iamdata 0.1.202505111__py3-none-any.whl → 0.1.202511181__py3-none-any.whl

iamdata/data/actions/sso.json

@@ -6,7 +6,9 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": [
-      "ds:AuthorizeApplication"
+      "ds:AuthorizeApplication",
+      "identitystore:CreateIdentityStore",
+      "kms:Decrypt"
     ]
   },
   "associateprofile": {
@@ -15,7 +17,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "attachcustomermanagedpolicyreferencetopermissionset": {
     "name": "AttachCustomerManagedPolicyReferenceToPermissionSet",
@@ -26,7 +30,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -47,7 +53,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -68,7 +76,9 @@
         "name": "Account",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Instance",
@@ -95,7 +105,9 @@
         "name": "ApplicationProvider",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Instance",
@@ -119,7 +131,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -133,7 +147,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "createapplicationinstancecertificate": {
     "name": "CreateApplicationInstanceCertificate",
@@ -141,7 +157,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "createinstance": {
     "name": "CreateInstance",
@@ -154,6 +172,7 @@
         "conditionKeys": [],
         "dependentActions": [
           "iam:CreateServiceLinkedRole",
+          "identitystore:CreateIdentityStore",
           "organizations:DescribeOrganization"
         ]
       }
@@ -187,7 +206,8 @@
       "iam:ListAttachedRolePolicies",
       "iam:ListRolePolicies",
       "iam:PutRolePolicy",
-      "iam:UpdateAssumeRolePolicy"
+      "iam:UpdateAssumeRolePolicy",
+      "kms:Decrypt"
     ]
   },
   "createmanagedapplicationinstance": {
@@ -196,7 +216,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "createpermissionset": {
     "name": "CreatePermissionSet",
@@ -207,7 +229,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -228,7 +252,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "createtrust": {
     "name": "CreateTrust",
@@ -236,7 +262,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "createtrustedtokenissuer": {
     "name": "CreateTrustedTokenIssuer",
@@ -247,7 +275,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -265,7 +295,9 @@
         "name": "Account",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Instance",
@@ -292,7 +324,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -309,7 +343,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -326,7 +362,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -343,7 +381,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -360,7 +400,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -374,7 +416,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "deleteapplicationinstancecertificate": {
     "name": "DeleteApplicationInstanceCertificate",
@@ -382,7 +426,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "deleteinlinepolicyfrompermissionset": {
     "name": "DeleteInlinePolicyFromPermissionSet",
@@ -393,7 +439,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -418,7 +466,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "identitystore:DeleteIdentityStore"
+    ]
   },
   "deleteinstanceaccesscontrolattributeconfiguration": {
     "name": "DeleteInstanceAccessControlAttributeConfiguration",
@@ -433,7 +483,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "deletemanagedapplicationinstance": {
     "name": "DeleteManagedApplicationInstance",
@@ -441,7 +493,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "deletepermissionset": {
     "name": "DeletePermissionSet",
@@ -452,7 +506,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -473,7 +529,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -485,21 +543,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deletepermissionspolicy": {
-    "name": "DeletePermissionsPolicy",
-    "description": "Grants permission to delete the permission policy associated with a permission set",
-    "accessLevel": "Permissions management",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deleteprofile": {
     "name": "DeleteProfile",
     "description": "Grants permission to delete the profile for an application instance",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "deletetrustedtokenissuer": {
     "name": "DeleteTrustedTokenIssuer",
@@ -514,7 +566,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "describeaccountassignmentcreationstatus": {
     "name": "DescribeAccountAssignmentCreationStatus",
@@ -529,7 +583,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "describeaccountassignmentdeletionstatus": {
     "name": "DescribeAccountAssignmentDeletionStatus",
@@ -544,7 +600,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "describeapplication": {
     "name": "DescribeApplication",
@@ -555,7 +613,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -572,7 +632,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -595,14 +657,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describedirectories": {
-    "name": "DescribeDirectories",
-    "description": "Grants permission to obtain information about the directories for this account",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describeinstance": {
     "name": "DescribeInstance",
     "description": "Grants permission to obtain information about an identity center instance",
@@ -631,7 +685,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "describepermissionset": {
     "name": "DescribePermissionSet",
@@ -642,7 +698,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -667,15 +725,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
-  },
-  "describepermissionspolicies": {
-    "name": "DescribePermissionsPolicies",
-    "description": "Grants permission to retrieve all the permissions policies associated with a permission set",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "describeregisteredregions": {
     "name": "DescribeRegisteredRegions",
@@ -698,15 +750,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
-  },
-  "describetrusts": {
-    "name": "DescribeTrusts",
-    "description": "Grants permission to obtain information about the trust relationships for this account",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "detachcustomermanagedpolicyreferencefrompermissionset": {
     "name": "DetachCustomerManagedPolicyReferenceFromPermissionSet",
@@ -717,7 +763,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -738,7 +786,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -757,7 +807,9 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": [
-      "ds:UnauthorizeApplication"
+      "ds:UnauthorizeApplication",
+      "identitystore:DeleteIdentityStore",
+      "kms:Decrypt"
     ]
   },
   "disassociateprofile": {
@@ -766,7 +818,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "getapplicationaccessscope": {
     "name": "GetApplicationAccessScope",
@@ -777,7 +831,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -794,7 +850,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -811,7 +869,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -828,7 +888,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -842,6 +904,27 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "getapplicationsessionconfiguration": {
+    "name": "GetApplicationSessionConfiguration",
+    "description": "Grants permission to get session configuration for an application",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "sso:ApplicationAccount"
+    ],
     "dependentActions": []
   },
   "getapplicationtemplate": {
@@ -861,7 +944,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -879,7 +964,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "getmfadevicemanagementfordirectory": {
     "name": "GetMfaDeviceManagementForDirectory",
@@ -887,7 +974,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "getpermissionset": {
     "name": "GetPermissionSet",
@@ -895,7 +984,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "getpermissionsboundaryforpermissionset": {
     "name": "GetPermissionsBoundaryForPermissionSet",
@@ -906,7 +997,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -918,23 +1011,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getpermissionspolicy": {
-    "name": "GetPermissionsPolicy",
-    "description": "Grants permission to retrieve all permission policies associated with a permission set",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": [
-      "sso:DescribePermissionsPolicies"
-    ]
-  },
   "getprofile": {
     "name": "GetProfile",
     "description": "Grants permission to retrieve a profile for an application instance",
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "getssostatus": {
     "name": "GetSSOStatus",
@@ -950,7 +1035,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "getssoconfiguration": {
     "name": "GetSsoConfiguration",
@@ -958,7 +1045,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "gettrust": {
     "name": "GetTrust",
@@ -966,7 +1055,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "importapplicationinstanceserviceprovidermetadata": {
     "name": "ImportApplicationInstanceServiceProviderMetadata",
@@ -974,7 +1065,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listaccountassignmentcreationstatus": {
     "name": "ListAccountAssignmentCreationStatus",
@@ -989,7 +1082,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listaccountassignmentdeletionstatus": {
     "name": "ListAccountAssignmentDeletionStatus",
@@ -1004,7 +1099,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listaccountassignments": {
     "name": "ListAccountAssignments",
@@ -1015,7 +1112,9 @@
         "name": "Account",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Instance",
@@ -1046,7 +1145,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listaccountsforprovisionedpermissionset": {
     "name": "ListAccountsForProvisionedPermissionSet",
@@ -1057,7 +1158,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -1078,7 +1181,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1095,7 +1200,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1112,7 +1219,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1129,7 +1238,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1146,7 +1257,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1160,7 +1273,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listapplicationinstances": {
     "name": "ListApplicationInstances",
@@ -1169,6 +1284,7 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": [
+      "kms:Decrypt",
       "sso:GetApplicationInstance"
     ]
   },
@@ -1203,7 +1319,9 @@
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listcustomermanagedpolicyreferencesinpermissionset": {
     "name": "ListCustomerManagedPolicyReferencesInPermissionSet",
@@ -1214,7 +1332,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -1232,7 +1352,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listinstances": {
     "name": "ListInstances",
@@ -1251,7 +1373,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -1276,7 +1400,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listpermissionsets": {
     "name": "ListPermissionSets",
@@ -1291,7 +1417,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listpermissionsetsprovisionedtoaccount": {
     "name": "ListPermissionSetsProvisionedToAccount",
@@ -1302,7 +1430,9 @@
         "name": "Account",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Instance",
@@ -1320,7 +1450,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listprofiles": {
     "name": "ListProfiles",
@@ -1329,6 +1461,7 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": [
+      "kms:Decrypt",
       "sso:GetProfile"
     ]
   },
@@ -1341,7 +1474,9 @@
         "name": "Application",
         "required": false,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Instance",
@@ -1378,7 +1513,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "provisionpermissionset": {
     "name": "ProvisionPermissionSet",
@@ -1389,7 +1526,9 @@
         "name": "Account",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Instance",
@@ -1416,7 +1555,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1433,7 +1574,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1450,7 +1593,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1467,7 +1612,28 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "sso:ApplicationAccount"
+    ],
+    "dependentActions": []
+  },
+  "putapplicationsessionconfiguration": {
+    "name": "PutApplicationSessionConfiguration",
+    "description": "Grants permission to put session configuration for an application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1484,7 +1650,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -1502,7 +1670,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "putpermissionsboundarytopermissionset": {
     "name": "PutPermissionsBoundaryToPermissionSet",
@@ -1513,7 +1683,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -1531,7 +1703,9 @@
     "accessLevel": "Permissions management",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "searchgroups": {
     "name": "SearchGroups",
@@ -1540,7 +1714,8 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": [
-      "ds:DescribeDirectories"
+      "ds:DescribeDirectories",
+      "kms:Decrypt"
     ]
   },
   "searchusers": {
@@ -1550,7 +1725,8 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": [
-      "ds:DescribeDirectories"
+      "ds:DescribeDirectories",
+      "kms:Decrypt"
     ]
   },
   "startsso": {
@@ -1560,6 +1736,10 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": [
+      "kms:Decrypt",
+      "kms:DescribeKey",
+      "kms:Encrypt",
+      "kms:GenerateDataKeyWithoutPlaintext",
       "organizations:DescribeOrganization",
       "organizations:EnableAWSServiceAccess"
     ]
@@ -1573,7 +1753,9 @@
         "name": "Application",
         "required": false,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Instance",
@@ -1609,7 +1791,9 @@
         "name": "Application",
         "required": false,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Instance",
@@ -1644,7 +1828,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1658,7 +1844,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updateapplicationinstancedisplaydata": {
     "name": "UpdateApplicationInstanceDisplayData",
@@ -1666,7 +1854,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updateapplicationinstanceresponseconfiguration": {
     "name": "UpdateApplicationInstanceResponseConfiguration",
@@ -1674,7 +1864,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updateapplicationinstanceresponseschemaconfiguration": {
     "name": "UpdateApplicationInstanceResponseSchemaConfiguration",
@@ -1682,7 +1874,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updateapplicationinstancesecurityconfiguration": {
     "name": "UpdateApplicationInstanceSecurityConfiguration",
@@ -1690,7 +1884,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updateapplicationinstanceserviceproviderconfiguration": {
     "name": "UpdateApplicationInstanceServiceProviderConfiguration",
@@ -1698,7 +1894,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updateapplicationinstancestatus": {
     "name": "UpdateApplicationInstanceStatus",
@@ -1706,15 +1904,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
-  },
-  "updatedirectoryassociation": {
-    "name": "UpdateDirectoryAssociation",
-    "description": "Grants permission to update the user attribute mappings for your connected directory",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updateinstance": {
     "name": "UpdateInstance",
@@ -1729,7 +1921,13 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "identitystore:UpdateIdentityStore",
+      "kms:Decrypt",
+      "kms:DescribeKey",
+      "kms:Encrypt",
+      "kms:GenerateDataKeyWithoutPlaintext"
+    ]
   },
   "updateinstanceaccesscontrolattributeconfiguration": {
     "name": "UpdateInstanceAccessControlAttributeConfiguration",
@@ -1744,7 +1942,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updatemanagedapplicationinstancestatus": {
     "name": "UpdateManagedApplicationInstanceStatus",
@@ -1752,7 +1952,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updatepermissionset": {
     "name": "UpdatePermissionSet",
@@ -1763,7 +1965,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -1781,7 +1985,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updatessoconfiguration": {
     "name": "UpdateSSOConfiguration",
@@ -1789,7 +1995,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updatetrust": {
     "name": "UpdateTrust",
@@ -1797,7 +2005,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updatetrustedtokenissuer": {
     "name": "UpdateTrustedTokenIssuer",
@@ -1812,6 +2022,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   }
 }