iamdata 0.1.202505111__py3-none-any.whl → 0.1.202511181__py3-none-any.whl

iamdata/data/actions/one.json

@@ -287,6 +287,14 @@
     ],
     "dependentActions": []
   },
+  "listusers": {
+    "name": "ListUsers",
+    "description": "Grants permission to view list of Users",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listusersv1": {
     "name": "ListUsersV1",
     "description": "Grants permission to view list of Users",

iamdata/data/actions/organizations.json

@@ -289,7 +289,7 @@
   },
   "describeorganization": {
     "name": "DescribeOrganization",
-    "description": "Grants permission to retrieves details about the organization that the calling credentials belong to",
+    "description": "Grants permission to retrieve details about the organization that the calling credentials belong to",
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -312,7 +312,7 @@
   },
   "describepolicy": {
     "name": "DescribePolicy",
-    "description": "Grants permission to retrieves details about a policy",
+    "description": "Grants permission to retrieve details about a policy",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -468,7 +468,7 @@
   },
   "listaccounts": {
     "name": "ListAccounts",
-    "description": "Grants permission to list all of the the accounts in the organization",
+    "description": "Grants permission to list all of the accounts in the organization",
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -495,6 +495,16 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listaccountswithinvalideffectivepolicy": {
+    "name": "ListAccountsWithInvalidEffectivePolicy",
+    "description": "Grants permission to list accounts that have invalid effective policies for a specified policy type",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "organizations:PolicyType"
+    ],
+    "dependentActions": []
+  },
   "listchildren": {
     "name": "ListChildren",
     "description": "Grants permission to list all of the OUs or accounts that are contained in a parent OU or root",
@@ -549,6 +559,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listeffectivepolicyvalidationerrors": {
+    "name": "ListEffectivePolicyValidationErrors",
+    "description": "Grants permission to list validation errors found in the effective policy for a specific account and policy type",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "account",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "organizations:PolicyType"
+    ],
+    "dependentActions": []
+  },
   "listhandshakesforaccount": {
     "name": "ListHandshakesForAccount",
     "description": "Grants permission to list all of the handshakes that are associated with an account",
@@ -567,7 +594,7 @@
   },
   "listorganizationalunitsforparent": {
     "name": "ListOrganizationalUnitsForParent",
-    "description": "Grants permission to lists all of the organizational units (OUs) in a parent organizational unit or root",
+    "description": "Grants permission to list all of the organizational units (OUs) in a parent organizational unit or root",
     "accessLevel": "List",
     "resourceTypes": [
       {
@@ -690,7 +717,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "organizations:PolicyType"
+    ],
     "dependentActions": []
   },
   "listtargetsforpolicy": {
@@ -774,7 +803,7 @@
   },
   "removeaccountfromorganization": {
     "name": "RemoveAccountFromOrganization",
-    "description": "Grants permission to removes the specified account from the organization",
+    "description": "Grants permission to remove the specified account from the organization",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -827,7 +856,8 @@
     ],
     "conditionKeys": [
       "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "organizations:PolicyType"
     ],
     "dependentActions": []
   },
@@ -868,7 +898,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "organizations:PolicyType"
     ],
     "dependentActions": []
   },

iamdata/data/actions/osis.json

@@ -16,6 +16,26 @@
       "logs:CreateLogDelivery"
     ]
   },
+  "createpipelineendpoint": {
+    "name": "CreatePipelineEndpoint",
+    "description": "Grants permission to create an OpenSearch Ingestion pipeline endpoint",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "pipeline",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:CreateServiceLinkedRole"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deletepipeline": {
     "name": "DeletePipeline",
     "description": "Grants permission to delete an OpenSearch Ingestion pipeline",
@@ -35,6 +55,36 @@
       "logs:ListLogDeliveries"
     ]
   },
+  "deletepipelineendpoint": {
+    "name": "DeletePipelineEndpoint",
+    "description": "Grants permission to delete an OpenSearch Ingestion pipeline endpoint in the current account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "pipeline-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteresourcepolicy": {
+    "name": "DeleteResourcePolicy",
+    "description": "Grants permission to delete a resource policy for an OpenSearch Ingestion resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "pipeline",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getpipeline": {
     "name": "GetPipeline",
     "description": "Grants permission to retrieve configuration information for an OpenSearch Ingestion pipeline",
@@ -80,6 +130,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getresourcepolicy": {
+    "name": "GetResourcePolicy",
+    "description": "Grants permission to get a resource policy for an OpenSearch Ingestion resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "pipeline",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "ingest": {
     "name": "Ingest",
     "description": "Grants permission to ingest data through an OpenSearch Ingestion pipeline",
@@ -103,6 +168,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listpipelineendpointconnections": {
+    "name": "ListPipelineEndpointConnections",
+    "description": "Grants permission to list OpenSearch Ingestion pipeline endpoint connections to pipelines in the current account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listpipelineendpoints": {
+    "name": "ListPipelineEndpoints",
+    "description": "Grants permission to list OpenSearch Ingestion pipeline endpoints in the current account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listpipelines": {
     "name": "ListPipelines",
     "description": "Grants permission to list basic configuration for each OpenSearch Ingestion pipeline in the current account and Region",
@@ -126,6 +207,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putresourcepolicy": {
+    "name": "PutResourcePolicy",
+    "description": "Grants permission to put a resource policy for an OpenSearch Ingestion resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "pipeline",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "revokepipelineendpointconnections": {
+    "name": "RevokePipelineEndpointConnections",
+    "description": "Grants permission to revoke an OpenSearch Ingestion pipeline endpoint connection from a pipeline in the current account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "pipeline",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startpipeline": {
     "name": "StartPipeline",
     "description": "Grants permission to start an OpenSearch Ingestion pipeline",

iamdata/data/actions/outposts.json

@@ -51,6 +51,7 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -59,7 +60,14 @@
     "name": "CreatePrivateConnectivityConfig",
     "description": "Grants permission to create a private connectivity configuration",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "outpost",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -70,6 +78,7 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -158,6 +167,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getoutpostbillinginformation": {
+    "name": "GetOutpostBillingInformation",
+    "description": "Grants permission to get Outpost billing information for the specified Outpost",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "outpost",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getoutpostinstancetypes": {
     "name": "GetOutpostInstanceTypes",
     "description": "Grants permission to get the instance types for the specified Outpost",
@@ -192,7 +216,14 @@
     "name": "GetPrivateConnectivityConfig",
     "description": "Grants permission to get a private connectivity configuration",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "outpost",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -245,7 +276,14 @@
     "name": "ListAssets",
     "description": "Grants permission to list the assets for your Outpost",
     "accessLevel": "List",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "outpost",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },

iamdata/data/actions/partnercentral.json

@@ -55,7 +55,14 @@
     "name": "CreateEngagement",
     "description": "Grants permission to creating engagements in AWS Partner Central",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "Engagement",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "partnercentral:Catalog"
     ],
@@ -65,7 +72,14 @@
     "name": "CreateEngagementInvitation",
     "description": "Grants permission to creating engagement invitations in AWS Partner Central",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "engagement-invitation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "partnercentral:Catalog"
     ],
@@ -75,8 +89,17 @@
     "name": "CreateOpportunity",
     "description": "Grants permission to create new Opportunities on AWS Partner Central",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "Opportunity",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
       "partnercentral:Catalog"
     ],
     "dependentActions": []
@@ -102,7 +125,14 @@
     "name": "CreateResourceSnapshotJob",
     "description": "Grants permission to creating resource snapshot jobs in AWS Partner Central",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "resource-snapshot-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
@@ -123,8 +153,6 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "aws:TagKeys",
       "partnercentral:Catalog"
     ],
     "dependentActions": []
@@ -245,8 +273,6 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "aws:TagKeys",
       "partnercentral:Catalog"
     ],
     "dependentActions": []
@@ -423,39 +449,55 @@
     "name": "StartEngagementByAcceptingInvitationTask",
     "description": "Grants permission to initiate tasks that start Engagements on AWS Partner Central by accepting an Engagement Invitation",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "engagement-by-accepting-invitation-task",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "partnercentral:AcceptEngagementInvitation",
+          "partnercentral:CreateOpportunity",
+          "partnercentral:CreateResourceSnapshotJob",
+          "partnercentral:GetEngagementInvitation",
+          "partnercentral:StartResourceSnapshotJob",
+          "partnercentral:SubmitOpportunity"
+        ]
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "partnercentral:Catalog"
     ],
-    "dependentActions": [
-      "partnercentral:AcceptEngagementInvitation",
-      "partnercentral:CreateOpportunity",
-      "partnercentral:CreateResourceSnapshotJob",
-      "partnercentral:GetEngagementInvitation",
-      "partnercentral:StartResourceSnapshotJob",
-      "partnercentral:SubmitOpportunity"
-    ]
+    "dependentActions": []
   },
   "startengagementfromopportunitytask": {
     "name": "StartEngagementFromOpportunityTask",
     "description": "Grants permission to initiate tasks that start Engagements from Opportunities on AWS Partner Central",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "engagement-from-opportunity-task",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "partnercentral:CreateEngagement",
+          "partnercentral:CreateEngagementInvitation",
+          "partnercentral:CreateResourceSnapshotJob",
+          "partnercentral:GetOpportunity",
+          "partnercentral:StartResourceSnapshotJob",
+          "partnercentral:SubmitOpportunity"
+        ]
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "partnercentral:Catalog"
     ],
-    "dependentActions": [
-      "partnercentral:CreateEngagement",
-      "partnercentral:CreateEngagementInvitation",
-      "partnercentral:CreateResourceSnapshotJob",
-      "partnercentral:GetOpportunity",
-      "partnercentral:StartResourceSnapshotJob",
-      "partnercentral:SubmitOpportunity"
-    ]
+    "dependentActions": []
   },
   "startresourcesnapshotjob": {
     "name": "StartResourceSnapshotJob",
@@ -470,8 +512,6 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "aws:TagKeys",
       "partnercentral:Catalog"
     ],
     "dependentActions": []
@@ -489,8 +529,6 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "aws:TagKeys",
       "partnercentral:Catalog"
     ],
     "dependentActions": []
@@ -516,7 +554,20 @@
     "name": "TagResource",
     "description": "Grants permission to add new tags to a resource. Supported resource: ResourceSnapshotJob",
     "accessLevel": "Tagging",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "Opportunity",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "resource-snapshot-job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:ResourceTag/${TagKey}",
@@ -529,7 +580,20 @@
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a resource. Supported resource: ResourceSnapshotJob",
     "accessLevel": "Tagging",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "Opportunity",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "resource-snapshot-job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",

iamdata/data/actions/pcs.json

@@ -2,7 +2,7 @@
   "allowvendedlogdeliveryforresource": {
     "name": "AllowVendedLogDeliveryForResource",
     "isPermissionOnly": true,
-    "description": "Grants permission to configure vended log delivery for Skybridge cluster logs",
+    "description": "Grants permission to configure vended log delivery for AWS PCS cluster logs",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -347,6 +347,32 @@
     ],
     "dependentActions": []
   },
+  "updatecluster": {
+    "name": "UpdateCluster",
+    "description": "Grants permission to update cluster properties",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:CreateNetworkInterface",
+      "ec2:CreateNetworkInterfacePermission",
+      "ec2:DescribeNetworkInterfaces",
+      "ec2:DescribeSecurityGroups",
+      "ec2:DescribeSubnets",
+      "ec2:DescribeVpcs",
+      "ec2:GetSecurityGroupsForVpc",
+      "iam:CreateServiceLinkedRole",
+      "secretsmanager:CreateSecret",
+      "secretsmanager:TagResource"
+    ]
+  },
   "updatecomputenodegroup": {
     "name": "UpdateComputeNodeGroup",
     "description": "Grants permission to update compute node group properties",

iamdata/data/actions/pi.json

@@ -163,6 +163,12 @@
     "description": "Grants permission to call ListTagsForResource API to list tags for a resource",
     "accessLevel": "List",
     "resourceTypes": [
+      {
+        "name": "metric-resource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "perf-reports-resource",
         "required": true,