iamdata 0.1.202505111__py3-none-any.whl → 0.1.202512121__py3-none-any.whl

iamdata/data/conditionKeys/airflow-serverless.json

@@ -0,0 +1,17 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the presence of tag key-value pairs in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by tag key-value pairs that are attached to the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by tag keys in the request",
+    "type": "ArrayOfString"
+  }
+}

iamdata/data/conditionKeys/apigateway.json

@@ -29,6 +29,11 @@
     "description": "Filters access by URI of a Lambda authorizer function. Available during CreateAuthorizer and UpdateAuthorizer. Also available during import and reimport as an ArrayOfString",
     "type": "ArrayOfString"
   },
+  "apigateway:request/conditionbasepaths": {
+    "key": "apigateway:Request/ConditionBasePaths",
+    "description": "Filters access by base paths defined on the condition of a routing rule. Available during the CreateRoutingRule and UpdateRoutingRule operations",
+    "type": "ArrayOfString"
+  },
   "apigateway:request/disableexecuteapiendpoint": {
     "key": "apigateway:Request/DisableExecuteApiEndpoint",
     "description": "Filters access by status of the default execute-api endpoint. Available during the CreateRestApi and DeleteRestApi operations",
@@ -49,11 +54,21 @@
     "description": "Filters access by version of the truststore used for mutual TLS authentication. Available during the CreateDomainName and UpdateDomainName operations",
     "type": "String"
   },
+  "apigateway:request/priority": {
+    "key": "apigateway:Request/Priority",
+    "description": "Filters access by priority of the routing rule. Available during the CreateRoutingRule and UpdateRoutingRule operations",
+    "type": "Numeric"
+  },
   "apigateway:request/routeauthorizationtype": {
     "key": "apigateway:Request/RouteAuthorizationType",
     "description": "Filters access by authorization type, for example NONE, AWS_IAM, CUSTOM, JWT, COGNITO_USER_POOLS. Available during the CreateMethod and PutMethod operations Also available as a collection during import",
     "type": "ArrayOfString"
   },
+  "apigateway:request/routingmode": {
+    "key": "apigateway:Request/RoutingMode",
+    "description": "Filters access by routing mode of the domain name. Available during the CreateDomainName and UpdateDomainName operations",
+    "type": "String"
+  },
   "apigateway:request/securitypolicy": {
     "key": "apigateway:Request/SecurityPolicy",
     "description": "Filters access by TLS version. Available during the CreateDomain and UpdateDomain operations",
@@ -94,6 +109,11 @@
     "description": "Filters access by URI of a Lambda authorizer function. Available during UpdateAuthorizer and DeleteAuthorizer operations. Also available during reimport as an ArrayOfString",
     "type": "ArrayOfString"
   },
+  "apigateway:resource/conditionbasepaths": {
+    "key": "apigateway:Resource/ConditionBasePaths",
+    "description": "Filters access by base paths defined on the condition of the existing routing rule. Available during the UpdateRoutingRule and DeleteRoutingRule operations",
+    "type": "ArrayOfString"
+  },
   "apigateway:resource/disableexecuteapiendpoint": {
     "key": "apigateway:Resource/DisableExecuteApiEndpoint",
     "description": "Filters access by status of the default execute-api endpoint of the current RestApi resource. Available during UpdateRestApi and DeleteRestApi operations",
@@ -114,11 +134,21 @@
     "description": "Filters access by version of the truststore used for mutual TLS authentication. Available during UpdateDomainName and DeleteDomainName operations",
     "type": "String"
   },
+  "apigateway:resource/priority": {
+    "key": "apigateway:Resource/Priority",
+    "description": "Filters access by priority of the existing routing rule. Available during the UpdateRoutingRule and DeleteRoutingRule operations",
+    "type": "Numeric"
+  },
   "apigateway:resource/routeauthorizationtype": {
     "key": "apigateway:Resource/RouteAuthorizationType",
     "description": "Filters access by authorization type of the existing Method resource, for example NONE, AWS_IAM, CUSTOM, JWT, COGNITO_USER_POOLS. Available during the PutMethod and DeleteMethod operations. Also available as a collection during reimport",
     "type": "ArrayOfString"
   },
+  "apigateway:resource/routingmode": {
+    "key": "apigateway:Resource/RoutingMode",
+    "description": "Filters access by routing mode of the domain name. Available during the UpdateDomainName and DeleteDomainName operations",
+    "type": "String"
+  },
   "apigateway:resource/securitypolicy": {
     "key": "apigateway:Resource/SecurityPolicy",
     "description": "Filters access by TLS version. Available during UpdateDomain and DeleteDomain operations",

iamdata/data/conditionKeys/arc-region-switch.json

@@ -0,0 +1,17 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by tag key-value pairs attached to the resource",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by a tag's key and value in a request",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the presence of tag keys in the request",
+    "type": "ArrayOfString"
+  }
+}

iamdata/data/conditionKeys/autoscaling.json

@@ -9,6 +9,11 @@
     "description": "Filters access based on the ARN of a Capacity Reservation resource group",
     "type": "ArrayOfString"
   },
+  "autoscaling:forcedelete": {
+    "key": "autoscaling:ForceDelete",
+    "description": "Filters access based on whether the force delete option is specified when deleting an Auto Scaling group",
+    "type": "Bool"
+  },
   "autoscaling:imageid": {
     "key": "autoscaling:ImageId",
     "description": "Filters access based on the AMI ID for the launch configuration",

iamdata/data/conditionKeys/backup.json

@@ -26,7 +26,7 @@
   },
   "backup:copytargets": {
     "key": "backup:CopyTargets",
-    "description": "Filters access by the ARN of an backup vault",
+    "description": "Filters access by the ARN of a backup vault",
     "type": "ArrayOfARN"
   },
   "backup:frameworkarns": {
@@ -48,5 +48,10 @@
     "key": "backup:MinRetentionDays",
     "description": "Filters access by the value of the MinRetentionDays parameter",
     "type": "Numeric"
+  },
+  "backup:mpaapprovalteamarn": {
+    "key": "backup:MpaApprovalTeamArn",
+    "description": "Filters access by the MPA Approval Team ARN of a backup vault",
+    "type": "ARN"
   }
 }

iamdata/data/conditionKeys/bcm-dashboards.json

@@ -0,0 +1,12 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

iamdata/data/conditionKeys/bedrock-agentcore.json

@@ -0,0 +1,72 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by creating requests based on the allowed set of values for each of the mandatory tags",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by having actions based on the tag value associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by creating requests based on the presence of mandatory tags in the request",
+    "type": "ArrayOfString"
+  },
+  "bedrock-agentcore:gatewayauthorizertype": {
+    "key": "bedrock-agentcore:GatewayAuthorizerType",
+    "description": "Filters access by the authorizerType attribute on a Gateway",
+    "type": "String"
+  },
+  "bedrock-agentcore:inboundjwtclaim/aud": {
+    "key": "bedrock-agentcore:InboundJwtClaim/aud",
+    "description": "Filters access by the audience claim (aud) in the JWT passed in the request",
+    "type": "ArrayOfString"
+  },
+  "bedrock-agentcore:inboundjwtclaim/client_id": {
+    "key": "bedrock-agentcore:InboundJwtClaim/client_id",
+    "description": "Filters access by the client_id claim in the JWT passed in the request",
+    "type": "String"
+  },
+  "bedrock-agentcore:inboundjwtclaim/iss": {
+    "key": "bedrock-agentcore:InboundJwtClaim/iss",
+    "description": "Filters access by the issuer (iss) claim present in the JWT passed in the request",
+    "type": "String"
+  },
+  "bedrock-agentcore:inboundjwtclaim/scope": {
+    "key": "bedrock-agentcore:InboundJwtClaim/scope",
+    "description": "Filters access by the scope claim in the JWT passed in the request",
+    "type": "ArrayOfString"
+  },
+  "bedrock-agentcore:inboundjwtclaim/sub": {
+    "key": "bedrock-agentcore:InboundJwtClaim/sub",
+    "description": "Filters access by the subject claim (sub) in the JWT passed in the request",
+    "type": "String"
+  },
+  "bedrock-agentcore:actorid": {
+    "key": "bedrock-agentcore:actorId",
+    "description": "Filters access by Actor Id",
+    "type": "String"
+  },
+  "bedrock-agentcore:namespace": {
+    "key": "bedrock-agentcore:namespace",
+    "description": "Filters access by namespace",
+    "type": "String"
+  },
+  "bedrock-agentcore:sessionid": {
+    "key": "bedrock-agentcore:sessionId",
+    "description": "Filters access by Session Id",
+    "type": "String"
+  },
+  "bedrock-agentcore:strategyid": {
+    "key": "bedrock-agentcore:strategyId",
+    "description": "Filters access by Memory Strategy Id",
+    "type": "String"
+  },
+  "bedrock-agentcore:userid": {
+    "key": "bedrock-agentcore:userid",
+    "description": "Filters access by the static user ID value passed in the request",
+    "type": "String"
+  }
+}

iamdata/data/conditionKeys/bedrock-mantle.json

@@ -0,0 +1,17 @@
+{
+  "bedrock-mantle:bearertokentype": {
+    "key": "bedrock-mantle:BearerTokenType",
+    "description": "Filters access by the Short-term or Long-term bearer tokens",
+    "type": "String"
+  },
+  "bedrock-mantle:model": {
+    "key": "bedrock-mantle:Model",
+    "description": "Filters access by the specified Model",
+    "type": "String"
+  },
+  "bedrock-mantle:servicetier": {
+    "key": "bedrock-mantle:ServiceTier",
+    "description": "Filters access by the specified ServiceTier",
+    "type": "String"
+  }
+}

iamdata/data/conditionKeys/bedrock.json

@@ -14,6 +14,11 @@
     "description": "Filters access by creating requests based on the presence of mandatory tags in the request",
     "type": "ArrayOfString"
   },
+  "bedrock:bearertokentype": {
+    "key": "bedrock:BearerTokenType",
+    "description": "Filters access by the Short-term or Long-term bearer tokens",
+    "type": "String"
+  },
   "bedrock:guardrailidentifier": {
     "key": "bedrock:GuardrailIdentifier",
     "description": "Filters access by the GuardrailIdentifier containing the GuardrailArn or the GuardrailArn:NumericVersion",
@@ -34,6 +39,11 @@
     "description": "Filters access by the specified prompt router",
     "type": "ARN"
   },
+  "bedrock:servicetier": {
+    "key": "bedrock:ServiceTier",
+    "description": "Filters access by the specified ServiceTier",
+    "type": "String"
+  },
   "bedrock:thirdpartyknowledgebasecredentialssecretarn": {
     "key": "bedrock:ThirdPartyKnowledgeBaseCredentialsSecretArn",
     "description": "Filters access by the secretArn containing the credentials of the third party platform",

iamdata/data/conditionKeys/chatbot.json

@@ -1 +1,17 @@
-{}
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

iamdata/data/conditionKeys/cloudformation.json

@@ -53,5 +53,10 @@
     "key": "cloudformation:TemplateUrl",
     "description": "Filters access by an Amazon S3 template URL. Use to control which templates IAM users can use when they create or update stacks",
     "type": "String"
+  },
+  "cloudformation:typearn": {
+    "key": "cloudformation:TypeArn",
+    "description": "Filters access by the ARN of a CloudFormation extension",
+    "type": "ARN"
   }
 }