iamdata 0.1.202505111__py3-none-any.whl → 0.1.202512121__py3-none-any.whl

iamdata/data/actions/workspaces-instances.json

@@ -0,0 +1,186 @@
+{
+  "associatevolume": {
+    "name": "AssociateVolume",
+    "description": "Grants permission to associate a workspace managed volume to a workspace managed instance in your account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "WorkspaceInstanceId",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:AttachVolume",
+      "ec2:DescribeVolumes"
+    ]
+  },
+  "createvolume": {
+    "name": "CreateVolume",
+    "description": "Grants permission to create a workspace managed volume in your account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:CreateVolume"
+    ]
+  },
+  "createworkspaceinstance": {
+    "name": "CreateWorkspaceInstance",
+    "description": "Grants permission to create a workspace managed instance in your account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": [
+      "ec2:DescribeInstances",
+      "ec2:RunInstances"
+    ]
+  },
+  "deletevolume": {
+    "name": "DeleteVolume",
+    "description": "Grants permission to delete a workspace managed volume in your account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "VolumeId",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:DeleteVolume",
+      "ec2:DescribeVolumes"
+    ]
+  },
+  "deleteworkspaceinstance": {
+    "name": "DeleteWorkspaceInstance",
+    "description": "Grants permission to delete a workspace managed instance in your account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "WorkspaceInstanceId",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:TerminateInstances"
+    ]
+  },
+  "disassociatevolume": {
+    "name": "DisassociateVolume",
+    "description": "Grants permission to disassociate a workspace managed volume from a workspace managed instance in your account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "WorkspaceInstanceId",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:DescribeVolumes",
+      "ec2:DetachVolume"
+    ]
+  },
+  "getworkspaceinstance": {
+    "name": "GetWorkspaceInstance",
+    "description": "Grants permission to get details for a specific workspace managed instance in your account",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "WorkspaceInstanceId",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listinstancetypes": {
+    "name": "ListInstanceTypes",
+    "description": "Grants permission to list all supported instance types",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listregions": {
+    "name": "ListRegions",
+    "description": "Grants permission to list all supported AWS regions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list user tags for resources in your account",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "WorkspaceInstanceId",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listworkspaceinstances": {
+    "name": "ListWorkspaceInstances",
+    "description": "Grants permission to list workspace managed instances in your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to add user tags to resources in your account",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "WorkspaceInstanceId",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove user tags from resources in your account",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "WorkspaceInstanceId",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  }
+}

iamdata/data/actions/workspaces-web.json

@@ -90,6 +90,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "associatesessionlogger": {
+    "name": "AssociateSessionLogger",
+    "description": "Grants permission to associate session logger with web portals",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "portal",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "sessionLogger",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "associatetruststore": {
     "name": "AssociateTrustStore",
     "description": "Grants permission to associate trust stores with web portals",
@@ -169,7 +190,8 @@
       "kms:CreateGrant",
       "kms:Decrypt",
       "kms:DescribeKey",
-      "kms:GenerateDataKey"
+      "kms:GenerateDataKey",
+      "workspaces-web:TagResource"
     ]
   },
   "createdataprotectionsettings": {
@@ -181,7 +203,9 @@
       "aws:TagKeys",
       "aws:RequestTag/${TagKey}"
     ],
-    "dependentActions": []
+    "dependentActions": [
+      "workspaces-web:TagResource"
+    ]
   },
   "createidentityprovider": {
     "name": "CreateIdentityProvider",
@@ -216,7 +240,9 @@
       "aws:TagKeys",
       "aws:RequestTag/${TagKey}"
     ],
-    "dependentActions": []
+    "dependentActions": [
+      "workspaces-web:TagResource"
+    ]
   },
   "createnetworksettings": {
     "name": "CreateNetworkSettings",
@@ -228,7 +254,8 @@
       "aws:RequestTag/${TagKey}"
     ],
     "dependentActions": [
-      "iam:CreateServiceLinkedRole"
+      "iam:CreateServiceLinkedRole",
+      "workspaces-web:TagResource"
     ]
   },
   "createportal": {
@@ -245,7 +272,22 @@
       "kms:CreateGrant",
       "kms:Decrypt",
       "kms:DescribeKey",
-      "kms:GenerateDataKey"
+      "kms:GenerateDataKey",
+      "workspaces-web:TagResource"
+    ]
+  },
+  "createsessionlogger": {
+    "name": "CreateSessionLogger",
+    "description": "Grants permission to create session logger",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": [
+      "s3:PutObject",
+      "workspaces-web:TagResource"
     ]
   },
   "createtruststore": {
@@ -257,7 +299,9 @@
       "aws:TagKeys",
       "aws:RequestTag/${TagKey}"
     ],
-    "dependentActions": []
+    "dependentActions": [
+      "workspaces-web:TagResource"
+    ]
   },
   "createuseraccessloggingsettings": {
     "name": "CreateUserAccessLoggingSettings",
@@ -268,7 +312,9 @@
       "aws:TagKeys",
       "aws:RequestTag/${TagKey}"
     ],
-    "dependentActions": []
+    "dependentActions": [
+      "workspaces-web:TagResource"
+    ]
   },
   "createusersettings": {
     "name": "CreateUserSettings",
@@ -279,7 +325,9 @@
       "aws:TagKeys",
       "aws:RequestTag/${TagKey}"
     ],
-    "dependentActions": []
+    "dependentActions": [
+      "workspaces-web:TagResource"
+    ]
   },
   "deletebrowsersettings": {
     "name": "DeleteBrowserSettings",
@@ -377,6 +425,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletesessionlogger": {
+    "name": "DeleteSessionLogger",
+    "description": "Grants permission to delete session logger",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "sessionLogger",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletetruststore": {
     "name": "DeleteTrustStore",
     "description": "Grants permission to delete trust stores",
@@ -482,6 +545,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disassociatesessionlogger": {
+    "name": "DisassociateSessionLogger",
+    "description": "Grants permission to disassociate session logger from web portals",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "portal",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disassociatetruststore": {
     "name": "DisassociateTrustStore",
     "description": "Grants permission to disassociate trust stores from web portals",
@@ -662,6 +740,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getsessionlogger": {
+    "name": "GetSessionLogger",
+    "description": "Grants permission to get details on session logger",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "sessionLogger",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "gettruststore": {
     "name": "GetTrustStore",
     "description": "Grants permission to get details on trust stores",
@@ -777,6 +870,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listsessionloggers": {
+    "name": "ListSessionLoggers",
+    "description": "Grants permission to list session loggers",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listsessions": {
     "name": "ListSessions",
     "description": "Grants permission to list sessions for a Portal using optional filters",
@@ -873,6 +974,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "sessionLogger",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "trustStore",
         "required": false,
@@ -939,6 +1046,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "sessionLogger",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "trustStore",
         "required": false,
@@ -1066,6 +1179,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatesessionlogger": {
+    "name": "UpdateSessionLogger",
+    "description": "Grants permission to update session logger",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "sessionLogger",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatetruststore": {
     "name": "UpdateTrustStore",
     "description": "Grants permission to update trust stores",

iamdata/data/actions/workspaces.json

@@ -154,6 +154,22 @@
     ],
     "dependentActions": []
   },
+  "createrootclientcertificate": {
+    "name": "CreateRootClientCertificate",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create a root client certificate",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "certificateid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createstandbyworkspaces": {
     "name": "CreateStandbyWorkspaces",
     "description": "Grants permission to create one or more Standby WorkSpaces",
@@ -379,6 +395,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleterootclientcertificate": {
+    "name": "DeleteRootClientCertificate",
+    "isPermissionOnly": true,
+    "description": "Grants permission to delete root client certificate",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "certificateid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletetags": {
     "name": "DeleteTags",
     "description": "Grants permission to delete tags from WorkSpaces resources",
@@ -578,6 +610,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeconsent": {
+    "name": "DescribeConsent",
+    "isPermissionOnly": true,
+    "description": "Grants permission to retrieve information about consent agreement to BYOL minimum requirements",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describecustomworkspaceimageimport": {
+    "name": "DescribeCustomWorkspaceImageImport",
+    "description": "Grants permission to retrieve information about WorkSpace BYOL image import task",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeimageassociations": {
     "name": "DescribeImageAssociations",
     "description": "Grants permission to retrieve information about resources associated with a WorkSpace image",
@@ -728,6 +777,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "directoryaccessmanagement": {
+    "name": "DirectoryAccessManagement",
+    "isPermissionOnly": true,
+    "description": "Grants permission to directory management actions while managing and provisioning workspaces",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disassociateconnectionalias": {
     "name": "DisassociateConnectionAlias",
     "description": "Grants permission to disassociate connection aliases from directories",
@@ -810,6 +875,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "importcustomworkspaceimage": {
+    "name": "ImportCustomWorkspaceImage",
+    "description": "Grants permission to import Bring Your Own License (BYOL) images into Amazon WorkSpaces",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "importworkspaceimage": {
     "name": "ImportWorkspaceImage",
     "description": "Grants permission to import Bring Your Own License (BYOL) images into Amazon WorkSpaces",
@@ -1249,6 +1322,31 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateconsent": {
+    "name": "UpdateConsent",
+    "isPermissionOnly": true,
+    "description": "Grants permission to update the consent agreement to BYOL minimum requirements",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updaterootclientcertificate": {
+    "name": "UpdateRootClientCertificate",
+    "isPermissionOnly": true,
+    "description": "Grants permission to update a root client certificate",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "certificateid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updaterulesofipgroup": {
     "name": "UpdateRulesOfIpGroup",
     "description": "Grants permission to replace rules for IP access control groups",

iamdata/data/actions/xray.json

@@ -82,7 +82,9 @@
     "description": "Grants permission to delete resource policies",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "xray:ResourcePolicyName"
+    ],
     "dependentActions": []
   },
   "deletesamplingrule": {
@@ -315,7 +317,9 @@
     "description": "Grants permission to create or update resource policies",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "xray:ResourcePolicyName"
+    ],
     "dependentActions": []
   },
   "putspans": {
@@ -323,7 +327,9 @@
     "description": "Grants permission to upload OpenTelemetry spans to AWS X-Ray",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "logs:LogGeneratingResourceArns"
+    ],
     "dependentActions": []
   },
   "putspansforindexing": {
@@ -348,7 +354,9 @@
     "description": "Grants permission to upload segment documents to AWS X-Ray. The X-Ray SDK generates segment documents and sends them to the X-Ray daemon, which uploads them in batches",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "logs:LogGeneratingResourceArns"
+    ],
     "dependentActions": []
   },
   "starttraceretrieval": {
@@ -453,7 +461,9 @@
     "description": "Grants permission to modify the destination of data sent to PutTraceSegments and OpenTelemetry API",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "xray:TraceSegmentDestination"
+    ],
     "dependentActions": []
   }
 }

iamdata/data/conditionKeys/acm.json

@@ -14,6 +14,11 @@
     "description": "Filters access by domainNames in the request. This key can be used to restrict which domains can be in certificate requests",
     "type": "ArrayOfString"
   },
+  "acm:export": {
+    "key": "acm:Export",
+    "description": "Filters access by the export option in the request. Can be used to restrict creation of certificates that can be exported",
+    "type": "String"
+  },
   "acm:keyalgorithm": {
     "key": "acm:KeyAlgorithm",
     "description": "Filters access by keyAlgorithm in the request",

iamdata/data/conditionKeys/aco-automation.json

@@ -0,0 +1,17 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

iamdata/data/conditionKeys/aidevops.json

@@ -0,0 +1,22 @@
+{
+  "aidevops:agentspaceresourceagentspaceid": {
+    "key": "aidevops:AgentSpaceResourceAgentSpaceId",
+    "description": "Filters access by unique identifier for an AgentSpace",
+    "type": "String"
+  },
+  "aidevops:associationresourceagentspaceid": {
+    "key": "aidevops:AssociationResourceAgentSpaceId",
+    "description": "Filters access by unique identifier for an AgentSpace",
+    "type": "String"
+  },
+  "aidevops:associationresourceassociationid": {
+    "key": "aidevops:AssociationResourceAssociationId",
+    "description": "Filters access by unique identifier for a service association within an AgentSpace",
+    "type": "String"
+  },
+  "aidevops:serviceresourceserviceid": {
+    "key": "aidevops:ServiceResourceServiceId",
+    "description": "Filters access by unique identifier for a registered service",
+    "type": "String"
+  }
+}