iamdata 0.1.202507081__tar.gz → 0.1.202511161__tar.gz

iamdata-0.1.202511161/PKG-INFO

@@ -0,0 +1,67 @@
+Metadata-Version: 2.4
+Name: iamdata
+Version: 0.1.202511161
+Summary: IAM data for AWS actions, resources, and conditions based on IAM policy documents. Checked for updates daily.
+Project-URL: Homepage, https://github.com/cloud-copilot/iam-data-python
+Project-URL: Issues, https://github.com/cloud-copilot/iam-data-python/issues
+Author-email: David Kerber <dave@cloudcopilot.io>
+License-File: LICENSE.txt
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Requires-Python: >=3.7
+Description-Content-Type: text/markdown
+
+# IAM Data In Python Package
+
+This is a simple package for utilizing AWS IAM data for Services, Actions, Resources, and Condition Keys. Data is embedded in the python package.
+
+New data is checked against the AWS IAM documentation and updated daily if there are changes.
+
+## Installation
+```bash
+pip install iam-data
+```
+
+## Usage
+```python
+from iamdata import IAMData
+
+iam_data = IAMData()
+print(f"Data Version {iam_data.data_version()} updated at {iam_data.data_updated_at()}")
+for service_key in iam_data.services.get_service_keys():
+    service_name = iam_data.services.get_service_name(service_key)
+    print(f"Getting Actions for {service_name}")
+    for action in iam_data.actions.get_actions_for_service(service_key):
+        action_details = iam_data.actions.get_action_details(service_key, action)
+        print(f"{service_key}:{action} => {action_details}")
+```
+
+## API
+### Services
+* `services.get_service_keys()` - Returns a list of all service keys such as 's3', 'ec2', etc.
+* `services.get_service_name(service_key)` - Returns the service name for a given service key.
+* `services.service_exists(service_key)` - Returns True if the service key exists.
+
+### Actions
+* `actions.get_actions_for_service(service_key)` - Returns an array of all actions for a given service key.
+* `actions.get_action_details(service_key, action_key)` - Returns an object with the action details such as `description`, `resourceTypes`, and `conditionKeys`.
+* `actions.action_exists(service_key, action_key)` - Returns true if the action exists.
+
+### Resources
+* `resources.get_resource_types_for_service(service_key)` - Returns an array of all resource types for a given service key.
+* `resources.get_resource_type_details(service_key, resource_type_key)` - Returns an object with the resource type details such as `description`, `arnFormat`, and `conditionKeys`.
+* `resources.resource_type_exists(service_key, resource_type_key)` - Returns true if the resource type exists.
+
+### Conditions Keys
+* `conditions.get_condition_keys_for_service(service_key)` - Returns an array of all condition keys for a given service key.
+* `conditions.get_condition_key_details(service_key, condition_key)` - Returns an object with the condition key details such as `description`, `conditionValueTypes`, and `conditionOperators`.
+* `conditions.condition_key_exists(service_key, condition_key)` - Returns true if the condition key exists.
+
+### Version Info
+The version is number is formatted as `major.minor.updatedAt`. The updatedAt is the date the data was last updated in the format `YYYYMMDDX` where `X` is a counter to enable publishing more than once per day if necessary. For example version `0.1.202408291` has data updated on August 29th, 2024.
+
+The version can be accessed using the `data_version()` method.
+
+There is also `date_updated_at()` which returns the date the data was last updated.
+

iamdata-0.1.202511161/iamdata/data/actions/access-analyzer.json

@@ -0,0 +1,482 @@
+{
+  "applyarchiverule": {
+    "name": "ApplyArchiveRule",
+    "description": "Grants permission to apply an archive rule",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "cancelpolicygeneration": {
+    "name": "CancelPolicyGeneration",
+    "description": "Grants permission to cancel a policy generation",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "checkaccessnotgranted": {
+    "name": "CheckAccessNotGranted",
+    "description": "Grants permission to check that specified access is not allowed by a policy",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "checknonewaccess": {
+    "name": "CheckNoNewAccess",
+    "description": "Grants permission to check that no new access is allowed when compared to an existing policy",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "checknopublicaccess": {
+    "name": "CheckNoPublicAccess",
+    "description": "Grants permission to check that public access is not allowed by a resource policy",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createaccesspreview": {
+    "name": "CreateAccessPreview",
+    "description": "Grants permission to create an access preview for the specified analyzer",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createanalyzer": {
+    "name": "CreateAnalyzer",
+    "description": "Grants permission to create an analyzer",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:CreateServiceLinkedRole"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createarchiverule": {
+    "name": "CreateArchiveRule",
+    "description": "Grants permission to create an archive rule for the specified analyzer",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ArchiveRule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteanalyzer": {
+    "name": "DeleteAnalyzer",
+    "description": "Grants permission to delete the specified analyzer",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deletearchiverule": {
+    "name": "DeleteArchiveRule",
+    "description": "Grants permission to delete archive rules for the specified analyzer",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ArchiveRule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "generatefindingrecommendation": {
+    "name": "GenerateFindingRecommendation",
+    "description": "Grants permission to generate recommendation steps to resolve a finding",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getaccesspreview": {
+    "name": "GetAccessPreview",
+    "description": "Grants permission to retrieve information about an access preview",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getanalyzedresource": {
+    "name": "GetAnalyzedResource",
+    "description": "Grants permission to retrieve information about an analyzed resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getanalyzer": {
+    "name": "GetAnalyzer",
+    "description": "Grants permission to retrieve information about analyzers",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "getarchiverule": {
+    "name": "GetArchiveRule",
+    "description": "Grants permission to retrieve information about archive rules for the specified analyzer",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ArchiveRule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getfinding": {
+    "name": "GetFinding",
+    "description": "Grants permission to retrieve findings",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getfindingrecommendation": {
+    "name": "GetFindingRecommendation",
+    "description": "Grants permission to retrieve recommendation steps to resolve a finding",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getfindingsstatistics": {
+    "name": "GetFindingsStatistics",
+    "description": "Grants permission to retrieve statistics for findings",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getgeneratedpolicy": {
+    "name": "GetGeneratedPolicy",
+    "description": "Grants permission to retrieve a policy that was generated using StartPolicyGeneration",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listaccesspreviewfindings": {
+    "name": "ListAccessPreviewFindings",
+    "description": "Grants permission to retrieve a list of findings from an access preview",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listaccesspreviews": {
+    "name": "ListAccessPreviews",
+    "description": "Grants permission to retrieve a list of access previews",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listanalyzedresources": {
+    "name": "ListAnalyzedResources",
+    "description": "Grants permission to retrieve a list of resources that have been analyzed",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listanalyzers": {
+    "name": "ListAnalyzers",
+    "description": "Grants permission to retrieves a list of analyzers",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listarchiverules": {
+    "name": "ListArchiveRules",
+    "description": "Grants permission to retrieve a list of archive rules from an analyzer",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listfindings": {
+    "name": "ListFindings",
+    "description": "Grants permission to retrieve a list of findings from an analyzer",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listpolicygenerations": {
+    "name": "ListPolicyGenerations",
+    "description": "Grants permission to list all the recently started policy generations",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to retrieve a list of tags applied to a resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startpolicygeneration": {
+    "name": "StartPolicyGeneration",
+    "description": "Grants permission to start a policy generation",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "iam:PassRole"
+    ]
+  },
+  "startresourcescan": {
+    "name": "StartResourceScan",
+    "description": "Grants permission to start a scan of the policies applied to a resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to add a tag to a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove a tag from a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updateanalyzer": {
+    "name": "UpdateAnalyzer",
+    "description": "Grants permission to modify an analyzer's configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatearchiverule": {
+    "name": "UpdateArchiveRule",
+    "description": "Grants permission to modify an archive rule",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ArchiveRule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatefindings": {
+    "name": "UpdateFindings",
+    "description": "Grants permission to modify findings",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Analyzer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "validatepolicy": {
+    "name": "ValidatePolicy",
+    "description": "Grants permission to validate a policy",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

iamdata-0.1.202511161/iamdata/data/actions/action-recommendations.json

@@ -0,0 +1,10 @@
+{
+  "listrecommendedactions": {
+    "name": "ListRecommendedActions",
+    "description": "Grants permission to list recommended actions in the AWS Management Console",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}