iamdata 0.1.202505111__py3-none-any.whl → 0.1.202511181__py3-none-any.whl

iamdata/data/actions/s3express.json

@@ -20,7 +20,9 @@
       "s3express:ResourceAccount",
       "s3express:signatureversion",
       "s3express:TlsVersion",
-      "s3express:x-amz-content-sha256"
+      "s3express:x-amz-content-sha256",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -42,13 +44,15 @@
       "s3express:ResourceAccount",
       "s3express:signatureversion",
       "s3express:TlsVersion",
-      "s3express:x-amz-content-sha256"
+      "s3express:x-amz-content-sha256",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "createsession": {
     "name": "CreateSession",
-    "description": "Grants permission to Create Session token which is used for object APIs such as PutObject, GetObject, ect",
+    "description": "Grants permission to Create Session token which is used for object APIs such as PutObject, GetObject, etc",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -56,6 +60,14 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "accesspoint",
+        "required": false,
+        "conditionKeys": [
+          "s3express:Permissions"
+        ],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -68,7 +80,8 @@
       "s3express:x-amz-content-sha256",
       "s3express:x-amz-server-side-encryption",
       "s3express:x-amz-server-side-encryption-aws-kms-key-id",
-      "s3express:AllAccessRestrictedToLocalZoneGroup"
+      "s3express:AllAccessRestrictedToLocalZoneGroup",
+      "s3express:Permissions"
     ],
     "dependentActions": []
   },
@@ -190,7 +203,14 @@
     "name": "GetAccessPoint",
     "description": "Grants permission to return configuration information about the specified access point",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "s3express:DataAccessPointAccount",
       "s3express:DataAccessPointArn",
@@ -342,6 +362,33 @@
     ],
     "dependentActions": []
   },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to lists all of the tags for a specified resource",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "bucket",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "putaccesspointpolicy": {
     "name": "PutAccessPointPolicy",
     "description": "Grants permission to associate an access policy with a specified access point",
@@ -452,5 +499,62 @@
       "s3express:x-amz-content-sha256"
     ],
     "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to create a new user-defined tag or update an existing tag",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "bucket",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove the specified user-defined tags from an S3 resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "bucket",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
   }
 }

iamdata/data/actions/s3tables.json

@@ -29,7 +29,11 @@
     "conditionKeys": [
       "s3tables:namespace",
       "s3tables:SSEAlgorithm",
-      "s3tables:KMSKeyArn"
+      "s3tables:KMSKeyArn",
+      "s3tables:TableBucketTag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -47,7 +51,11 @@
     ],
     "conditionKeys": [
       "s3tables:SSEAlgorithm",
-      "s3tables:KMSKeyArn"
+      "s3tables:KMSKeyArn",
+      "s3tables:TableBucketTag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -393,6 +401,30 @@
     ],
     "dependentActions": []
   },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list the tag for a S3Table's resource",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "TableBucket",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "s3tables:TableBucketTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "puttablebucketencryption": {
     "name": "PutTableBucketEncryption",
     "description": "Grants permission to put or overwrite encryption configuration on a table bucket",
@@ -534,6 +566,57 @@
     ],
     "dependentActions": []
   },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to tag a S3Table's resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "Table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "TableBucket",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "s3tables:TableBucketTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to untag a S3Table's resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "Table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "TableBucket",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:ResourceTag/${TagKey}",
+      "s3tables:TableBucketTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "updatetablemetadatalocation": {
     "name": "UpdateTableMetadataLocation",
     "description": "Grants permission to update the metadata location of a table",

iamdata/data/actions/s3vectors.json

@@ -0,0 +1,242 @@
+{
+  "createindex": {
+    "name": "CreateIndex",
+    "description": "Grants permission to create a new vector index within a specified vector bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createvectorbucket": {
+    "name": "CreateVectorBucket",
+    "description": "Grants permission to create a new vector bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3vectors:sseType",
+      "s3vectors:kmsKeyArn"
+    ],
+    "dependentActions": []
+  },
+  "deleteindex": {
+    "name": "DeleteIndex",
+    "description": "Grants permission to delete a specified vector index",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletevectorbucket": {
+    "name": "DeleteVectorBucket",
+    "description": "Grants permission to delete a specified vector bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletevectorbucketpolicy": {
+    "name": "DeleteVectorBucketPolicy",
+    "description": "Grants permission to delete the IAM resource policy from a specified vector bucket",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletevectors": {
+    "name": "DeleteVectors",
+    "description": "Grants permission to delete a batch of vectors from a specified vector index",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getindex": {
+    "name": "GetIndex",
+    "description": "Grants permission to get the attributes of a specified vector index",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getvectorbucket": {
+    "name": "GetVectorBucket",
+    "description": "Grants permission to get the attributes of a specified vector bucket",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getvectorbucketpolicy": {
+    "name": "GetVectorBucketPolicy",
+    "description": "Grants permission to get the IAM resource policy for a specific vector bucket",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getvectors": {
+    "name": "GetVectors",
+    "description": "Grants permission to get a batch of vectors by their vector keys",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listindexes": {
+    "name": "ListIndexes",
+    "description": "Grants permission to get a paginated list of all indexes in a specified vector bucket",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listvectorbuckets": {
+    "name": "ListVectorBuckets",
+    "description": "Grants permission to get a paginated list of all vector buckets in the account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listvectors": {
+    "name": "ListVectors",
+    "description": "Grants permission to get a paginated list of all vectors in a specified vector index",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "s3vectors:GetVectors"
+    ]
+  },
+  "putvectorbucketpolicy": {
+    "name": "PutVectorBucketPolicy",
+    "description": "Grants permission to add an IAM resource policy to a specified vector bucket",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putvectors": {
+    "name": "PutVectors",
+    "description": "Grants permission to add a batch of vectors to a specified vector index",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "queryvectors": {
+    "name": "QueryVectors",
+    "description": "Grants permission to find approximate nearest neighbors within a specified search vector index for a given query vector",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "s3vectors:GetVectors"
+    ]
+  }
+}

iamdata/data/actions/sagemaker-mlflow.json

@@ -82,6 +82,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteloggedmodel": {
+    "name": "DeleteLoggedModel",
+    "description": "Grants permission to delete a logged model in MLflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteloggedmodeltag": {
+    "name": "DeleteLoggedModelTag",
+    "description": "Grants permission to delete a tag for a logged model in MLflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletemodelversion": {
     "name": "DeleteModelVersion",
     "description": "Grants permission to delete a model version",
@@ -232,6 +262,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "finalizeloggedmodel": {
+    "name": "FinalizeLoggedModel",
+    "description": "Grants permission to set status for a logged model in MLflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdownloaduriformodelversionartifacts": {
     "name": "GetDownloadURIForModelVersionArtifacts",
     "description": "Grants permission to get a URI to download model artifacts for a specific model version",
@@ -292,6 +337,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getloggedmodel": {
+    "name": "GetLoggedModel",
+    "description": "Grants permission to get a logged model in MLflow",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getmetrichistory": {
     "name": "GetMetricHistory",
     "description": "Grants permission to get a list of all values for the specified metric for a given run",
@@ -397,6 +457,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listloggedmodelartifacts": {
+    "name": "ListLoggedModelArtifacts",
+    "description": "Grants permission to list artifacts for a logged model in MLflow",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "logbatch": {
     "name": "LogBatch",
     "description": "Grants permission to log a batch of metrics, parameters, and tags for a run",
@@ -427,6 +502,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "logloggedmodelparams": {
+    "name": "LogLoggedModelParams",
+    "description": "Grants permission to log params for a logged model in MLflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "logmetric": {
     "name": "LogMetric",
     "description": "Grants permission to log a metric for a run",
@@ -457,6 +547,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "logoutputs": {
+    "name": "LogOutputs",
+    "description": "Grants permission to log outputs, such as models, for a run in MLflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "logparam": {
     "name": "LogParam",
     "description": "Grants permission to log a parameter tracked during a run",
@@ -532,6 +637,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "searchloggedmodels": {
+    "name": "SearchLoggedModels",
+    "description": "Grants permission to search for logged models in MLflow",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "searchmodelversions": {
     "name": "SearchModelVersions",
     "description": "Grants permission to search for a model version",
@@ -607,6 +727,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "setloggedmodeltags": {
+    "name": "SetLoggedModelTags",
+    "description": "Grants permission to set tags for a logged model in MLflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "setmodelversiontag": {
     "name": "SetModelVersionTag",
     "description": "Grants permission to set a tag for the model version",