iamdata 0.1.202507151__py3-none-any.whl → 0.1.202507171__py3-none-any.whl

iamdata/data/actions/s3vectors.json

@@ -0,0 +1,242 @@
+{
+  "createindex": {
+    "name": "CreateIndex",
+    "description": "Grants permission to create a new vector index within a specified vector bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createvectorbucket": {
+    "name": "CreateVectorBucket",
+    "description": "Grants permission to create a new vector bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3vectors:sseType",
+      "s3vectors:kmsKeyArn"
+    ],
+    "dependentActions": []
+  },
+  "deleteindex": {
+    "name": "DeleteIndex",
+    "description": "Grants permission to delete a specified vector index",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletevectorbucket": {
+    "name": "DeleteVectorBucket",
+    "description": "Grants permission to delete a specified vector bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletevectorbucketpolicy": {
+    "name": "DeleteVectorBucketPolicy",
+    "description": "Grants permission to delete the IAM resource policy from a specified vector bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletevectors": {
+    "name": "DeleteVectors",
+    "description": "Grants permission to delete a batch of vectors from a specified vector index",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getindex": {
+    "name": "GetIndex",
+    "description": "Grants permission to get the attributes of a specified vector index",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getvectorbucket": {
+    "name": "GetVectorBucket",
+    "description": "Grants permission to get the attributes of a specified vector bucket",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getvectorbucketpolicy": {
+    "name": "GetVectorBucketPolicy",
+    "description": "Grants permission to get the IAM resource policy for a specific vector bucket",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getvectors": {
+    "name": "GetVectors",
+    "description": "Grants permission to get a batch of vectors by their vector keys",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listindexes": {
+    "name": "ListIndexes",
+    "description": "Grants permission to get a paginated list of all indexes in a specified vector bucket",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listvectorbuckets": {
+    "name": "ListVectorBuckets",
+    "description": "Grants permission to get a paginated list of all vector buckets in the account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listvectors": {
+    "name": "ListVectors",
+    "description": "Grants permission to get a paginated list of all vectors in a specified vector index",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "s3vectors:GetVectors"
+    ]
+  },
+  "putvectorbucketpolicy": {
+    "name": "PutVectorBucketPolicy",
+    "description": "Grants permission to add an IAM resource policy to a specified vector bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "VectorBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putvectors": {
+    "name": "PutVectors",
+    "description": "Grants permission to add a batch of vectors to a specified vector index",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "queryvectors": {
+    "name": "QueryVectors",
+    "description": "Grants permission to find approximate nearest neighbors within a specified search vector index for a given query vector",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Index",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "s3vectors:GetVectors"
+    ]
+  }
+}

iamdata/data/actions/sagemaker-mlflow.json

@@ -82,6 +82,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteloggedmodel": {
+    "name": "DeleteLoggedModel",
+    "description": "Grants permission to delete a logged model in MLflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteloggedmodeltag": {
+    "name": "DeleteLoggedModelTag",
+    "description": "Grants permission to delete a tag for a logged model in MLflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletemodelversion": {
     "name": "DeleteModelVersion",
     "description": "Grants permission to delete a model version",
@@ -232,6 +262,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "finalizeloggedmodel": {
+    "name": "FinalizeLoggedModel",
+    "description": "Grants permission to set status for a logged model in MLflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdownloaduriformodelversionartifacts": {
     "name": "GetDownloadURIForModelVersionArtifacts",
     "description": "Grants permission to get a URI to download model artifacts for a specific model version",
@@ -292,6 +337,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getloggedmodel": {
+    "name": "GetLoggedModel",
+    "description": "Grants permission to get a logged model in MLflow",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getmetrichistory": {
     "name": "GetMetricHistory",
     "description": "Grants permission to get a list of all values for the specified metric for a given run",
@@ -397,6 +457,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listloggedmodelartifacts": {
+    "name": "ListLoggedModelArtifacts",
+    "description": "Grants permission to list artifacts for a logged model in MLflow",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "logbatch": {
     "name": "LogBatch",
     "description": "Grants permission to log a batch of metrics, parameters, and tags for a run",
@@ -427,6 +502,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "logloggedmodelparams": {
+    "name": "LogLoggedModelParams",
+    "description": "Grants permission to log params for a logged model in MLflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "logmetric": {
     "name": "LogMetric",
     "description": "Grants permission to log a metric for a run",
@@ -457,6 +547,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "logoutputs": {
+    "name": "LogOutputs",
+    "description": "Grants permission to log outputs, such as models, for a run in MLflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "logparam": {
     "name": "LogParam",
     "description": "Grants permission to log a parameter tracked during a run",
@@ -532,6 +637,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "searchloggedmodels": {
+    "name": "SearchLoggedModels",
+    "description": "Grants permission to search for logged models in MLflow",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "searchmodelversions": {
     "name": "SearchModelVersions",
     "description": "Grants permission to search for a model version",
@@ -607,6 +727,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "setloggedmodeltags": {
+    "name": "SetLoggedModelTags",
+    "description": "Grants permission to set tags for a logged model in MLflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "setmodelversiontag": {
     "name": "SetModelVersionTag",
     "description": "Grants permission to set a tag for the model version",

iamdata/data/actions/sagemaker.json

@@ -301,6 +301,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "notebook-instance-lifecycle-config",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "optimization-job",
         "required": false,
@@ -1121,6 +1127,27 @@
     ],
     "dependentActions": []
   },
+  "createhubcontentpresignedurls": {
+    "name": "CreateHubContentPresignedUrls",
+    "description": "Grants permission to generate S3 presigned URLs with GetObject permission for accessing model artifacts",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hub",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "hub-content",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createhubcontentreference": {
     "name": "CreateHubContentReference",
     "description": "Grants permission to create hub content reference",
@@ -1623,10 +1650,15 @@
         "name": "notebook-instance-lifecycle-config",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "sagemaker:AddTags"
+        ]
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createoptimizationjob": {
@@ -1858,6 +1890,7 @@
       "sagemaker:ImageArns",
       "sagemaker:ImageVersionArns",
       "sagemaker:OwnerUserProfileArn",
+      "sagemaker:RemoteAccess",
       "sagemaker:SpaceSharingType"
     ],
     "dependentActions": []
@@ -3178,6 +3211,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "notebook-instance-lifecycle-config",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "optimization-job",
         "required": false,
@@ -3493,6 +3532,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeclusterinference": {
+    "name": "DescribeClusterInference",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get information about the inference operator for a SageMaker HyperPod cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeclusternode": {
     "name": "DescribeClusterNode",
     "description": "Grants permission to return information about a SageMaker HyperPod cluster node",
@@ -4164,7 +4219,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:PipelineVersionId"
+    ],
     "dependentActions": []
   },
   "describepipelinedefinitionforexecution": {
@@ -5267,6 +5324,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listpipelineversions": {
+    "name": "ListPipelineVersions",
+    "description": "Grants permission to list versions of a pipeline",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "pipeline",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listpipelines": {
     "name": "ListPipelines",
     "description": "Grants permission to list pipelines",
@@ -5628,6 +5700,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "notebook-instance-lifecycle-config",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "optimization-job",
         "required": false,
@@ -5646,6 +5724,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "pipeline-execution",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "processing-job",
         "required": false,
@@ -6068,6 +6152,23 @@
         "dependentActions": []
       }
     ],
+    "conditionKeys": [
+      "sagemaker:PipelineVersionId"
+    ],
+    "dependentActions": []
+  },
+  "startsession": {
+    "name": "StartSession",
+    "description": "Grants permission to start a remote session for a SageMaker space",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "space",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -6431,6 +6532,28 @@
     ],
     "dependentActions": []
   },
+  "updateclusterinference": {
+    "name": "UpdateClusterInference",
+    "isPermissionOnly": true,
+    "description": "Grants permission to update the inference operator for a SageMaker HyperPod cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "eks:AssociateAccessPolicy",
+      "eks:DescribeCluster",
+      "eks:ListAssociatedAccessPolicies",
+      "iam:PassRole",
+      "sagemaker:DescribeCluster"
+    ]
+  },
   "updateclusterschedulerconfig": {
     "name": "UpdateClusterSchedulerConfig",
     "description": "Grants permission to update a cluster scheduler config",
@@ -6958,6 +7081,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatepipelineversion": {
+    "name": "UpdatePipelineVersion",
+    "description": "Grants permission to update a pipeline version",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "pipeline",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "sagemaker:PipelineVersionId"
+    ],
+    "dependentActions": []
+  },
   "updateproject": {
     "name": "UpdateProject",
     "description": "Grants permission to update a Project",
@@ -7009,6 +7149,7 @@
       "sagemaker:ImageArns",
       "sagemaker:ImageVersionArns",
       "sagemaker:OwnerUserProfileArn",
+      "sagemaker:RemoteAccess",
       "sagemaker:SpaceSharingType"
     ],
     "dependentActions": []

iamdata/data/actions/securitylake.json

@@ -130,6 +130,7 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": [

iamdata/data/conditionKeys/bedrock-agentcore.json

@@ -0,0 +1,22 @@
+{
+  "bedrock-agentcore:actorid": {
+    "key": "bedrock-agentcore:actorId",
+    "description": "Filters access by Actor Id",
+    "type": "String"
+  },
+  "bedrock-agentcore:namespace": {
+    "key": "bedrock-agentcore:namespace",
+    "description": "Filters access by namespace",
+    "type": "String"
+  },
+  "bedrock-agentcore:sessionid": {
+    "key": "bedrock-agentcore:sessionId",
+    "description": "Filters access by Session Id",
+    "type": "String"
+  },
+  "bedrock-agentcore:strategyid": {
+    "key": "bedrock-agentcore:strategyId",
+    "description": "Filters access by Memory Strategy Id",
+    "type": "String"
+  }
+}