV2",
+    "description": "Grants permission to enable Security Hub V2",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "getadhocinsightresults": {
     "name": "GetAdhocInsightResults",
     "isPermissionOnly": true,
-    "description": "Grants permission to retrieve insight results by providing a set of filters instead of an insight ARN",
+    "description": "Grants permission to retrieve aggregated statistical data about the findings",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -617,6 +768,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -637,6 +794,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getaggregatorv2": {
+    "name": "GetAggregatorV2",
+    "description": "Grants permission to retrieve details for an aggregatorV2, which configures data aggregation across Regions",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "aggregatorv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getautomationrulev2": {
+    "name": "GetAutomationRuleV2",
+    "description": "Grants permission to retrieve details for an automation rule V2 from Security Hub based on rule Amazon Resource Name (ARN)",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "automation-rulev2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getconfigurationpolicy": {
     "name": "GetConfigurationPolicy",
     "description": "Grants permission to get a complete overview of one configuration policy created by the calling account",
@@ -660,6 +847,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getconnectorv2": {
+    "name": "GetConnectorV2",
+    "description": "Grants permission to retrieve details for a connector V2 from Security Hub based on connector id",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "connectorv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getcontrolfindingsummary": {
     "name": "GetControlFindingSummary",
     "isPermissionOnly": true,
@@ -731,6 +933,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -859,6 +1067,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getresourcesstatisticsv2": {
+    "name": "GetResourcesStatisticsV2",
+    "description": "Grants permission to retrieve aggregate statistics about resources",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getresourcesv2": {
+    "name": "GetResourcesV2",
+    "description": "Grants permission to retrieve a list of resources",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getsecuritycontroldefinition": {
     "name": "GetSecurityControlDefinition",
     "description": "Grants permission to get the definition details of a specific security control identified by ID",
@@ -900,6 +1138,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listaggregatorsv2": {
+    "name": "ListAggregatorsV2",
+    "description": "Grants permission to retrieve a list of aggregatorsV2, which configures data aggregation across Regions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listautomationrules": {
     "name": "ListAutomationRules",
     "description": "Grants permission to retrieve a list of automation rules and their metadata for the calling account from Security Hub",
@@ -908,6 +1154,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listautomationrulesv2": {
+    "name": "ListAutomationRulesV2",
+    "description": "Grants permission to retrieve a list of automation rules V2 and their metadata for the calling account from Security Hub",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listconfigurationpolicies": {
     "name": "ListConfigurationPolicies",
     "description": "Grants permission to list the summaries of all configuration policies created by the calling account",
@@ -924,6 +1178,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listconnectorsv2": {
+    "name": "ListConnectorsV2",
+    "description": "Grants permission to retrieve a list of connectors V2 and their metadata for the calling account from Security Hub",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcontrolevaluationsummaries": {
     "name": "ListControlEvaluationSummaries",
     "isPermissionOnly": true,
@@ -1007,7 +1269,8 @@
     ],
     "conditionKeys": [],
     "dependentActions": [
-      "organizations:DescribeOrganization"
+      "organizations:DescribeOrganization",
+      "organizations:ListDelegatedAdministrators"
     ]
   },
   "listsecuritycontroldefinitions": {
@@ -1122,23 +1385,47 @@
     "description": "Grants permission to add tags to a Security Hub resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "aggregatorv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "automation-rule",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "automation-rulev2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "configuration-policy",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "connectorv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "hub",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -1149,23 +1436,47 @@
     "description": "Grants permission to remove tags from a Security Hub resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "aggregatorv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "automation-rule",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "automation-rulev2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "configuration-policy",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "connectorv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "hub",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -1186,6 +1497,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateaggregatorv2": {
+    "name": "UpdateAggregatorV2",
+    "description": "Grants permission to update an aggregatorV2, which configures data aggregation across Regions",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "aggregatorv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateautomationrulev2": {
+    "name": "UpdateAutomationRuleV2",
+    "description": "Grants permission to update an automation rule V2 in Security Hub based on rule Amazon Resource Name (ARN) and input parameters",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "automation-rulev2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateconfigurationpolicy": {
     "name": "UpdateConfigurationPolicy",
     "description": "Grants permission to update an existing configuration policy",
@@ -1201,6 +1542,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateconnectorv2": {
+    "name": "UpdateConnectorV2",
+    "description": "Grants permission to update a connector V2 in Security Hub based on connector id and input parameters",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connectorv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatefindingaggregator": {
     "name": "UpdateFindingAggregator",
     "description": "Grants permission to update a finding aggregator, which contains the cross-Region finding aggregation configuration",

iamdata/data/actions/securitylake.json

@@ -130,6 +130,7 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": [