iamdata 0.1.202505111__py3-none-any.whl → 0.1.202511181__py3-none-any.whl

iamdata/data/actions/sso-directory.json

@@ -5,7 +5,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "completevirtualmfadeviceregistration": {
     "name": "CompleteVirtualMfaDeviceRegistration",
@@ -37,7 +39,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "createexternalidpconfigurationfordirectory": {
     "name": "CreateExternalIdPConfigurationForDirectory",
@@ -53,7 +57,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "createprovisioningtenant": {
     "name": "CreateProvisioningTenant",
@@ -61,7 +67,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "createuser": {
     "name": "CreateUser",
@@ -69,7 +77,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "deletebearertoken": {
     "name": "DeleteBearerToken",
@@ -77,7 +87,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "deleteexternalidpcertificate": {
     "name": "DeleteExternalIdPCertificate",
@@ -101,7 +113,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "deletemfadeviceforuser": {
     "name": "DeleteMfaDeviceForUser",
@@ -117,7 +131,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "deleteuser": {
     "name": "DeleteUser",
@@ -125,7 +141,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "describedirectory": {
     "name": "DescribeDirectory",
@@ -141,7 +159,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "describegroups": {
     "name": "DescribeGroups",
@@ -149,7 +169,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "describeprovisioningtenant": {
     "name": "DescribeProvisioningTenant",
@@ -157,7 +179,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "describeuser": {
     "name": "DescribeUser",
@@ -165,7 +189,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "describeuserbyuniqueattribute": {
     "name": "DescribeUserByUniqueAttribute",
@@ -173,7 +199,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "describeusers": {
     "name": "DescribeUsers",
@@ -181,7 +209,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "disableexternalidpconfigurationfordirectory": {
     "name": "DisableExternalIdPConfigurationForDirectory",
@@ -197,7 +227,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "enableexternalidpconfigurationfordirectory": {
     "name": "EnableExternalIdPConfigurationForDirectory",
@@ -213,7 +245,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "getawsspconfigurationfordirectory": {
     "name": "GetAWSSPConfigurationForDirectory",
@@ -229,7 +263,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "getuserid": {
     "name": "GetUserId",
@@ -237,7 +273,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "getuserpoolinfo": {
     "name": "GetUserPoolInfo",
@@ -261,7 +299,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "ismemberingroups": {
     "name": "IsMemberInGroups",
@@ -269,7 +309,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listbearertokens": {
     "name": "ListBearerTokens",
@@ -277,7 +319,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listexternalidpcertificates": {
     "name": "ListExternalIdPCertificates",
@@ -301,7 +345,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listgroupsformember": {
     "name": "ListGroupsForMember",
@@ -309,7 +355,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listgroupsforuser": {
     "name": "ListGroupsForUser",
@@ -317,7 +365,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listmembersingroup": {
     "name": "ListMembersInGroup",
@@ -325,7 +375,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listmfadevicesforuser": {
     "name": "ListMfaDevicesForUser",
@@ -341,7 +393,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listusers": {
     "name": "ListUsers",
@@ -349,7 +403,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "removememberfromgroup": {
     "name": "RemoveMemberFromGroup",
@@ -357,7 +413,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "searchgroups": {
     "name": "SearchGroups",
@@ -365,7 +423,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "searchusers": {
     "name": "SearchUsers",
@@ -373,7 +433,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "startvirtualmfadeviceregistration": {
     "name": "StartVirtualMfaDeviceRegistration",
@@ -405,7 +467,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updategroupdisplayname": {
     "name": "UpdateGroupDisplayName",
@@ -413,7 +477,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updatemfadeviceforuser": {
     "name": "UpdateMfaDeviceForUser",
@@ -429,7 +495,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updateuser": {
     "name": "UpdateUser",
@@ -437,7 +505,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updateusername": {
     "name": "UpdateUserName",
@@ -445,7 +515,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "verifyemail": {
     "name": "VerifyEmail",

iamdata/data/actions/sso-oauth.json

@@ -1,7 +1,7 @@
 {
   "createtokenwithiam": {
     "name": "CreateTokenWithIAM",
-    "description": "Grants permission to create OAuth/OIDC tokens to access IAM Identity Center integrated applications",
+    "description": "Grants permission to create and return OAuth 2.0 access tokens and refresh tokens for authorized client applications. These tokens might contain defined scopes that specify permissions such as `read:profile` or `write:data`",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -12,6 +12,44 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "introspecttokenwithiam": {
+    "name": "IntrospectTokenWithIAM",
+    "isPermissionOnly": true,
+    "description": "Grants permission to validate and retrieve information about active OAuth 2.0 access tokens and refresh tokens, including their associated scopes and permissions. This permission is used only by AWS managed applications and is not documented in the IAM Identity Center OIDC API Reference",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "revoketokenwithiam": {
+    "name": "RevokeTokenWithIAM",
+    "isPermissionOnly": true,
+    "description": "Grants permission to revoke OAuth 2.0 access tokens and refresh tokens, invalidating them before their normal expiration. This permission is used only by AWS managed applications and is not documented in the IAM Identity Center OIDC API Reference",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   }
 }