iamdata 0.1.202506101__tar.gz → 0.1.202506111__tar.gz

{iamdata-0.1.202506101 → iamdata-0.1.202506111}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iamdata
-Version: 0.1.202506101
+Version: 0.1.202506111
 Summary: IAM data for AWS actions, resources, and conditions based on IAM policy documents. Checked for updates daily.
 Project-URL: Homepage, https://github.com/cloud-copilot/iam-data-python
 Project-URL: Issues, https://github.com/cloud-copilot/iam-data-python/issues

{iamdata-0.1.202506101 → iamdata-0.1.202506111}/iamdata/data/actions/securityhub.json

@@ -175,10 +175,17 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "securityhub:ASFFSyntaxPath/${ASFFSyntaxPath}"
+      "securityhub:ASFFSyntaxPath/${ASFFSyntaxPath}",
+      "securityhub:OCSFSyntaxPath/${OCSFSyntaxPath}"
     ],
     "dependentActions": []
   },
@@ -192,6 +199,21 @@
       "securityhub:UpdateStandardsControl"
     ]
   },
+  "connectorregistrationsv2": {
+    "name": "ConnectorRegistrationsV2",
+    "description": "Grants permission to complete the OAuth 2.0 authorization code flow based on input parameters",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connectorv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createactiontarget": {
     "name": "CreateActionTarget",
     "description": "Grants permission to create custom actions in Security Hub",
@@ -207,6 +229,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createaggregatorv2": {
+    "name": "CreateAggregatorV2",
+    "description": "Grants permission to create an aggregatorV2, which configures data aggregation across Regions",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createautomationrule": {
     "name": "CreateAutomationRule",
     "description": "Grants permission to create an automation rule based on input parameters",
@@ -218,6 +248,17 @@
     ],
     "dependentActions": []
   },
+  "createautomationrulev2": {
+    "name": "CreateAutomationRuleV2",
+    "description": "Grants permission to create an automation rule V2 based on input parameters",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createconfigurationpolicy": {
     "name": "CreateConfigurationPolicy",
     "description": "Grants permission to create a configuration policy to manage organization member settings in Security Hub",
@@ -229,6 +270,17 @@
     ],
     "dependentActions": []
   },
+  "createconnectorv2": {
+    "name": "CreateConnectorV2",
+    "description": "Grants permission to create a connector V2 based on input parameters",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createfindingaggregator": {
     "name": "CreateFindingAggregator",
     "description": "Grants permission to create a finding aggregator, which contains the cross-Region finding aggregation configuration",
@@ -267,6 +319,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createticketv2": {
+    "name": "CreateTicketV2",
+    "description": "Grants permission to create ticket for a selected OCSF finding",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "hub",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "declineinvitations": {
     "name": "DeclineInvitations",
     "description": "Grants permission to decline Security Hub invitations to become a member account",
@@ -297,6 +370,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteaggregatorv2": {
+    "name": "DeleteAggregatorV2",
+    "description": "Grants permission to delete an aggregatorV2, which configures data aggregation across Regions",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "aggregatorv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteautomationrulev2": {
+    "name": "DeleteAutomationRuleV2",
+    "description": "Grants permission to delete an automation rule V2 in Security Hub",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "automation-rulev2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteconfigurationpolicy": {
     "name": "DeleteConfigurationPolicy",
     "description": "Grants permission to delete an existing configuration policy",
@@ -312,6 +415,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteconnectorv2": {
+    "name": "DeleteConnectorV2",
+    "description": "Grants permission to delete a connector V2 in Security Hub",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connectorv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletefindingaggregator": {
     "name": "DeleteFindingAggregator",
     "description": "Grants permission to delete a finding aggregator, which disables finding aggregation across Regions",
@@ -432,6 +550,29 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeproductsv2": {
+    "name": "DescribeProductsV2",
+    "description": "Grants permission to retrieve information about the available Security Hub V2 product integrations",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describesecurityhubv2": {
+    "name": "DescribeSecurityHubV2",
+    "description": "Grants permission to retrieve information about the hub V2 resource in your account",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describestandards": {
     "name": "DescribeStandards",
     "description": "Grants permission to retrieve information about Security Hub standards",
@@ -491,7 +632,9 @@
     ],
     "conditionKeys": [],
     "dependentActions": [
-      "organizations:DescribeOrganization"
+      "organizations:DeregisterDelegatedAdministrator",
+      "organizations:DescribeOrganization",
+      "organizations:ListDelegatedAdministrators"
     ]
   },
   "disablesecurityhub": {
@@ -509,6 +652,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disablesecurityhubv2": {
+    "name": "DisableSecurityHubV2",
+    "description": "Grants permission to disable Security Hub V2",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disassociatefromadministratoraccount": {
     "name": "DisassociateFromAdministratorAccount",
     "description": "Grants permission to a Security Hub member account to disassociate from the associated administrator account",
@@ -585,6 +736,8 @@
     "dependentActions": [
       "organizations:DescribeOrganization",
       "organizations:EnableAWSServiceAccess",
+      "organizations:ListAWSServiceAccessForOrganization",
+      "organizations:ListDelegatedAdministrators",
       "organizations:RegisterDelegatedAdministrator"
     ]
   },
@@ -606,10 +759,21 @@
     ],
     "dependentActions": []
   },
+  "enablesecurityhubv2": {
+    "name": "EnableSecurityHubV2",
+    "description": "Grants permission to enable Security Hub V2",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "getadhocinsightresults": {
     "name": "GetAdhocInsightResults",
     "isPermissionOnly": true,
-    "description": "Grants permission to retrieve insight results by providing a set of filters instead of an insight ARN",
+    "description": "Grants permission to retrieve aggregated statistical data about the findings",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -617,6 +781,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -637,6 +807,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getaggregatorv2": {
+    "name": "GetAggregatorV2",
+    "description": "Grants permission to retrieve details for an aggregatorV2, which configures data aggregation across Regions",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "aggregatorv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getautomationrulev2": {
+    "name": "GetAutomationRuleV2",
+    "description": "Grants permission to retrieve details for an automation rule V2 from Security Hub based on rule Amazon Resource Name (ARN)",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "automation-rulev2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getconfigurationpolicy": {
     "name": "GetConfigurationPolicy",
     "description": "Grants permission to get a complete overview of one configuration policy created by the calling account",
@@ -660,6 +860,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getconnectorv2": {
+    "name": "GetConnectorV2",
+    "description": "Grants permission to retrieve details for a connector V2 from Security Hub based on connector id",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "connectorv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getcontrolfindingsummary": {
     "name": "GetControlFindingSummary",
     "isPermissionOnly": true,
@@ -731,6 +946,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -859,6 +1080,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getresourcestatisticsv2": {
+    "name": "GetResourceStatisticsV2",
+    "description": "Grants permission to retrieve aggregate statistics about resources",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getresourcesv2": {
+    "name": "GetResourcesV2",
+    "description": "Grants permission to retrieve a list of resources",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getsecuritycontroldefinition": {
     "name": "GetSecurityControlDefinition",
     "description": "Grants permission to get the definition details of a specific security control identified by ID",
@@ -900,6 +1151,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listaggregatorv2s": {
+    "name": "ListAggregatorV2s",
+    "description": "Grants permission to retrieve a list of aggregatorsV2, which configures data aggregation across Regions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listautomationrules": {
     "name": "ListAutomationRules",
     "description": "Grants permission to retrieve a list of automation rules and their metadata for the calling account from Security Hub",
@@ -908,6 +1167,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listautomationrulesv2": {
+    "name": "ListAutomationRulesV2",
+    "description": "Grants permission to retrieve a list of automation rules V2 and their metadata for the calling account from Security Hub",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listconfigurationpolicies": {
     "name": "ListConfigurationPolicies",
     "description": "Grants permission to list the summaries of all configuration policies created by the calling account",
@@ -924,6 +1191,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listconnectorsv2": {
+    "name": "ListConnectorsV2",
+    "description": "Grants permission to retrieve a list of connectors V2 and their metadata for the calling account from Security Hub",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcontrolevaluationsummaries": {
     "name": "ListControlEvaluationSummaries",
     "isPermissionOnly": true,
@@ -1007,7 +1282,8 @@
     ],
     "conditionKeys": [],
     "dependentActions": [
-      "organizations:DescribeOrganization"
+      "organizations:DescribeOrganization",
+      "organizations:ListDelegatedAdministrators"
     ]
   },
   "listsecuritycontroldefinitions": {
@@ -1128,17 +1404,35 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "automation-rulev2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "configuration-policy",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "connectorv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "hub",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -1155,17 +1449,35 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "automation-rulev2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "configuration-policy",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "connectorv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "hub",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -1186,6 +1498,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateaggregatorv2": {
+    "name": "UpdateAggregatorV2",
+    "description": "Grants permission to update an aggregatorV2, which configures data aggregation across Regions",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "aggregatorv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateautomationrulev2": {
+    "name": "UpdateAutomationRuleV2",
+    "description": "Grants permission to update an automation rule V2 in Security Hub based on rule Amazon Resource Name (ARN) and input parameters",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "automation-rulev2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateconfigurationpolicy": {
     "name": "UpdateConfigurationPolicy",
     "description": "Grants permission to update an existing configuration policy",
@@ -1201,6 +1543,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateconnectorv2": {
+    "name": "UpdateConnectorV2",
+    "description": "Grants permission to update a connector V2 in Security Hub based on connector id and input parameters",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connectorv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatefindingaggregator": {
     "name": "UpdateFindingAggregator",
     "description": "Grants permission to update a finding aggregator, which contains the cross-Region finding aggregation configuration",

{iamdata-0.1.202506101 → iamdata-0.1.202506111}/iamdata/data/actions/thinclient.json

@@ -11,6 +11,7 @@
     ],
     "dependentActions": [
       "appstream:DescribeStacks",
+      "iam:CreateServiceLinkedRole",
       "workspaces-web:GetPortal",
       "workspaces-web:GetUserSettings",
       "workspaces:DescribeWorkspaceDirectories"

{iamdata-0.1.202506101 → iamdata-0.1.202506111}/iamdata/data/conditionKeys/securityhub.json

@@ -19,6 +19,11 @@
     "description": "Filters access by the specified fields and values in the request",
     "type": "String"
   },
+  "securityhub:ocsfsyntaxpath/${ocsfsyntaxpath}": {
+    "key": "securityhub:OCSFSyntaxPath/${OCSFSyntaxPath}",
+    "description": "Filters access by the specified fields and values in the request",
+    "type": "String"
+  },
   "securityhub:targetaccount": {
     "key": "securityhub:TargetAccount",
     "description": "Filters access by the AwsAccountId field that is specified in the request",

iamdata-0.1.202506111/iamdata/data/metadata.json

@@ -0,0 +1,4 @@
+{
+  "version": "0.1.202506111",
+  "updatedAt": "2025-06-11T04:53:45.208Z"
+}

{iamdata-0.1.202506101 → iamdata-0.1.202506111}/iamdata/data/resourceTypes/securityhub.json

@@ -6,6 +6,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "hubv2": {
+    "key": "hubv2",
+    "arn": "arn:${Partition}:securityhub:${Region}:${Account}:hubv2/${HubV2Id}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "product": {
     "key": "product",
     "arn": "arn:${Partition}:securityhub:${Region}:${Account}:product/${Company}/${ProductId}"
@@ -14,12 +21,30 @@
     "key": "finding-aggregator",
     "arn": "arn:${Partition}:securityhub:${Region}:${Account}:finding-aggregator/${FindingAggregatorId}"
   },
+  "aggregatorv2": {
+    "key": "aggregatorv2",
+    "arn": "arn:${Partition}:securityhub:${Region}:${Account}:aggregatorv2/${AggregatorV2Id}"
+  },
   "automation-rule": {
     "key": "automation-rule",
     "arn": "arn:${Partition}:securityhub:${Region}:${Account}:automation-rule/${AutomationRuleId}"
   },
+  "automation-rulev2": {
+    "key": "automation-rulev2",
+    "arn": "arn:${Partition}:securityhub:${Region}:${Account}:automation-rulev2/${AutomationRuleV2Id}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "configuration-policy": {
     "key": "configuration-policy",
     "arn": "arn:${Partition}:securityhub:${Region}:${Account}:configuration-policy/${ConfigurationPolicyId}"
+  },
+  "connectorv2": {
+    "key": "connectorv2",
+    "arn": "arn:${Partition}:securityhub:${Region}:${Account}:connectorv2/${ConnectorV2Id}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

{iamdata-0.1.202506101 → iamdata-0.1.202506111}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "iamdata"
-version = "0.1.202506101"
+version = "0.1.202506111"
 authors = [
   { name="David Kerber", email="dave@cloudcopilot.io" },
 ]

iamdata-0.1.202506101/iamdata/data/metadata.json

@@ -1,4 +0,0 @@
-{
-  "version": "0.1.202506101",
-  "updatedAt": "2025-06-10T04:52:19.532Z"
-}