iamdata 0.1.202505111__py3-none-any.whl → 0.1.202511181__py3-none-any.whl

iamdata/data/actions/access-analyzer.json

@@ -108,7 +108,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "deletearchiverule": {

iamdata/data/actions/acm.json

@@ -49,7 +49,7 @@
   },
   "exportcertificate": {
     "name": "ExportCertificate",
-    "description": "Grants permission to export a private certificate issued by a private certificate authority (CA) for use anywhere",
+    "description": "Grants permission to export an exportable certificate for use anywhere",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -59,7 +59,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "acm:DomainNames"
+    ],
     "dependentActions": []
   },
   "getaccountconfiguration": {
@@ -179,7 +181,8 @@
       "acm:CertificateTransparencyLogging",
       "acm:ValidationMethod",
       "acm:KeyAlgorithm",
-      "acm:CertificateAuthority"
+      "acm:CertificateAuthority",
+      "acm:Export"
     ],
     "dependentActions": []
   },
@@ -198,6 +201,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "revokecertificate": {
+    "name": "RevokeCertificate",
+    "description": "Grants permission to revoke an exportable certificate",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "certificate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "acm:DomainNames"
+    ],
+    "dependentActions": []
+  },
   "updatecertificateoptions": {
     "name": "UpdateCertificateOptions",
     "description": "Grants permission to update a certificate configuration. Use this to specify whether to opt in to or out of certificate transparency logging",

iamdata/data/actions/action-recommendations.json

@@ -0,0 +1,10 @@
+{
+  "listrecommendedactions": {
+    "name": "ListRecommendedActions",
+    "description": "Grants permission to list recommended actions in the AWS Management Console",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

iamdata/data/actions/aiops.json

@@ -32,8 +32,13 @@
     ],
     "conditionKeys": [],
     "dependentActions": [
+      "cloudwatch:DescribeAlarmHistory",
+      "cloudwatch:DescribeAlarms",
+      "cloudwatch:GetInsightRuleReport",
+      "cloudwatch:GetMetricData",
       "kms:Decrypt",
       "kms:GenerateDataKey",
+      "logs:GetQueryResults",
       "sts:SetContext"
     ]
   },
@@ -44,7 +49,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": [
       "aiops:TagResource",
@@ -84,6 +90,25 @@
       "logs:GetQueryResults"
     ]
   },
+  "createreport": {
+    "name": "CreateReport",
+    "description": "Grants permission to create a new report in the specified investigation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "investigation-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt",
+      "kms:GenerateDataKey",
+      "sts:SetContext"
+    ]
+  },
   "deleteinvestigation": {
     "name": "DeleteInvestigation",
     "description": "Grants permission to delete an investigation in the specified investigation group",
@@ -133,6 +158,67 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "generatereport": {
+    "name": "GenerateReport",
+    "description": "Grants permission to generate a report in the specified investigation report",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "investigation-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt",
+      "kms:GenerateDataKey",
+      "sts:SetContext"
+    ]
+  },
+  "getephemeralinvestigationresults": {
+    "name": "GetEphemeralInvestigationResults",
+    "description": "Grants permission to run and retrieve ephemeral investigation results",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getfact": {
+    "name": "GetFact",
+    "description": "Grants permission to retrieve a fact in the specified investigation report",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "investigation-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "getfactversions": {
+    "name": "GetFactVersions",
+    "description": "Grants permission to retrieve all versions of a fact token in the specified investigation report",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "investigation-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "getinvestigation": {
     "name": "GetInvestigation",
     "description": "Grants permission to retrieve an investigation in the specified investigation group",
@@ -212,6 +298,40 @@
       "kms:Decrypt"
     ]
   },
+  "getreport": {
+    "name": "GetReport",
+    "description": "Grants permission to retrieve a report in the specified investigation",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "investigation-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "listfacts": {
+    "name": "ListFacts",
+    "description": "Grants permission to list all facts in the specified investigation report",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "investigation-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "listinvestigationevents": {
     "name": "ListInvestigationEvents",
     "description": "Grants permission to list all investigation events in the specified investigation group",
@@ -250,6 +370,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listreports": {
+    "name": "ListReports",
+    "description": "Grants permission to list all reports in the specified investigation",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "investigation-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list the tags for the specified resource",
@@ -265,6 +400,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putfact": {
+    "name": "PutFact",
+    "description": "Grants permission to create or update a new fact in the specified investigation report",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "investigation-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt",
+      "kms:GenerateDataKey",
+      "sts:SetContext"
+    ]
+  },
   "putinvestigationgrouppolicy": {
     "name": "PutInvestigationGroupPolicy",
     "description": "Grants permission to create/update the investigation group policy attached to an investigation group",
@@ -380,5 +534,39 @@
       "sso:PutApplicationGrant",
       "sso:TagResource"
     ]
+  },
+  "updatereport": {
+    "name": "UpdateReport",
+    "description": "Grants permission to update a report in the specified investigation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "investigation-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt",
+      "kms:GenerateDataKey",
+      "sts:SetContext"
+    ]
+  },
+  "validateinvestigationgroup": {
+    "name": "ValidateInvestigationGroup",
+    "description": "Grants permission to validate the specified investigation group",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "investigation-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

iamdata/data/actions/airflow-serverless.json

@@ -0,0 +1,225 @@
+{
+  "createworkflow": {
+    "name": "CreateWorkflow",
+    "description": "Grants permission to create a new workflow",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "deleteworkflow": {
+    "name": "DeleteWorkflow",
+    "description": "Grants permission to delete a workflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gettaskinstance": {
+    "name": "GetTaskInstance",
+    "description": "Grants permission to retrieve the task details for a workflow run",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getworkflow": {
+    "name": "GetWorkflow",
+    "description": "Grants permission to retrieve details about a workflow",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getworkflowrun": {
+    "name": "GetWorkflowRun",
+    "description": "Grants permission to retrieve details about a workflow run",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list the tags for the specified resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "listtaskinstances": {
+    "name": "ListTaskInstances",
+    "description": "Grants permission to list the tasks for a workflow run",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listworkflowruns": {
+    "name": "ListWorkflowRuns",
+    "description": "Grants permission to list the workflow runs of a workflow",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listworkflowversions": {
+    "name": "ListWorkflowVersions",
+    "description": "Grants permission to list the workflow versions",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listworkflows": {
+    "name": "ListWorkflows",
+    "description": "Grants permission to list the workflows",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startworkflowrun": {
+    "name": "StartWorkflowRun",
+    "description": "Grants permission to start an on-demand workflow run for the workflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopworkflowrun": {
+    "name": "StopWorkflowRun",
+    "description": "Grants permission to stop a workflow run",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to tag the specified resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to untag the specified resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "updateworkflow": {
+    "name": "UpdateWorkflow",
+    "description": "Grants permission to update an existing workflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Workflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

iamdata/data/actions/amplify.json

@@ -18,14 +18,7 @@
     "name": "CreateApp",
     "description": "Grants permission to create a new Amplify App",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "apps",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -92,10 +85,7 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "createwebhook": {

iamdata/data/actions/aoss.json

@@ -22,7 +22,9 @@
     "description": "Grants permission to get attributes for one or more collections",
     "accessLevel": "Read",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aoss:collection"
+    ],
     "dependentActions": []
   },
   "batchgeteffectivelifecyclepolicy": {
@@ -67,17 +69,25 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
   },
+  "createindex": {
+    "name": "CreateIndex",
+    "description": "Grants permission to create an opensearch index",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createlifecyclepolicy": {
     "name": "CreateLifecyclePolicy",
     "description": "Grants permission to create a lifecycle policy",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aoss:collection",
       "aoss:index"
     ],
     "dependentActions": []
@@ -152,13 +162,20 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteindex": {
+    "name": "DeleteIndex",
+    "description": "Grants permission to delete an opensearch index",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletelifecyclepolicy": {
     "name": "DeleteLifecyclePolicy",
     "description": "Grants permission to delete a lifecycle policy",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aoss:collection",
       "aoss:index"
     ],
     "dependentActions": []
@@ -208,6 +225,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getindex": {
+    "name": "GetIndex",
+    "description": "Grants permission to get an opensearch index",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getpoliciesstats": {
     "name": "GetPoliciesStats",
     "description": "Grants permission to get statistis about the security policies in your account",
@@ -346,13 +371,20 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateindex": {
+    "name": "UpdateIndex",
+    "description": "Grants permission to update an opensearch index",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatelifecyclepolicy": {
     "name": "UpdateLifecyclePolicy",
     "description": "Grants permission to update a lifecycle policy",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aoss:collection",
       "aoss:index"
     ],
     "dependentActions": []