iamdata 0.1.202507141__tar.gz → 0.1.202507161__tar.gz

{iamdata-0.1.202507141 → iamdata-0.1.202507161}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iamdata
-Version: 0.1.202507141
+Version: 0.1.202507161
 Summary: IAM data for AWS actions, resources, and conditions based on IAM policy documents. Checked for updates daily.
 Project-URL: Homepage, https://github.com/cloud-copilot/iam-data-python
 Project-URL: Issues, https://github.com/cloud-copilot/iam-data-python/issues

{iamdata-0.1.202507141 → iamdata-0.1.202507161}/iamdata/data/actions/dataexchange.json

@@ -49,20 +49,34 @@
     "name": "CreateDataGrant",
     "description": "Grants permission to create a data grant",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "data-grants",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "dataexchange:PublishToDataGrant"
+        ]
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": [
-      "dataexchange:PublishToDataGrant"
-    ]
+    "dependentActions": []
   },
   "createdataset": {
     "name": "CreateDataSet",
     "description": "Grants permission to create a data set",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "data-sets",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -73,15 +87,32 @@
     "name": "CreateEventAction",
     "description": "Grants permission to create an event action",
     "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
+    "resourceTypes": [
+      {
+        "name": "event-actions",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createjob": {
     "name": "CreateJob",
     "description": "Grants permission to create a job to import or export assets",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "jobs",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "dataexchange:JobType"
     ],
@@ -408,6 +439,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "event-actions",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "revisions",
         "required": false,
@@ -447,7 +484,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "revokerevision": {
@@ -541,6 +581,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "event-actions",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "revisions",
         "required": false,
@@ -571,6 +617,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "event-actions",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "revisions",
         "required": false,

{iamdata-0.1.202507141 → iamdata-0.1.202507161}/iamdata/data/actions/datazone.json

@@ -1318,6 +1318,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startaccountbootstrapaction": {
+    "name": "StartAccountBootstrapAction",
+    "isPermissionOnly": true,
+    "description": "Grants permission to start account bootstrap action for a domain",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startdatasourcerun": {
     "name": "StartDataSourceRun",
     "description": "Grants permission to start a DataSource run job",

iamdata-0.1.202507161/iamdata/data/actions/freetier.json

@@ -0,0 +1,60 @@
+{
+  "getaccountactivity": {
+    "name": "GetAccountActivity",
+    "description": "Grants permission to get a specific activity record",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getaccountplanstate": {
+    "name": "GetAccountPlanState",
+    "description": "Grants permission to get all of the information related to the state of the account plan related to Free Tier",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getfreetieralertpreference": {
+    "name": "GetFreeTierAlertPreference",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get free tier alert preference (email address)",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getfreetierusage": {
+    "name": "GetFreeTierUsage",
+    "description": "Grants permission to get free tier usage limits and MTD usage status",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listaccountactivities": {
+    "name": "ListAccountActivities",
+    "description": "Grants permission to list available activities",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putfreetieralertpreference": {
+    "name": "PutFreeTierAlertPreference",
+    "isPermissionOnly": true,
+    "description": "Grants permission to set free tier alert preference (email address)",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "upgradeaccountplan": {
+    "name": "UpgradeAccountPlan",
+    "description": "Grants permission to trigger an upgrade of account plan",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

{iamdata-0.1.202507141 → iamdata-0.1.202507161}/iamdata/data/actions/network-firewall.json

@@ -497,6 +497,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describerulegroupsummary": {
+    "name": "DescribeRuleGroupSummary",
+    "description": "Grants permission to retrieve the summary information about a rule group",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "StatefulRuleGroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "StatelessRuleGroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describetlsinspectionconfiguration": {
     "name": "DescribeTLSInspectionConfiguration",
     "description": "Grants permission to retrieve the data objects that define a tls inspection configuration",

iamdata-0.1.202507161/iamdata/data/actions/network-security-director.json

@@ -0,0 +1,74 @@
+{
+  "getfinding": {
+    "name": "GetFinding",
+    "description": "Grants permission to get a finding",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getnetworksecurityscan": {
+    "name": "GetNetworkSecurityScan",
+    "description": "Grants permission to get the status of network security scan",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getresource": {
+    "name": "GetResource",
+    "description": "Grants permission to get a resource",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listfindings": {
+    "name": "ListFindings",
+    "description": "Grants permission to list findings",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listinsights": {
+    "name": "ListInsights",
+    "description": "Grants permission to list insights about the latest network security scan",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listremediations": {
+    "name": "ListRemediations",
+    "description": "Grants permission to list remediations for a finding",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listresources": {
+    "name": "ListResources",
+    "description": "Grants permission to list resources",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startnetworksecurityscan": {
+    "name": "StartNetworkSecurityScan",
+    "description": "Grants permission to start a network security scan",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatefinding": {
+    "name": "UpdateFinding",
+    "description": "Grants permission to update the status of a finding",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

{iamdata-0.1.202507141 → iamdata-0.1.202507161}/iamdata/data/actions/rds.json

@@ -101,6 +101,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "global-cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "integration",
         "required": false,
@@ -883,7 +889,9 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "rds:AddTagsToResource"
+        ]
       },
       {
         "name": "global-cluster",
@@ -892,7 +900,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createintegration": {
@@ -2201,6 +2212,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "global-cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "integration",
         "required": false,
@@ -2947,6 +2964,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "global-cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "integration",
         "required": false,

{iamdata-0.1.202507141 → iamdata-0.1.202507161}/iamdata/data/actions/s3.json

@@ -101,6 +101,7 @@
       }
     ],
     "conditionKeys": [
+      "s3:AccessGrantScope",
       "s3:authType",
       "s3:ResourceAccount",
       "s3:signatureAge",
@@ -151,6 +152,7 @@
       }
     ],
     "conditionKeys": [
+      "s3:AccessGrantsLocationScope",
       "s3:authType",
       "s3:ResourceAccount",
       "s3:signatureAge",
@@ -347,6 +349,7 @@
       }
     ],
     "conditionKeys": [
+      "s3:AccessGrantScope",
       "s3:authType",
       "s3:ResourceAccount",
       "s3:signatureAge",
@@ -416,6 +419,7 @@
       }
     ],
     "conditionKeys": [
+      "s3:AccessGrantsLocationScope",
       "s3:authType",
       "s3:ResourceAccount",
       "s3:signatureAge",
@@ -935,6 +939,7 @@
       }
     ],
     "conditionKeys": [
+      "s3:AccessGrantScope",
       "s3:authType",
       "s3:ResourceAccount",
       "s3:signatureAge",
@@ -1027,6 +1032,7 @@
       }
     ],
     "conditionKeys": [
+      "s3:AccessGrantsLocationScope",
       "s3:authType",
       "s3:ResourceAccount",
       "s3:signatureAge",
@@ -3782,6 +3788,7 @@
       }
     ],
     "conditionKeys": [
+      "s3:AccessGrantsLocationScope",
       "s3:authType",
       "s3:ResourceAccount",
       "s3:signatureAge",

iamdata-0.1.202507161/iamdata/data/actions/s3vectors.json

@@ -0,0 +1,242 @@
+{
+  "createindex": {
+    "name": "CreateIndex",
+    "description": "Grants permission to create a new vector index within a specified vector bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createvectorbucket": {
+    "name": "CreateVectorBucket",
+    "description": "Grants permission to create a new vector bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3vectors:sseType",
+      "s3vectors:kmsKeyArn"
+    ],
+    "dependentActions": []
+  },
+  "deleteindex": {
+    "name": "DeleteIndex",
+    "description": "Grants permission to delete a specified vector index",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletevectorbucket": {
+    "name": "DeleteVectorBucket",
+    "description": "Grants permission to delete a specified vector bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletevectorbucketpolicy": {
+    "name": "DeleteVectorBucketPolicy",
+    "description": "Grants permission to delete the IAM resource policy from a specified vector bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletevectors": {
+    "name": "DeleteVectors",
+    "description": "Grants permission to delete a batch of vectors from a specified vector index",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getindex": {
+    "name": "GetIndex",
+    "description": "Grants permission to get the attributes of a specified vector index",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getvectorbucket": {
+    "name": "GetVectorBucket",
+    "description": "Grants permission to get the attributes of a specified vector bucket",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getvectorbucketpolicy": {
+    "name": "GetVectorBucketPolicy",
+    "description": "Grants permission to get the IAM resource policy for a specific vector bucket",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getvectors": {
+    "name": "GetVectors",
+    "description": "Grants permission to get a batch of vectors by their vector keys",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listindexes": {
+    "name": "ListIndexes",
+    "description": "Grants permission to get a paginated list of all indexes in a specified vector bucket",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listvectorbuckets": {
+    "name": "ListVectorBuckets",
+    "description": "Grants permission to get a paginated list of all vector buckets in the account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listvectors": {
+    "name": "ListVectors",
+    "description": "Grants permission to get a paginated list of all vectors in a specified vector index",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "s3vectors:GetVectors"
+    ]
+  },
+  "putvectorbucketpolicy": {
+    "name": "PutVectorBucketPolicy",
+    "description": "Grants permission to add an IAM resource policy to a specified vector bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putvectors": {
+    "name": "PutVectors",
+    "description": "Grants permission to add a batch of vectors to a specified vector index",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "queryvectors": {
+    "name": "QueryVectors",
+    "description": "Grants permission to find approximate nearest neighbors within a specified search vector index for a given query vector",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "s3vectors:GetVectors"
+    ]
+  }
+}