iamdata 0.1.202504261__py3-none-any.whl → 0.1.202511181__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (315) hide show
  1. iamdata/data/actions/access-analyzer.json +4 -1
  2. iamdata/data/actions/acm.json +23 -3
  3. iamdata/data/actions/action-recommendations.json +10 -0
  4. iamdata/data/actions/aiops.json +189 -1
  5. iamdata/data/actions/airflow-serverless.json +225 -0
  6. iamdata/data/actions/amplify.json +2 -12
  7. iamdata/data/actions/aoss.json +36 -4
  8. iamdata/data/actions/apigateway.json +104 -0
  9. iamdata/data/actions/app-integrations.json +108 -0
  10. iamdata/data/actions/application-signals.json +40 -0
  11. iamdata/data/actions/appstream.json +138 -103
  12. iamdata/data/actions/appsync.json +1 -1
  13. iamdata/data/actions/aps.json +309 -0
  14. iamdata/data/actions/arc-region-switch.json +334 -0
  15. iamdata/data/actions/arc-zonal-shift.json +53 -1
  16. iamdata/data/actions/artifact.json +0 -36
  17. iamdata/data/actions/athena.json +88 -1
  18. iamdata/data/actions/auditmanager.json +60 -7
  19. iamdata/data/actions/autoscaling.json +26 -3
  20. iamdata/data/actions/aws-marketplace.json +0 -32
  21. iamdata/data/actions/backup-search.json +1 -0
  22. iamdata/data/actions/backup.json +80 -0
  23. iamdata/data/actions/batch.json +183 -17
  24. iamdata/data/actions/bcm-dashboards.json +79 -0
  25. iamdata/data/actions/bcm-recommended-actions.json +10 -0
  26. iamdata/data/actions/bedrock-agentcore.json +1801 -0
  27. iamdata/data/actions/bedrock.json +814 -23
  28. iamdata/data/actions/billing.json +88 -5
  29. iamdata/data/actions/braket.json +2 -9
  30. iamdata/data/actions/budgets.json +6 -2
  31. iamdata/data/actions/cases.json +22 -2
  32. iamdata/data/actions/cassandra.json +67 -2
  33. iamdata/data/actions/ce.json +34 -0
  34. iamdata/data/actions/chatbot.json +87 -20
  35. iamdata/data/actions/cleanrooms-ml.json +11 -0
  36. iamdata/data/actions/cleanrooms.json +93 -0
  37. iamdata/data/actions/cloud9.json +4 -10
  38. iamdata/data/actions/cloudformation.json +22 -0
  39. iamdata/data/actions/cloudfront.json +457 -85
  40. iamdata/data/actions/cloudtrail.json +33 -0
  41. iamdata/data/actions/cloudwatch.json +8 -0
  42. iamdata/data/actions/codebuild.json +367 -12
  43. iamdata/data/actions/codepipeline.json +15 -0
  44. iamdata/data/actions/cognito-idp.json +83 -0
  45. iamdata/data/actions/connect-campaigns.json +16 -0
  46. iamdata/data/actions/connect.json +160 -2
  47. iamdata/data/actions/controlcatalog.json +8 -0
  48. iamdata/data/actions/cur.json +5 -1
  49. iamdata/data/actions/databrew.json +14 -7
  50. iamdata/data/actions/dataexchange.json +61 -9
  51. iamdata/data/actions/datazone.json +300 -6
  52. iamdata/data/actions/deadline.json +71 -16
  53. iamdata/data/actions/dms.json +40 -311
  54. iamdata/data/actions/ds.json +170 -0
  55. iamdata/data/actions/dsql.json +226 -22
  56. iamdata/data/actions/dynamodb.json +32 -0
  57. iamdata/data/actions/ec2.json +1466 -146
  58. iamdata/data/actions/ecs.json +59 -9
  59. iamdata/data/actions/eks-mcp.json +26 -0
  60. iamdata/data/actions/eks.json +100 -2
  61. iamdata/data/actions/elasticloadbalancing.json +9 -0
  62. iamdata/data/actions/elasticmapreduce.json +15 -0
  63. iamdata/data/actions/emr-containers.json +34 -1
  64. iamdata/data/actions/emr-serverless.json +16 -0
  65. iamdata/data/actions/entityresolution.json +16 -8
  66. iamdata/data/actions/es.json +60 -0
  67. iamdata/data/actions/events.json +40 -0
  68. iamdata/data/actions/evs.json +193 -0
  69. iamdata/data/actions/freetier.json +32 -0
  70. iamdata/data/actions/fsx.json +59 -6
  71. iamdata/data/actions/glacier.json +1 -4
  72. iamdata/data/actions/glue.json +228 -54
  73. iamdata/data/actions/groundstation.json +15 -0
  74. iamdata/data/actions/guardduty.json +199 -1
  75. iamdata/data/actions/healthlake.json +225 -0
  76. iamdata/data/actions/iam.json +13 -4
  77. iamdata/data/actions/identitystore.json +91 -19
  78. iamdata/data/actions/imagebuilder.json +198 -241
  79. iamdata/data/actions/inspector2.json +208 -12
  80. iamdata/data/actions/invoicing.json +28 -3
  81. iamdata/data/actions/iot.json +37 -5
  82. iamdata/data/actions/iotfleetwise.json +6 -63
  83. iamdata/data/actions/iotmanagedintegrations.json +507 -75
  84. iamdata/data/actions/iotsitewise.json +271 -0
  85. iamdata/data/actions/ivs.json +48 -0
  86. iamdata/data/actions/kafka.json +15 -0
  87. iamdata/data/actions/kinesis.json +163 -5
  88. iamdata/data/actions/kms.json +125 -2
  89. iamdata/data/actions/lambda.json +4 -2
  90. iamdata/data/actions/lex.json +42 -0
  91. iamdata/data/actions/license-manager.json +70 -8
  92. iamdata/data/actions/logs.json +8 -0
  93. iamdata/data/actions/mediaconnect.json +85 -26
  94. iamdata/data/actions/mediaconvert.json +15 -0
  95. iamdata/data/actions/medialive.json +26 -2
  96. iamdata/data/actions/medical-imaging.json +105 -0
  97. iamdata/data/actions/memorydb.json +18 -0
  98. iamdata/data/actions/mgn.json +20 -2
  99. iamdata/data/actions/mpa.json +313 -0
  100. iamdata/data/actions/mq.json +16 -0
  101. iamdata/data/actions/neptune-graph.json +37 -0
  102. iamdata/data/actions/network-firewall.json +236 -3
  103. iamdata/data/actions/network-security-director.json +74 -0
  104. iamdata/data/actions/notifications.json +62 -2
  105. iamdata/data/actions/observabilityadmin.json +330 -0
  106. iamdata/data/actions/odb.json +811 -0
  107. iamdata/data/actions/one.json +8 -0
  108. iamdata/data/actions/opensearch.json +1 -1
  109. iamdata/data/actions/organizations.json +39 -8
  110. iamdata/data/actions/osis.json +111 -0
  111. iamdata/data/actions/outposts.json +41 -3
  112. iamdata/data/actions/partnercentral.json +96 -32
  113. iamdata/data/actions/payment-cryptography.json +154 -11
  114. iamdata/data/actions/pcs.json +27 -1
  115. iamdata/data/actions/pi.json +6 -0
  116. iamdata/data/actions/profile.json +670 -20
  117. iamdata/data/actions/q.json +37 -0
  118. iamdata/data/actions/qapps.json +0 -78
  119. iamdata/data/actions/qbusiness.json +177 -46
  120. iamdata/data/actions/quicksight.json +484 -7
  121. iamdata/data/actions/rds.json +102 -45
  122. iamdata/data/actions/redshift-serverless.json +2 -2
  123. iamdata/data/actions/redshift.json +0 -6
  124. iamdata/data/actions/rekognition.json +1 -8
  125. iamdata/data/actions/repostspace.json +90 -0
  126. iamdata/data/actions/resiliencehub.json +19 -5
  127. iamdata/data/actions/resource-explorer-2.json +84 -2
  128. iamdata/data/actions/route53resolver.json +14 -2
  129. iamdata/data/actions/rtbfabric.json +481 -0
  130. iamdata/data/actions/s3.json +340 -143
  131. iamdata/data/actions/s3express.json +110 -6
  132. iamdata/data/actions/s3tables.json +85 -2
  133. iamdata/data/actions/s3vectors.json +242 -0
  134. iamdata/data/actions/sagemaker-mlflow.json +135 -0
  135. iamdata/data/actions/sagemaker-unified-studio-mcp.json +26 -0
  136. iamdata/data/actions/sagemaker.json +312 -11
  137. iamdata/data/actions/scn.json +151 -4
  138. iamdata/data/actions/security-ir.json +23 -8
  139. iamdata/data/actions/securityhub.json +360 -4
  140. iamdata/data/actions/securitylake.json +1 -0
  141. iamdata/data/actions/servicediscovery.json +140 -14
  142. iamdata/data/actions/servicequotas.json +40 -0
  143. iamdata/data/actions/ses.json +286 -2
  144. iamdata/data/actions/shield.json +47 -0
  145. iamdata/data/actions/snow-device-management.json +1 -0
  146. iamdata/data/actions/social-messaging.json +120 -0
  147. iamdata/data/actions/ssm-guiconnect.json +24 -0
  148. iamdata/data/actions/ssm-sap.json +51 -3
  149. iamdata/data/actions/ssm.json +63 -2
  150. iamdata/data/actions/sso-directory.json +108 -36
  151. iamdata/data/actions/sso-oauth.json +40 -2
  152. iamdata/data/actions/sso.json +369 -157
  153. iamdata/data/actions/sts.json +40 -0
  154. iamdata/data/actions/support-console.json +119 -0
  155. iamdata/data/actions/support.json +58 -0
  156. iamdata/data/actions/synthetics.json +18 -0
  157. iamdata/data/actions/tax.json +48 -0
  158. iamdata/data/actions/thinclient.json +1 -0
  159. iamdata/data/actions/transcribe.json +12 -0
  160. iamdata/data/actions/transfer.json +30 -14
  161. iamdata/data/actions/transform.json +185 -0
  162. iamdata/data/actions/user-subscriptions.json +8 -0
  163. iamdata/data/actions/uxc.json +26 -0
  164. iamdata/data/actions/verifiedpermissions.json +58 -2
  165. iamdata/data/actions/vpc-lattice-svcs.json +2 -0
  166. iamdata/data/actions/vpc-lattice.json +90 -0
  167. iamdata/data/actions/wisdom.json +31 -214
  168. iamdata/data/actions/workspaces-instances.json +186 -0
  169. iamdata/data/actions/workspaces-web.json +136 -8
  170. iamdata/data/actions/workspaces.json +98 -0
  171. iamdata/data/actions/xray.json +15 -5
  172. iamdata/data/conditionKeys/acm.json +5 -0
  173. iamdata/data/conditionKeys/airflow-serverless.json +17 -0
  174. iamdata/data/conditionKeys/apigateway.json +30 -0
  175. iamdata/data/conditionKeys/arc-region-switch.json +17 -0
  176. iamdata/data/conditionKeys/autoscaling.json +5 -0
  177. iamdata/data/conditionKeys/backup.json +6 -1
  178. iamdata/data/conditionKeys/bcm-dashboards.json +12 -0
  179. iamdata/data/conditionKeys/bedrock-agentcore.json +72 -0
  180. iamdata/data/conditionKeys/bedrock.json +10 -0
  181. iamdata/data/conditionKeys/chatbot.json +17 -1
  182. iamdata/data/conditionKeys/cloudformation.json +5 -0
  183. iamdata/data/conditionKeys/codebuild.json +550 -0
  184. iamdata/data/conditionKeys/connect.json +15 -0
  185. iamdata/data/conditionKeys/deadline.json +5 -0
  186. iamdata/data/conditionKeys/dsql.json +12 -2
  187. iamdata/data/conditionKeys/ebs.json +2 -2
  188. iamdata/data/conditionKeys/ec2.json +30 -15
  189. iamdata/data/conditionKeys/eks.json +5 -0
  190. iamdata/data/conditionKeys/events.json +1 -1
  191. iamdata/data/conditionKeys/evs.json +17 -0
  192. iamdata/data/conditionKeys/glacier.json +0 -10
  193. iamdata/data/conditionKeys/glue.json +10 -0
  194. iamdata/data/conditionKeys/iam.json +10 -0
  195. iamdata/data/conditionKeys/imagebuilder.json +2 -2
  196. iamdata/data/conditionKeys/iotmanagedintegrations.json +27 -1
  197. iamdata/data/conditionKeys/kinesis.json +15 -0
  198. iamdata/data/conditionKeys/kms.json +127 -7
  199. iamdata/data/conditionKeys/lambda.json +5 -0
  200. iamdata/data/conditionKeys/license-manager.json +5 -0
  201. iamdata/data/conditionKeys/mediaconnect.json +17 -1
  202. iamdata/data/conditionKeys/mpa.json +27 -0
  203. iamdata/data/conditionKeys/observabilityadmin.json +32 -1
  204. iamdata/data/conditionKeys/odb.json +17 -0
  205. iamdata/data/conditionKeys/quicksight.json +0 -5
  206. iamdata/data/conditionKeys/rds.json +5 -0
  207. iamdata/data/conditionKeys/route53.json +1 -1
  208. iamdata/data/conditionKeys/rtbfabric.json +47 -0
  209. iamdata/data/conditionKeys/s3.json +15 -0
  210. iamdata/data/conditionKeys/s3express.json +26 -1
  211. iamdata/data/conditionKeys/s3tables.json +20 -0
  212. iamdata/data/conditionKeys/s3vectors.json +12 -0
  213. iamdata/data/conditionKeys/sagemaker.json +25 -0
  214. iamdata/data/conditionKeys/savingsplans.json +1 -1
  215. iamdata/data/conditionKeys/secretsmanager.json +1 -1
  216. iamdata/data/conditionKeys/securityhub.json +5 -0
  217. iamdata/data/conditionKeys/servicediscovery.json +5 -0
  218. iamdata/data/conditionKeys/ses.json +5 -0
  219. iamdata/data/conditionKeys/ssm.json +15 -0
  220. iamdata/data/conditionKeys/sso.json +11 -1
  221. iamdata/data/conditionKeys/sts.json +10 -0
  222. iamdata/data/conditionKeys/transcribe.json +1 -1
  223. iamdata/data/conditionKeys/transfer.json +20 -0
  224. iamdata/data/conditionKeys/transform.json +12 -0
  225. iamdata/data/conditionKeys/uxc.json +1 -0
  226. iamdata/data/conditionKeys/verifiedpermissions.json +17 -1
  227. iamdata/data/conditionKeys/vpc-lattice-svcs.json +5 -0
  228. iamdata/data/conditionKeys/vpc-lattice.json +15 -0
  229. iamdata/data/conditionKeys/workspaces-instances.json +17 -0
  230. iamdata/data/conditionKeys/xray.json +15 -0
  231. iamdata/data/conditionPatterns.json +141 -0
  232. iamdata/data/metadata.json +2 -2
  233. iamdata/data/resourceTypes/action-recommendations.json +1 -0
  234. iamdata/data/resourceTypes/airflow-serverless.json +9 -0
  235. iamdata/data/resourceTypes/apigateway.json +12 -0
  236. iamdata/data/resourceTypes/aps.json +9 -0
  237. iamdata/data/resourceTypes/arc-region-switch.json +9 -0
  238. iamdata/data/resourceTypes/artifact.json +5 -5
  239. iamdata/data/resourceTypes/athena.json +7 -0
  240. iamdata/data/resourceTypes/auditmanager.json +8 -2
  241. iamdata/data/resourceTypes/backup-gateway.json +3 -3
  242. iamdata/data/resourceTypes/batch.json +14 -0
  243. iamdata/data/resourceTypes/bcm-dashboards.json +1 -0
  244. iamdata/data/resourceTypes/bcm-recommended-actions.json +1 -0
  245. iamdata/data/resourceTypes/bedrock-agentcore.json +87 -0
  246. iamdata/data/resourceTypes/bedrock.json +45 -3
  247. iamdata/data/resourceTypes/cassandra.json +7 -0
  248. iamdata/data/resourceTypes/chatbot.json +8 -2
  249. iamdata/data/resourceTypes/cloudformation.json +4 -0
  250. iamdata/data/resourceTypes/cloudfront.json +14 -0
  251. iamdata/data/resourceTypes/dataexchange.json +4 -1
  252. iamdata/data/resourceTypes/deadline.json +5 -1
  253. iamdata/data/resourceTypes/ec2.json +125 -6
  254. iamdata/data/resourceTypes/eks-mcp.json +1 -0
  255. iamdata/data/resourceTypes/eks.json +7 -0
  256. iamdata/data/resourceTypes/emr-containers.json +0 -4
  257. iamdata/data/resourceTypes/events.json +8 -0
  258. iamdata/data/resourceTypes/evs.json +9 -0
  259. iamdata/data/resourceTypes/guardduty.json +18 -1
  260. iamdata/data/resourceTypes/imagebuilder.json +12 -18
  261. iamdata/data/resourceTypes/inspector2.json +14 -0
  262. iamdata/data/resourceTypes/iotmanagedintegrations.json +31 -12
  263. iamdata/data/resourceTypes/iotsitewise.json +7 -0
  264. iamdata/data/resourceTypes/kinesis.json +4 -1
  265. iamdata/data/resourceTypes/license-manager.json +10 -2
  266. iamdata/data/resourceTypes/mediaconnect.json +16 -4
  267. iamdata/data/resourceTypes/mpa.json +23 -0
  268. iamdata/data/resourceTypes/network-firewall.json +7 -0
  269. iamdata/data/resourceTypes/network-security-director.json +1 -0
  270. iamdata/data/resourceTypes/observabilityadmin.json +23 -1
  271. iamdata/data/resourceTypes/odb.json +44 -0
  272. iamdata/data/resourceTypes/osis.json +7 -0
  273. iamdata/data/resourceTypes/partnercentral.json +8 -2
  274. iamdata/data/resourceTypes/pi.json +4 -1
  275. iamdata/data/resourceTypes/profile.json +21 -0
  276. iamdata/data/resourceTypes/qbusiness.json +7 -4
  277. iamdata/data/resourceTypes/quicksight.json +26 -1
  278. iamdata/data/resourceTypes/rds.json +4 -1
  279. iamdata/data/resourceTypes/redshift.json +1 -4
  280. iamdata/data/resourceTypes/route53resolver.json +7 -0
  281. iamdata/data/resourceTypes/rtbfabric.json +46 -0
  282. iamdata/data/resourceTypes/s3.json +19 -1
  283. iamdata/data/resourceTypes/s3express.json +10 -2
  284. iamdata/data/resourceTypes/s3tables.json +7 -1
  285. iamdata/data/resourceTypes/s3vectors.json +10 -0
  286. iamdata/data/resourceTypes/sagemaker-unified-studio-mcp.json +1 -0
  287. iamdata/data/resourceTypes/sagemaker.json +18 -3
  288. iamdata/data/resourceTypes/scn.json +19 -3
  289. iamdata/data/resourceTypes/securityhub.json +36 -2
  290. iamdata/data/resourceTypes/ses.json +11 -0
  291. iamdata/data/resourceTypes/sts.json +8 -0
  292. iamdata/data/resourceTypes/support-console.json +1 -0
  293. iamdata/data/resourceTypes/transform.json +10 -0
  294. iamdata/data/resourceTypes/uxc.json +1 -0
  295. iamdata/data/resourceTypes/verifiedpermissions.json +4 -1
  296. iamdata/data/resourceTypes/vpc-lattice.json +12 -0
  297. iamdata/data/resourceTypes/workspaces-instances.json +16 -0
  298. iamdata/data/resourceTypes/workspaces-web.json +7 -0
  299. iamdata/data/resourceTypes/workspaces.json +4 -0
  300. iamdata/data/serviceNames.json +23 -8
  301. iamdata/data/services.json +18 -3
  302. iamdata/data/unassociatedConditions.json +23 -0
  303. {iamdata-0.1.202504261.dist-info → iamdata-0.1.202511181.dist-info}/METADATA +1 -1
  304. {iamdata-0.1.202504261.dist-info → iamdata-0.1.202511181.dist-info}/RECORD +312 -265
  305. iamdata/data/actions/application-cost-profiler.json +0 -50
  306. iamdata/data/actions/sagemaker-groundtruth-synthetic.json +0 -110
  307. iamdata/data/actions/supportrecommendations.json +0 -20
  308. /iamdata/data/conditionKeys/{application-cost-profiler.json → action-recommendations.json} +0 -0
  309. /iamdata/data/conditionKeys/{sagemaker-groundtruth-synthetic.json → bcm-recommended-actions.json} +0 -0
  310. /iamdata/data/conditionKeys/{supportrecommendations.json → eks-mcp.json} +0 -0
  311. /iamdata/data/{resourceTypes/application-cost-profiler.json → conditionKeys/network-security-director.json} +0 -0
  312. /iamdata/data/{resourceTypes/sagemaker-groundtruth-synthetic.json → conditionKeys/sagemaker-unified-studio-mcp.json} +0 -0
  313. /iamdata/data/{resourceTypes/supportrecommendations.json → conditionKeys/support-console.json} +0 -0
  314. {iamdata-0.1.202504261.dist-info → iamdata-0.1.202511181.dist-info}/WHEEL +0 -0
  315. {iamdata-0.1.202504261.dist-info → iamdata-0.1.202511181.dist-info}/licenses/LICENSE.txt +0 -0
@@ -39,6 +39,12 @@
39
39
  "required": true,
40
40
  "conditionKeys": [],
41
41
  "dependentActions": []
42
+ },
43
+ {
44
+ "name": "assessmentControlSet",
45
+ "required": true,
46
+ "conditionKeys": [],
47
+ "dependentActions": []
42
48
  }
43
49
  ],
44
50
  "conditionKeys": [],
@@ -54,6 +60,12 @@
54
60
  "required": true,
55
61
  "conditionKeys": [],
56
62
  "dependentActions": []
63
+ },
64
+ {
65
+ "name": "assessmentControlSet",
66
+ "required": true,
67
+ "conditionKeys": [],
68
+ "dependentActions": []
57
69
  }
58
70
  ],
59
71
  "conditionKeys": [],
@@ -96,7 +108,8 @@
96
108
  "resourceTypes": [],
97
109
  "conditionKeys": [
98
110
  "aws:RequestTag/${TagKey}",
99
- "aws:TagKeys"
111
+ "aws:TagKeys",
112
+ "aws:ResourceTag/${TagKey}"
100
113
  ],
101
114
  "dependentActions": []
102
115
  },
@@ -104,10 +117,18 @@
104
117
  "name": "CreateAssessmentFramework",
105
118
  "description": "Grants permission to create a framework for use in AWS Audit Manager",
106
119
  "accessLevel": "Write",
107
- "resourceTypes": [],
120
+ "resourceTypes": [
121
+ {
122
+ "name": "control",
123
+ "required": true,
124
+ "conditionKeys": [],
125
+ "dependentActions": []
126
+ }
127
+ ],
108
128
  "conditionKeys": [
109
129
  "aws:RequestTag/${TagKey}",
110
- "aws:TagKeys"
130
+ "aws:TagKeys",
131
+ "aws:ResourceTag/${TagKey}"
111
132
  ],
112
133
  "dependentActions": []
113
134
  },
@@ -133,7 +154,8 @@
133
154
  "resourceTypes": [],
134
155
  "conditionKeys": [
135
156
  "aws:RequestTag/${TagKey}",
136
- "aws:TagKeys"
157
+ "aws:TagKeys",
158
+ "aws:ResourceTag/${TagKey}"
137
159
  ],
138
160
  "dependentActions": []
139
161
  },
@@ -610,6 +632,12 @@
610
632
  "conditionKeys": [],
611
633
  "dependentActions": []
612
634
  },
635
+ {
636
+ "name": "assessmentFramework",
637
+ "required": false,
638
+ "conditionKeys": [],
639
+ "dependentActions": []
640
+ },
613
641
  {
614
642
  "name": "control",
615
643
  "required": false,
@@ -631,13 +659,25 @@
631
659
  {
632
660
  "name": "assessment",
633
661
  "required": false,
634
- "conditionKeys": [],
662
+ "conditionKeys": [
663
+ "aws:ResourceTag/${TagKey}"
664
+ ],
665
+ "dependentActions": []
666
+ },
667
+ {
668
+ "name": "assessmentFramework",
669
+ "required": false,
670
+ "conditionKeys": [
671
+ "aws:ResourceTag/${TagKey}"
672
+ ],
635
673
  "dependentActions": []
636
674
  },
637
675
  {
638
676
  "name": "control",
639
677
  "required": false,
640
- "conditionKeys": [],
678
+ "conditionKeys": [
679
+ "aws:ResourceTag/${TagKey}"
680
+ ],
641
681
  "dependentActions": []
642
682
  }
643
683
  ],
@@ -701,6 +741,12 @@
701
741
  "required": true,
702
742
  "conditionKeys": [],
703
743
  "dependentActions": []
744
+ },
745
+ {
746
+ "name": "control",
747
+ "required": true,
748
+ "conditionKeys": [],
749
+ "dependentActions": []
704
750
  }
705
751
  ],
706
752
  "conditionKeys": [],
@@ -710,7 +756,14 @@
710
756
  "name": "UpdateAssessmentFrameworkShare",
711
757
  "description": "Grants permission to update a share request for a custom framework in AWS Audit Manager",
712
758
  "accessLevel": "Write",
713
- "resourceTypes": [],
759
+ "resourceTypes": [
760
+ {
761
+ "name": "assessmentFramework",
762
+ "required": true,
763
+ "conditionKeys": [],
764
+ "dependentActions": []
765
+ }
766
+ ],
714
767
  "conditionKeys": [],
715
768
  "dependentActions": []
716
769
  },
@@ -168,6 +168,7 @@
168
168
  }
169
169
  ],
170
170
  "conditionKeys": [
171
+ "autoscaling:ImageId",
171
172
  "autoscaling:CapacityReservationIds",
172
173
  "autoscaling:CapacityReservationResourceGroupArns",
173
174
  "autoscaling:InstanceTypes",
@@ -240,6 +241,7 @@
240
241
  }
241
242
  ],
242
243
  "conditionKeys": [
244
+ "autoscaling:ForceDelete",
243
245
  "autoscaling:ResourceTag/${TagKey}",
244
246
  "aws:ResourceTag/${TagKey}"
245
247
  ],
@@ -715,6 +717,24 @@
715
717
  "conditionKeys": [],
716
718
  "dependentActions": []
717
719
  },
720
+ "launchinstances": {
721
+ "name": "LaunchInstances",
722
+ "description": "Grants permission to launch one or more EC2 instances in the specified Auto Scaling group",
723
+ "accessLevel": "Write",
724
+ "resourceTypes": [
725
+ {
726
+ "name": "autoScalingGroup",
727
+ "required": true,
728
+ "conditionKeys": [],
729
+ "dependentActions": []
730
+ }
731
+ ],
732
+ "conditionKeys": [
733
+ "autoscaling:ResourceTag/${TagKey}",
734
+ "aws:ResourceTag/${TagKey}"
735
+ ],
736
+ "dependentActions": []
737
+ },
718
738
  "putlifecyclehook": {
719
739
  "name": "PutLifecycleHook",
720
740
  "description": "Grants permission to create or update a lifecycle hook for the specified Auto Scaling Group",
@@ -924,13 +944,15 @@
924
944
  {
925
945
  "name": "autoScalingGroup",
926
946
  "required": true,
927
- "conditionKeys": [],
947
+ "conditionKeys": [
948
+ "autoscaling:ResourceTag/${TagKey}",
949
+ "aws:ResourceTag/${TagKey}"
950
+ ],
928
951
  "dependentActions": []
929
952
  }
930
953
  ],
931
954
  "conditionKeys": [
932
- "autoscaling:ResourceTag/${TagKey}",
933
- "aws:ResourceTag/${TagKey}"
955
+ "autoscaling:ImageId"
934
956
  ],
935
957
  "dependentActions": []
936
958
  },
@@ -988,6 +1010,7 @@
988
1010
  }
989
1011
  ],
990
1012
  "conditionKeys": [
1013
+ "autoscaling:ImageId",
991
1014
  "autoscaling:CapacityReservationIds",
992
1015
  "autoscaling:CapacityReservationResourceGroupArns",
993
1016
  "autoscaling:InstanceTypes",
@@ -14,14 +14,6 @@
14
14
  "conditionKeys": [],
15
15
  "dependentActions": []
16
16
  },
17
- "completetask": {
18
- "name": "CompleteTask",
19
- "description": "Grants permission to complete an existing task and submit the content to the associated change",
20
- "accessLevel": "Write",
21
- "resourceTypes": [],
22
- "conditionKeys": [],
23
- "dependentActions": []
24
- },
25
17
  "deleteresourcepolicy": {
26
18
  "name": "DeleteResourcePolicy",
27
19
  "description": "Grants permission to delete the resource policy of an existing entity",
@@ -75,14 +67,6 @@
75
67
  "conditionKeys": [],
76
68
  "dependentActions": []
77
69
  },
78
- "describetask": {
79
- "name": "DescribeTask",
80
- "description": "Grants permission to return the details of an existing task",
81
- "accessLevel": "Read",
82
- "resourceTypes": [],
83
- "conditionKeys": [],
84
- "dependentActions": []
85
- },
86
70
  "getresourcepolicy": {
87
71
  "name": "GetResourcePolicy",
88
72
  "description": "Grants permission to get the resource policy of an existing entity",
@@ -139,14 +123,6 @@
139
123
  ],
140
124
  "dependentActions": []
141
125
  },
142
- "listtasks": {
143
- "name": "ListTasks",
144
- "description": "Grants permission to list existing tasks",
145
- "accessLevel": "List",
146
- "resourceTypes": [],
147
- "conditionKeys": [],
148
- "dependentActions": []
149
- },
150
126
  "putresourcepolicy": {
151
127
  "name": "PutResourcePolicy",
152
128
  "description": "Grants permission to attach a resource policy to an existing entity",
@@ -226,14 +202,6 @@
226
202
  ],
227
203
  "dependentActions": []
228
204
  },
229
- "updatetask": {
230
- "name": "UpdateTask",
231
- "description": "Grants permission to update the contents of an existing task",
232
- "accessLevel": "Write",
233
- "resourceTypes": [],
234
- "conditionKeys": [],
235
- "dependentActions": []
236
- },
237
205
  "putdeploymentparameter": {
238
206
  "name": "PutDeploymentParameter",
239
207
  "description": "Grants permission to create or update a deployment parameter resource",
@@ -103,6 +103,7 @@
103
103
  "resourceTypes": [],
104
104
  "conditionKeys": [
105
105
  "aws:RequestTag/${TagKey}",
106
+ "aws:ResourceTag/${TagKey}",
106
107
  "aws:TagKeys"
107
108
  ],
108
109
  "dependentActions": []
@@ -1,4 +1,21 @@
1
1
  {
2
+ "associatebackupvaultmpaapprovalteam": {
3
+ "name": "AssociateBackupVaultMpaApprovalTeam",
4
+ "description": "Grants permission to associate an MPA approval team with a backup vault",
5
+ "accessLevel": "Write",
6
+ "resourceTypes": [
7
+ {
8
+ "name": "backupVault",
9
+ "required": true,
10
+ "conditionKeys": [],
11
+ "dependentActions": []
12
+ }
13
+ ],
14
+ "conditionKeys": [
15
+ "backup:MpaApprovalTeamArn"
16
+ ],
17
+ "dependentActions": []
18
+ },
2
19
  "cancellegalhold": {
3
20
  "name": "CancelLegalHold",
4
21
  "description": "Grants permission to cancel a legal hold",
@@ -179,6 +196,24 @@
179
196
  ],
180
197
  "dependentActions": []
181
198
  },
199
+ "createrestoreaccessbackupvault": {
200
+ "name": "CreateRestoreAccessBackupVault",
201
+ "description": "Grants permission to create a restore access backup vault",
202
+ "accessLevel": "Write",
203
+ "resourceTypes": [
204
+ {
205
+ "name": "backupVault",
206
+ "required": true,
207
+ "conditionKeys": [],
208
+ "dependentActions": []
209
+ }
210
+ ],
211
+ "conditionKeys": [
212
+ "aws:RequestTag/${TagKey}",
213
+ "aws:TagKeys"
214
+ ],
215
+ "dependentActions": []
216
+ },
182
217
  "createrestoretestingplan": {
183
218
  "name": "CreateRestoreTestingPlan",
184
219
  "description": "Grants permission to create a new restore testing plan",
@@ -511,6 +546,21 @@
511
546
  "conditionKeys": [],
512
547
  "dependentActions": []
513
548
  },
549
+ "disassociatebackupvaultmpaapprovalteam": {
550
+ "name": "DisassociateBackupVaultMpaApprovalTeam",
551
+ "description": "Grants permission to disassociate an MPA approval team from a backup vault",
552
+ "accessLevel": "Write",
553
+ "resourceTypes": [
554
+ {
555
+ "name": "backupVault",
556
+ "required": true,
557
+ "conditionKeys": [],
558
+ "dependentActions": []
559
+ }
560
+ ],
561
+ "conditionKeys": [],
562
+ "dependentActions": []
563
+ },
514
564
  "disassociaterecoverypoint": {
515
565
  "name": "DisassociateRecoveryPoint",
516
566
  "description": "Grants permission to disassociate a recovery point from a backup vault",
@@ -936,6 +986,21 @@
936
986
  "conditionKeys": [],
937
987
  "dependentActions": []
938
988
  },
989
+ "listrestoreaccessbackupvaults": {
990
+ "name": "ListRestoreAccessBackupVaults",
991
+ "description": "Grants permission to list a restore access backup vaults associated with a backup vault",
992
+ "accessLevel": "List",
993
+ "resourceTypes": [
994
+ {
995
+ "name": "backupVault",
996
+ "required": true,
997
+ "conditionKeys": [],
998
+ "dependentActions": []
999
+ }
1000
+ ],
1001
+ "conditionKeys": [],
1002
+ "dependentActions": []
1003
+ },
939
1004
  "listrestorejobsummaries": {
940
1005
  "name": "ListRestoreJobSummaries",
941
1006
  "description": "Grants permission to list restore job summaries",
@@ -1107,6 +1172,21 @@
1107
1172
  "conditionKeys": [],
1108
1173
  "dependentActions": []
1109
1174
  },
1175
+ "revokerestoreaccessbackupvault": {
1176
+ "name": "RevokeRestoreAccessBackupVault",
1177
+ "description": "Grants permission to revoke a restore access backup vault",
1178
+ "accessLevel": "Write",
1179
+ "resourceTypes": [
1180
+ {
1181
+ "name": "backupVault",
1182
+ "required": true,
1183
+ "conditionKeys": [],
1184
+ "dependentActions": []
1185
+ }
1186
+ ],
1187
+ "conditionKeys": [],
1188
+ "dependentActions": []
1189
+ },
1110
1190
  "searchrecoverypoint": {
1111
1191
  "name": "SearchRecoveryPoint",
1112
1192
  "isPermissionOnly": true,
@@ -56,18 +56,15 @@
56
56
  "accessLevel": "Write",
57
57
  "resourceTypes": [
58
58
  {
59
- "name": "compute-environment",
59
+ "name": "job-queue",
60
60
  "required": true,
61
61
  "conditionKeys": [],
62
62
  "dependentActions": []
63
63
  },
64
64
  {
65
- "name": "job-queue",
66
- "required": true,
67
- "conditionKeys": [
68
- "aws:RequestTag/${TagKey}",
69
- "aws:TagKeys"
70
- ],
65
+ "name": "compute-environment",
66
+ "required": false,
67
+ "conditionKeys": [],
71
68
  "dependentActions": []
72
69
  },
73
70
  {
@@ -75,9 +72,18 @@
75
72
  "required": false,
76
73
  "conditionKeys": [],
77
74
  "dependentActions": []
75
+ },
76
+ {
77
+ "name": "service-environment",
78
+ "required": false,
79
+ "conditionKeys": [],
80
+ "dependentActions": []
78
81
  }
79
82
  ],
80
- "conditionKeys": [],
83
+ "conditionKeys": [
84
+ "aws:RequestTag/${TagKey}",
85
+ "aws:TagKeys"
86
+ ],
81
87
  "dependentActions": []
82
88
  },
83
89
  "createschedulingpolicy": {
@@ -98,6 +104,26 @@
98
104
  ],
99
105
  "dependentActions": []
100
106
  },
107
+ "createserviceenvironment": {
108
+ "name": "CreateServiceEnvironment",
109
+ "description": "Grants permission to create an AWS Batch service environment in your account",
110
+ "accessLevel": "Write",
111
+ "resourceTypes": [
112
+ {
113
+ "name": "service-environment",
114
+ "required": true,
115
+ "conditionKeys": [],
116
+ "dependentActions": [
117
+ "iam:CreateServiceLinkedRole"
118
+ ]
119
+ }
120
+ ],
121
+ "conditionKeys": [
122
+ "aws:RequestTag/${TagKey}",
123
+ "aws:TagKeys"
124
+ ],
125
+ "dependentActions": []
126
+ },
101
127
  "deletecomputeenvironment": {
102
128
  "name": "DeleteComputeEnvironment",
103
129
  "description": "Grants permission to delete an AWS Batch compute environment in your account",
@@ -158,6 +184,21 @@
158
184
  "conditionKeys": [],
159
185
  "dependentActions": []
160
186
  },
187
+ "deleteserviceenvironment": {
188
+ "name": "DeleteServiceEnvironment",
189
+ "description": "Grants permission to delete an AWS Batch service environment in your account",
190
+ "accessLevel": "Write",
191
+ "resourceTypes": [
192
+ {
193
+ "name": "service-environment",
194
+ "required": true,
195
+ "conditionKeys": [],
196
+ "dependentActions": []
197
+ }
198
+ ],
199
+ "conditionKeys": [],
200
+ "dependentActions": []
201
+ },
161
202
  "deregisterjobdefinition": {
162
203
  "name": "DeregisterJobDefinition",
163
204
  "description": "Grants permission to deregister an AWS Batch job definition in your account",
@@ -228,6 +269,22 @@
228
269
  "conditionKeys": [],
229
270
  "dependentActions": []
230
271
  },
272
+ "describeserviceenvironments": {
273
+ "name": "DescribeServiceEnvironments",
274
+ "description": "Grants permission to describe one or more AWS Batch service environments in your account",
275
+ "accessLevel": "Read",
276
+ "resourceTypes": [],
277
+ "conditionKeys": [],
278
+ "dependentActions": []
279
+ },
280
+ "describeservicejob": {
281
+ "name": "DescribeServiceJob",
282
+ "description": "Grants permission to describe a AWS Batch service job in your account",
283
+ "accessLevel": "Read",
284
+ "resourceTypes": [],
285
+ "conditionKeys": [],
286
+ "dependentActions": []
287
+ },
231
288
  "getjobqueuesnapshot": {
232
289
  "name": "GetJobQueueSnapshot",
233
290
  "description": "Grants permission to get a snapshot of an AWS Batch job queue in your account",
@@ -282,6 +339,14 @@
282
339
  "conditionKeys": [],
283
340
  "dependentActions": []
284
341
  },
342
+ "listservicejobs": {
343
+ "name": "ListServiceJobs",
344
+ "description": "Grants permission to list service jobs for a specified AWS Batch job queue in your account",
345
+ "accessLevel": "List",
346
+ "resourceTypes": [],
347
+ "conditionKeys": [],
348
+ "dependentActions": []
349
+ },
285
350
  "listtagsforresource": {
286
351
  "name": "ListTagsForResource",
287
352
  "description": "Grants permission to list tags for an AWS Batch resource in your account",
@@ -322,6 +387,18 @@
322
387
  "required": false,
323
388
  "conditionKeys": [],
324
389
  "dependentActions": []
390
+ },
391
+ {
392
+ "name": "service-environment",
393
+ "required": false,
394
+ "conditionKeys": [],
395
+ "dependentActions": []
396
+ },
397
+ {
398
+ "name": "service-job",
399
+ "required": false,
400
+ "conditionKeys": [],
401
+ "dependentActions": []
325
402
  }
326
403
  ],
327
404
  "conditionKeys": [],
@@ -335,7 +412,9 @@
335
412
  {
336
413
  "name": "job-definition",
337
414
  "required": true,
338
- "conditionKeys": [],
415
+ "conditionKeys": [
416
+ "aws:ResourceTag/${TagKey}"
417
+ ],
339
418
  "dependentActions": []
340
419
  },
341
420
  {
@@ -376,32 +455,65 @@
376
455
  "conditionKeys": [
377
456
  "batch:ShareIdentifier",
378
457
  "batch:EKSImage",
379
- "batch:EKSNamespace",
380
- "aws:RequestTag/${TagKey}",
381
- "aws:TagKeys"
458
+ "batch:EKSNamespace"
382
459
  ],
383
460
  "dependentActions": []
384
461
  },
385
462
  {
386
- "name": "job-definition",
463
+ "name": "job-queue",
387
464
  "required": true,
388
465
  "conditionKeys": [],
389
466
  "dependentActions": []
390
467
  },
391
468
  {
392
- "name": "job-queue",
393
- "required": true,
469
+ "name": "consumable-resource",
470
+ "required": false,
394
471
  "conditionKeys": [],
395
472
  "dependentActions": []
396
473
  },
397
474
  {
398
- "name": "consumable-resource",
475
+ "name": "job-definition",
476
+ "required": false,
477
+ "conditionKeys": [],
478
+ "dependentActions": []
479
+ },
480
+ {
481
+ "name": "job-definition-revision",
399
482
  "required": false,
400
483
  "conditionKeys": [],
401
484
  "dependentActions": []
402
485
  }
403
486
  ],
404
- "conditionKeys": [],
487
+ "conditionKeys": [
488
+ "aws:RequestTag/${TagKey}",
489
+ "aws:TagKeys"
490
+ ],
491
+ "dependentActions": []
492
+ },
493
+ "submitservicejob": {
494
+ "name": "SubmitServiceJob",
495
+ "description": "Grants permission to submit an AWS Batch service job",
496
+ "accessLevel": "Write",
497
+ "resourceTypes": [
498
+ {
499
+ "name": "job-queue",
500
+ "required": true,
501
+ "conditionKeys": [],
502
+ "dependentActions": []
503
+ },
504
+ {
505
+ "name": "service-job",
506
+ "required": true,
507
+ "conditionKeys": [
508
+ "batch:ShareIdentifier"
509
+ ],
510
+ "dependentActions": []
511
+ }
512
+ ],
513
+ "conditionKeys": [
514
+ "aws:RequestTag/${TagKey}",
515
+ "aws:TagKeys"
516
+ ],
405
517
  "dependentActions": []
406
518
  },
407
519
  "tagresource": {
@@ -444,6 +556,18 @@
444
556
  "required": false,
445
557
  "conditionKeys": [],
446
558
  "dependentActions": []
559
+ },
560
+ {
561
+ "name": "service-environment",
562
+ "required": false,
563
+ "conditionKeys": [],
564
+ "dependentActions": []
565
+ },
566
+ {
567
+ "name": "service-job",
568
+ "required": false,
569
+ "conditionKeys": [],
570
+ "dependentActions": []
447
571
  }
448
572
  ],
449
573
  "conditionKeys": [
@@ -467,6 +591,21 @@
467
591
  "conditionKeys": [],
468
592
  "dependentActions": []
469
593
  },
594
+ "terminateservicejob": {
595
+ "name": "TerminateServiceJob",
596
+ "description": "Grants permission to terminate a service job in an AWS Batch job queue in your account",
597
+ "accessLevel": "Write",
598
+ "resourceTypes": [
599
+ {
600
+ "name": "service-job",
601
+ "required": true,
602
+ "conditionKeys": [],
603
+ "dependentActions": []
604
+ }
605
+ ],
606
+ "conditionKeys": [],
607
+ "dependentActions": []
608
+ },
470
609
  "untagresource": {
471
610
  "name": "UntagResource",
472
611
  "description": "Grants permission to untag an AWS Batch resource in your account",
@@ -507,6 +646,18 @@
507
646
  "required": false,
508
647
  "conditionKeys": [],
509
648
  "dependentActions": []
649
+ },
650
+ {
651
+ "name": "service-environment",
652
+ "required": false,
653
+ "conditionKeys": [],
654
+ "dependentActions": []
655
+ },
656
+ {
657
+ "name": "service-job",
658
+ "required": false,
659
+ "conditionKeys": [],
660
+ "dependentActions": []
510
661
  }
511
662
  ],
512
663
  "conditionKeys": [
@@ -585,5 +736,20 @@
585
736
  ],
586
737
  "conditionKeys": [],
587
738
  "dependentActions": []
739
+ },
740
+ "updateserviceenvironment": {
741
+ "name": "UpdateServiceEnvironment",
742
+ "description": "Grants permission to update an AWS Batch service environment in your account",
743
+ "accessLevel": "Write",
744
+ "resourceTypes": [
745
+ {
746
+ "name": "service-environment",
747
+ "required": true,
748
+ "conditionKeys": [],
749
+ "dependentActions": []
750
+ }
751
+ ],
752
+ "conditionKeys": [],
753
+ "dependentActions": []
588
754
  }
589
755
  }