iamdata 0.1.202505111__py3-none-any.whl → 0.1.202512121__py3-none-any.whl

iamdata/data/actions/ecr.json

@@ -203,6 +203,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletesigningconfiguration": {
+    "name": "DeleteSigningConfiguration",
+    "description": "Grants permission to delete the signing configuration for the registry",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deregisterpulltimeupdateexclusion": {
+    "name": "DeregisterPullTimeUpdateExclusion",
+    "description": "Grants permission to deregister a pull time update exclusion",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeimagereplicationstatus": {
     "name": "DescribeImageReplicationStatus",
     "description": "Grants permission to retrieve replication status about an image in a registry, including failure reason if replication fails",
@@ -233,6 +249,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeimagesigningstatus": {
+    "name": "DescribeImageSigningStatus",
+    "description": "Grants permission to retrieve signing status about an image in a specified registry",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeimages": {
     "name": "DescribeImages",
     "description": "Grants permission to get metadata about the images in a repository, including image size, image tags, and creation date",
@@ -397,6 +428,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getsigningconfiguration": {
+    "name": "GetSigningConfiguration",
+    "description": "Grants permission to retrieve the signing configuration for the registry",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "initiatelayerupload": {
     "name": "InitiateLayerUpload",
     "description": "Grants permission to notify Amazon ECR that you intend to upload an image layer",
@@ -427,6 +466,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listpulltimeupdateexclusions": {
+    "name": "ListPullTimeUpdateExclusions",
+    "description": "Grants permission to list pull time update exclusions for the registry",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list the tags for an Amazon ECR resource",
@@ -541,6 +588,22 @@
       "iam:CreateServiceLinkedRole"
     ]
   },
+  "putsigningconfiguration": {
+    "name": "PutSigningConfiguration",
+    "description": "Grants permission to update the signing configuration for the registry",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "registerpulltimeupdateexclusion": {
+    "name": "RegisterPullTimeUpdateExclusion",
+    "description": "Grants permission to register a pull time update exclusion",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "replicateimage": {
     "name": "ReplicateImage",
     "isPermissionOnly": true,
@@ -637,6 +700,21 @@
     ],
     "dependentActions": []
   },
+  "updateimagestorageclass": {
+    "name": "UpdateImageStorageClass",
+    "description": "Grants permission to get update the storage class of a specified image within a specified repository",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatepullthroughcacherule": {
     "name": "UpdatePullThroughCacheRule",
     "description": "Grants permission to update the pull-through cache rule",

iamdata/data/actions/ecs.json

@@ -3,8 +3,18 @@
     "name": "CreateCapacityProvider",
     "description": "Grants permission to create a new capacity provider. Capacity providers are associated with an Amazon ECS cluster and are used in capacity provider strategies to facilitate cluster auto scaling",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "capacity-provider",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
+      "ecs:propagate-tags",
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
@@ -18,7 +28,9 @@
       {
         "name": "cluster",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -30,6 +42,36 @@
     ],
     "dependentActions": []
   },
+  "createexpressgatewayservice": {
+    "name": "CreateExpressGatewayService",
+    "description": "Grants permission to create a new Amazon ECS Express Gateway service with cluster and task definition",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": [
+          "ecs:RegisterTaskDefinition",
+          "iam:PassRole"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "ecs:task-definition",
+      "ecs:subnet",
+      "ecs:enable-ecs-managed-tags",
+      "ecs:propagate-tags",
+      "ecs:task-cpu",
+      "ecs:task-memory"
+    ],
+    "dependentActions": []
+  },
   "createservice": {
     "name": "CreateService",
     "description": "Grants permission to run and maintain a desired number of tasks from a specified task definition via service creation",
@@ -68,7 +110,14 @@
     "name": "CreateTaskSet",
     "description": "Grants permission to create a new Amazon ECS task set",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "task-set",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
@@ -141,6 +190,24 @@
     ],
     "dependentActions": []
   },
+  "deleteexpressgatewayservice": {
+    "name": "DeleteExpressGatewayService",
+    "description": "Grants permission to delete a specified Express Gateway service",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ecs:cluster",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deleteservice": {
     "name": "DeleteService",
     "description": "Grants permission to delete a specified service within a cluster",
@@ -272,6 +339,24 @@
     ],
     "dependentActions": []
   },
+  "describeexpressgatewayservice": {
+    "name": "DescribeExpressGatewayService",
+    "description": "Grants permission to describe the specified Express Gateway service",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ecs:cluster",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "describeservicedeployments": {
     "name": "DescribeServiceDeployments",
     "description": "Grants permission to describe one or more of your service deployments",
@@ -682,16 +767,44 @@
       {
         "name": "cluster",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "ecs:capacity-provider"
     ],
     "dependentActions": []
   },
+  "putsystemlogevents": {
+    "name": "PutSystemLogEvents",
+    "description": "Grants permission to collect system logs from the container instances",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "container-instance",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ecs:cluster",
+          "ecs:capacity-provider"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "registercontainerinstance": {
     "name": "RegisterContainerInstance",
     "description": "Grants permission to register an EC2 instance into the specified cluster",
@@ -700,13 +813,14 @@
       {
         "name": "cluster",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -1022,6 +1136,7 @@
       }
     ],
     "conditionKeys": [
+      "ecs:propagate-tags",
       "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
@@ -1034,12 +1149,13 @@
       {
         "name": "cluster",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "ecs:fargate-ephemeral-storage-kms-key"
     ],
     "dependentActions": []
@@ -1097,6 +1213,30 @@
     ],
     "dependentActions": []
   },
+  "updateexpressgatewayservice": {
+    "name": "UpdateExpressGatewayService",
+    "description": "Grants permission to modify the parameters of an Express Gateway service",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ecs:subnet",
+      "ecs:enable-ecs-managed-tags",
+      "ecs:propagate-tags",
+      "ecs:task-cpu",
+      "ecs:task-memory"
+    ],
+    "dependentActions": []
+  },
   "updateservice": {
     "name": "UpdateService",
     "description": "Grants permission to modify the parameters of a service",

iamdata/data/actions/eks-mcp.json

@@ -0,0 +1,26 @@
+{
+  "callprivilegedtool": {
+    "name": "CallPrivilegedTool",
+    "description": "Grants permission to call privileged tools in MCP service",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "callreadonlytool": {
+    "name": "CallReadOnlyTool",
+    "description": "Grants permission to call read-only tools in MCP service",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invokemcp": {
+    "name": "InvokeMcp",
+    "description": "Grants permission to use MCP service",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}