iamdata 0.1.202507151__py3-none-any.whl → 0.1.202507171__py3-none-any.whl

iamdata/data/actions/dataexchange.json

@@ -49,20 +49,34 @@
     "name": "CreateDataGrant",
     "description": "Grants permission to create a data grant",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "data-grants",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "dataexchange:PublishToDataGrant"
+        ]
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": [
-      "dataexchange:PublishToDataGrant"
-    ]
+    "dependentActions": []
   },
   "createdataset": {
     "name": "CreateDataSet",
     "description": "Grants permission to create a data set",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "data-sets",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -73,15 +87,32 @@
     "name": "CreateEventAction",
     "description": "Grants permission to create an event action",
     "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
+    "resourceTypes": [
+      {
+        "name": "event-actions",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createjob": {
     "name": "CreateJob",
     "description": "Grants permission to create a job to import or export assets",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "jobs",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "dataexchange:JobType"
     ],
@@ -408,6 +439,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "event-actions",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "revisions",
         "required": false,
@@ -447,7 +484,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "revokerevision": {
@@ -541,6 +581,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "event-actions",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "revisions",
         "required": false,
@@ -571,6 +617,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "event-actions",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "revisions",
         "required": false,

iamdata/data/actions/datazone.json

@@ -1318,6 +1318,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startaccountbootstrapaction": {
+    "name": "StartAccountBootstrapAction",
+    "isPermissionOnly": true,
+    "description": "Grants permission to start account bootstrap action for a domain",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startdatasourcerun": {
     "name": "StartDataSourceRun",
     "description": "Grants permission to start a DataSource run job",

iamdata/data/actions/freetier.json

@@ -1,4 +1,20 @@
 {
+  "getaccountactivity": {
+    "name": "GetAccountActivity",
+    "description": "Grants permission to get a specific activity record",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getaccountplanstate": {
+    "name": "GetAccountPlanState",
+    "description": "Grants permission to get all of the information related to the state of the account plan related to Free Tier",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getfreetieralertpreference": {
     "name": "GetFreeTierAlertPreference",
     "isPermissionOnly": true,
@@ -16,6 +32,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listaccountactivities": {
+    "name": "ListAccountActivities",
+    "description": "Grants permission to list available activities",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putfreetieralertpreference": {
     "name": "PutFreeTierAlertPreference",
     "isPermissionOnly": true,
@@ -24,5 +48,13 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "upgradeaccountplan": {
+    "name": "UpgradeAccountPlan",
+    "description": "Grants permission to trigger an upgrade of account plan",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

iamdata/data/actions/network-firewall.json

@@ -497,6 +497,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describerulegroupsummary": {
+    "name": "DescribeRuleGroupSummary",
+    "description": "Grants permission to retrieve the summary information about a rule group",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "StatefulRuleGroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "StatelessRuleGroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describetlsinspectionconfiguration": {
     "name": "DescribeTLSInspectionConfiguration",
     "description": "Grants permission to retrieve the data objects that define a tls inspection configuration",

iamdata/data/actions/network-security-director.json

@@ -0,0 +1,74 @@
+{
+  "getfinding": {
+    "name": "GetFinding",
+    "description": "Grants permission to get a finding",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getnetworksecurityscan": {
+    "name": "GetNetworkSecurityScan",
+    "description": "Grants permission to get the status of network security scan",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getresource": {
+    "name": "GetResource",
+    "description": "Grants permission to get a resource",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listfindings": {
+    "name": "ListFindings",
+    "description": "Grants permission to list findings",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listinsights": {
+    "name": "ListInsights",
+    "description": "Grants permission to list insights about the latest network security scan",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listremediations": {
+    "name": "ListRemediations",
+    "description": "Grants permission to list remediations for a finding",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listresources": {
+    "name": "ListResources",
+    "description": "Grants permission to list resources",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startnetworksecurityscan": {
+    "name": "StartNetworkSecurityScan",
+    "description": "Grants permission to start a network security scan",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatefinding": {
+    "name": "UpdateFinding",
+    "description": "Grants permission to update the status of a finding",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

iamdata/data/actions/rds.json

@@ -101,6 +101,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "global-cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "integration",
         "required": false,
@@ -883,7 +889,9 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "rds:AddTagsToResource"
+        ]
       },
       {
         "name": "global-cluster",
@@ -892,7 +900,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createintegration": {
@@ -2201,6 +2212,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "global-cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "integration",
         "required": false,
@@ -2947,6 +2964,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "global-cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "integration",
         "required": false,

iamdata/data/actions/s3.json

@@ -101,6 +101,7 @@
       }
     ],
     "conditionKeys": [
+      "s3:AccessGrantScope",
       "s3:authType",
       "s3:ResourceAccount",
       "s3:signatureAge",
@@ -151,6 +152,7 @@
       }
     ],
     "conditionKeys": [
+      "s3:AccessGrantsLocationScope",
       "s3:authType",
       "s3:ResourceAccount",
       "s3:signatureAge",
@@ -247,7 +249,7 @@
   },
   "createbucketmetadatatableconfiguration": {
     "name": "CreateBucketMetadataTableConfiguration",
-    "description": "Grants permission to create a new S3 Metadata configuration for a specified bucket",
+    "description": "Grants permission to create a new S3 Metadata configuration for a specified general purpose bucket",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -255,9 +257,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": [
+          "kms:DescribeKey",
           "s3tables:CreateNamespace",
           "s3tables:CreateTable",
+          "s3tables:CreateTableBucket",
           "s3tables:GetTable",
+          "s3tables:PutTableEncryption",
           "s3tables:PutTablePolicy"
         ]
       }
@@ -347,6 +352,7 @@
       }
     ],
     "conditionKeys": [
+      "s3:AccessGrantScope",
       "s3:authType",
       "s3:ResourceAccount",
       "s3:signatureAge",
@@ -416,6 +422,7 @@
       }
     ],
     "conditionKeys": [
+      "s3:AccessGrantsLocationScope",
       "s3:authType",
       "s3:ResourceAccount",
       "s3:signatureAge",
@@ -550,7 +557,7 @@
   },
   "deletebucketmetadatatableconfiguration": {
     "name": "DeleteBucketMetadataTableConfiguration",
-    "description": "Grants permission to delete the S3 Metadata configuration for a specified bucket",
+    "description": "Grants permission to delete the S3 Metadata configuration for a specified general purpose bucket",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -935,6 +942,7 @@
       }
     ],
     "conditionKeys": [
+      "s3:AccessGrantScope",
       "s3:authType",
       "s3:ResourceAccount",
       "s3:signatureAge",
@@ -1027,6 +1035,7 @@
       }
     ],
     "conditionKeys": [
+      "s3:AccessGrantsLocationScope",
       "s3:authType",
       "s3:ResourceAccount",
       "s3:signatureAge",
@@ -1332,7 +1341,7 @@
   },
   "getbucketmetadatatableconfiguration": {
     "name": "GetBucketMetadataTableConfiguration",
-    "description": "Grants permission to return the S3 Metadata configuration for a specified bucket",
+    "description": "Grants permission to return the S3 Metadata configuration for a specified general purpose bucket",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -3782,6 +3791,7 @@
       }
     ],
     "conditionKeys": [
+      "s3:AccessGrantsLocationScope",
       "s3:authType",
       "s3:ResourceAccount",
       "s3:signatureAge",
@@ -3792,6 +3802,58 @@
     ],
     "dependentActions": []
   },
+  "updatebucketmetadatainventorytableconfiguration": {
+    "name": "UpdateBucketMetadataInventoryTableConfiguration",
+    "description": "Grants permission to update the inventory table configuration on an existing S3 Metadata configuration for a specified general purpose bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "kms:DescribeKey",
+          "s3tables:CreateNamespace",
+          "s3tables:CreateTable",
+          "s3tables:CreateTableBucket",
+          "s3tables:GetTable",
+          "s3tables:PutTableEncryption",
+          "s3tables:PutTablePolicy"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "s3:authType",
+      "s3:ResourceAccount",
+      "s3:signatureAge",
+      "s3:signatureversion",
+      "s3:TlsVersion",
+      "s3:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
+  "updatebucketmetadatajournaltableconfiguration": {
+    "name": "UpdateBucketMetadataJournalTableConfiguration",
+    "description": "Grants permission to update the journal table configuration on an existing S3 Metadata configuration for a specified general purpose bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3:authType",
+      "s3:ResourceAccount",
+      "s3:signatureAge",
+      "s3:signatureversion",
+      "s3:TlsVersion",
+      "s3:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "updatejobpriority": {
     "name": "UpdateJobPriority",
     "description": "Grants permission to update the priority of an existing job",