iamdata 0.1.202505111__py3-none-any.whl → 0.1.202511181__py3-none-any.whl

iamdata/data/actions/ecs.json

@@ -3,8 +3,18 @@
     "name": "CreateCapacityProvider",
     "description": "Grants permission to create a new capacity provider. Capacity providers are associated with an Amazon ECS cluster and are used in capacity provider strategies to facilitate cluster auto scaling",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "capacity-provider",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
+      "ecs:propagate-tags",
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
@@ -18,7 +28,9 @@
       {
         "name": "cluster",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -68,7 +80,14 @@
     "name": "CreateTaskSet",
     "description": "Grants permission to create a new Amazon ECS task set",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "task-set",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
@@ -682,16 +701,44 @@
       {
         "name": "cluster",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "ecs:capacity-provider"
     ],
     "dependentActions": []
   },
+  "putsystemlogevents": {
+    "name": "PutSystemLogEvents",
+    "description": "Grants permission to collect system logs from the container instances",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "container-instance",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ecs:cluster",
+          "ecs:capacity-provider"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "registercontainerinstance": {
     "name": "RegisterContainerInstance",
     "description": "Grants permission to register an EC2 instance into the specified cluster",
@@ -700,13 +747,14 @@
       {
         "name": "cluster",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -1022,6 +1070,7 @@
       }
     ],
     "conditionKeys": [
+      "ecs:propagate-tags",
       "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
@@ -1034,12 +1083,13 @@
       {
         "name": "cluster",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "ecs:fargate-ephemeral-storage-kms-key"
     ],
     "dependentActions": []

iamdata/data/actions/eks-mcp.json

@@ -0,0 +1,26 @@
+{
+  "callprivilegedtool": {
+    "name": "CallPrivilegedTool",
+    "description": "Grants permission to call privileged tools in MCP service",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "callreadonlytool": {
+    "name": "CallReadOnlyTool",
+    "description": "Grants permission to call read-only tools in MCP service",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invokemcp": {
+    "name": "InvokeMcp",
+    "description": "Grants permission to use MCP service",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

iamdata/data/actions/eks.json

@@ -129,7 +129,8 @@
       "eks:supportType",
       "eks:computeConfigEnabled",
       "eks:elasticLoadBalancingEnabled",
-      "eks:blockStorageEnabled"
+      "eks:blockStorageEnabled",
+      "eks:loggingType/${type}"
     ],
     "dependentActions": []
   },
@@ -453,6 +454,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeinsightsrefresh": {
+    "name": "DescribeInsightsRefresh",
+    "description": "Grants permission to retrieve the status of the latest on-demand cluster insights refresh operation",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describenodegroup": {
     "name": "DescribeNodegroup",
     "description": "Grants permission to retrieve descriptive information about an Amazon EKS nodegroup",
@@ -605,6 +621,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdashboarddata": {
+    "name": "ListDashboardData",
+    "description": "Grants permission to list dashboard data. The Amazon EKS Dashboard aggregates information about cluster resources across multiple accounts and regions. The dashboard includes information about EC2 Instances and EKS Cluster versions",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "dashboard",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listdashboardresources": {
+    "name": "ListDashboardResources",
+    "description": "Grants permission to list dashboard resources. The Amazon EKS Dashboard aggregates information about cluster resources across multiple accounts and regions. The dashboard includes information about EC2 Instances and EKS Cluster versions",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "dashboard",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listeksanywheresubscriptions": {
     "name": "ListEksAnywhereSubscriptions",
     "description": "Grants permission to list EKS Anywhere subscriptions",
@@ -705,6 +751,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "dashboard",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "eks-anywhere-subscription",
         "required": false,
@@ -760,6 +812,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "mutateviakubernetesapi": {
+    "name": "MutateViaKubernetesApi",
+    "isPermissionOnly": true,
+    "description": "Grants permission to modify Kubernetes objects via AWS console",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "eks:AccessKubernetesApi"
+    ]
+  },
   "registercluster": {
     "name": "RegisterCluster",
     "description": "Grants permission to register an External cluster",
@@ -771,6 +841,21 @@
     ],
     "dependentActions": []
   },
+  "startinsightsrefresh": {
+    "name": "StartInsightsRefresh",
+    "description": "Grants permission to initiate an on-demand refresh operation for cluster insights, getting the latest analysis outside of the standard refresh schedule",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag the specified resource",
@@ -794,6 +879,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "dashboard",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "eks-anywhere-subscription",
         "required": false,
@@ -854,6 +945,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "dashboard",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "eks-anywhere-subscription",
         "required": false,
@@ -943,7 +1040,8 @@
       "eks:supportType",
       "eks:computeConfigEnabled",
       "eks:elasticLoadBalancingEnabled",
-      "eks:blockStorageEnabled"
+      "eks:blockStorageEnabled",
+      "eks:loggingType/${type}"
     ],
     "dependentActions": []
   },

iamdata/data/actions/elasticloadbalancing.json

@@ -62,6 +62,15 @@
     ],
     "dependentActions": []
   },
+  "allowvendedlogdeliveryforresource": {
+    "name": "AllowVendedLogDeliveryForResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to configure vended log delivery for load balancers",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createlistener": {
     "name": "CreateListener",
     "description": "Grants permission to create a listener for the specified Application Load Balancer",

iamdata/data/actions/elasticmapreduce.json

@@ -1,4 +1,19 @@
 {
+  "accessalleventlogs": {
+    "name": "AccessAllEventLogs",
+    "description": "Grants permission to view all event logs in a persistent application history server",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "addinstancefleet": {
     "name": "AddInstanceFleet",
     "description": "Grants permission to add an instance fleet to a running cluster",

iamdata/data/actions/emr-containers.json

@@ -16,7 +16,7 @@
   },
   "createcertificate": {
     "name": "CreateCertificate",
-    "description": "Grants permission to create a certificate",
+    "description": "Grants permission to call the CreateCertificate method to accept the CertificateSigningRequest, and return the signed certificate",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -104,6 +104,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletesecurityconfiguration": {
+    "name": "DeleteSecurityConfiguration",
+    "description": "Grants permission to delete a security configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "securityConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletevirtualcluster": {
     "name": "DeleteVirtualCluster",
     "description": "Grants permission to delete a virtual cluster",
@@ -278,6 +293,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "securityConfiguration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "virtualCluster",
         "required": false,
@@ -339,6 +360,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "securityConfiguration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "virtualCluster",
         "required": false,
@@ -375,6 +402,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "securityConfiguration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "virtualCluster",
         "required": false,

iamdata/data/actions/emr-serverless.json

@@ -35,6 +35,22 @@
       "iam:PassRole"
     ]
   },
+  "accesssystemprofilelogs": {
+    "name": "AccessSystemProfileLogs",
+    "isPermissionOnly": true,
+    "description": "Grants permission to access system profile logs",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "jobRun",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "canceljobrun": {
     "name": "CancelJobRun",
     "description": "Grants permission to cancel a job run",

iamdata/data/actions/entityresolution.json

@@ -134,6 +134,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "generatematchid": {
+    "name": "GenerateMatchId",
+    "description": "Grants permission to generate match Id",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "MatchingWorkflow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getidmappingjob": {
     "name": "GetIdMappingJob",
     "description": "Grants permission to get a idmapping job",
@@ -320,14 +335,7 @@
     "name": "ListProviderServices",
     "description": "Grants permission to list provider service",
     "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "ProviderService",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },

iamdata/data/actions/es.json

@@ -216,6 +216,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createindex": {
+    "name": "CreateIndex",
+    "description": "Grants permission to create index for the OpenSearch Service domain",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createoutboundconnection": {
     "name": "CreateOutboundConnection",
     "description": "Grants permission to create a new cross-cluster search connection from a source domain to a destination domain",
@@ -369,6 +384,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteindex": {
+    "name": "DeleteIndex",
+    "description": "Grants permission to delete Index for the OpenSearch Service domain",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteoutboundconnection": {
     "name": "DeleteOutboundConnection",
     "description": "Grants permission to the source domain owner to delete an existing outbound cross-cluster search connection",
@@ -887,6 +917,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getindex": {
+    "name": "GetIndex",
+    "description": "Grants permission to get index for the OpenSearch Service domain",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getpackageversionhistory": {
     "name": "GetPackageVersionHistory",
     "description": "Grants permission to fetch the version history for a package",
@@ -1311,6 +1356,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateindex": {
+    "name": "UpdateIndex",
+    "description": "Grants permission to update index for the OpenSearch Service domain",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatepackage": {
     "name": "UpdatePackage",
     "description": "Grants permission to update a package for use with OpenSearch Service domains",

iamdata/data/actions/events.json

@@ -14,6 +14,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "allowvendedlogdeliveryforresource": {
+    "name": "AllowVendedLogDeliveryForResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to configure vended log delivery for EventBridge",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "event-bus",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "cancelreplay": {
     "name": "CancelReplay",
     "description": "Grants permission to cancel a replay",
@@ -66,6 +82,18 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "alias",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "key",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -900,6 +928,18 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "alias",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "key",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],