iamdata 0.1.202507281__py3-none-any.whl → 0.1.202508241__py3-none-any.whl

iamdata/data/actions/s3express.json

@@ -20,7 +20,9 @@
       "s3express:ResourceAccount",
       "s3express:signatureversion",
       "s3express:TlsVersion",
-      "s3express:x-amz-content-sha256"
+      "s3express:x-amz-content-sha256",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -365,9 +367,15 @@
     "description": "Grants permission to lists all of the tags for a specified resource",
     "accessLevel": "List",
     "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "bucket",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -497,9 +505,15 @@
     "description": "Grants permission to create a new user-defined tag or update an existing tag",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "bucket",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -520,9 +534,15 @@
     "description": "Grants permission to remove the specified user-defined tags from an S3 resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "bucket",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }

iamdata/data/actions/sagemaker.json

@@ -414,6 +414,42 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "attachclusternodevolume": {
+    "name": "AttachClusterNodeVolume",
+    "description": "Grants permission to attach an Amazon EBS volume to a SageMaker HyperPod cluster node",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:AttachVolume",
+      "ec2:DescribeVolumes",
+      "eks:DescribeCluster"
+    ]
+  },
+  "batchaddclusternodes": {
+    "name": "BatchAddClusterNodes",
+    "description": "Grants permission to add multiple nodes at a time to a SageMaker HyperPod cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "eks:DescribeCluster"
+    ]
+  },
   "batchdeleteclusternodes": {
     "name": "BatchDeleteClusterNodes",
     "description": "Grants permission to batch delete SageMaker HyperPod cluster nodes",
@@ -685,6 +721,10 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": [
+          "ec2:DescribeImages",
+          "ec2:DescribeSnapshots",
+          "ec2:ModifyImageAttribute",
+          "ec2:ModifySnapshotAttribute",
           "eks:AssociateAccessPolicy",
           "eks:CreateAccessEntry",
           "eks:DeleteAccessEntry",
@@ -3532,6 +3572,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeclusterevent": {
+    "name": "DescribeClusterEvent",
+    "description": "Grants permission to return information about an Event within a SageMaker HyperPod cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeclusterinference": {
     "name": "DescribeClusterInference",
     "isPermissionOnly": true,
@@ -4284,6 +4339,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describereservedcapacity": {
+    "name": "DescribeReservedCapacity",
+    "description": "Grants permission to return information about a specified Reserved Capacity",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "reserved-capacity",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describesharedmodel": {
     "name": "DescribeSharedModel",
     "isPermissionOnly": true,
@@ -4465,6 +4535,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "detachclusternodevolume": {
+    "name": "DetachClusterNodeVolume",
+    "description": "Grants permission to detach an Amazon EBS volume from a SageMaker HyperPod cluster node",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:DescribeVolumes",
+      "ec2:DetachVolume",
+      "eks:DescribeCluster"
+    ]
+  },
   "disablesagemakerservicecatalogportfolio": {
     "name": "DisableSagemakerServicecatalogPortfolio",
     "description": "Grants permission to disable a SageMaker Service Catalog Portfolio",
@@ -4801,6 +4890,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listclusterevents": {
+    "name": "ListClusterEvents",
+    "description": "Grants permission to list events within a SageMaker HyperPod cluster",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listclusternodes": {
     "name": "ListClusterNodes",
     "description": "Grants permission to list nodes within a SageMaker HyperPod cluster",
@@ -5849,6 +5953,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listultraserversbyreservedcapacity": {
+    "name": "ListUltraServersByReservedCapacity",
+    "description": "Grants permission to list all UltraServers in a specified Reserved Capacity",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "reserved-capacity",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listuserprofiles": {
     "name": "ListUserProfiles",
     "description": "Grants permission to list the UserProfiles in your account",
@@ -6503,12 +6622,17 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": [
+          "ec2:DescribeImages",
+          "ec2:DescribeSnapshots",
+          "ec2:ModifyImageAttribute",
+          "ec2:ModifySnapshotAttribute",
           "eks:AssociateAccessPolicy",
           "eks:CreateAccessEntry",
           "eks:DeleteAccessEntry",
           "eks:DescribeAccessEntry",
           "eks:DescribeCluster",
           "iam:PassRole",
+          "sagemaker:BatchAddClusterNodes",
           "sagemaker:BatchDeleteClusterNodes"
         ]
       },
@@ -6583,6 +6707,10 @@
     ],
     "conditionKeys": [],
     "dependentActions": [
+      "ec2:DescribeImages",
+      "ec2:DescribeSnapshots",
+      "ec2:ModifyImageAttribute",
+      "ec2:ModifySnapshotAttribute",
       "eks:DescribeCluster"
     ]
   },

iamdata/data/actions/security-ir.json

@@ -48,7 +48,14 @@
     "name": "CreateCase",
     "description": "Grants permission to create a case",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "case",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -74,16 +81,23 @@
     "name": "CreateMembership",
     "description": "Grants permission to create a membership",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "membership",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:CreateServiceLinkedRole",
+          "organizations:DescribeOrganization",
+          "organizations:ListDelegatedAdministrators"
+        ]
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole",
-      "organizations:DescribeOrganization",
-      "organizations:ListDelegatedAdministrators"
-    ]
+    "dependentActions": []
   },
   "getcase": {
     "name": "GetCase",
@@ -323,7 +337,8 @@
     ],
     "conditionKeys": [],
     "dependentActions": [
-      "iam:CreateServiceLinkedRole"
+      "iam:CreateServiceLinkedRole",
+      "organizations:DescribeOrganizationalUnit"
     ]
   },
   "updateresolvertype": {

iamdata/data/actions/securityhub.json

@@ -1385,6 +1385,12 @@
     "description": "Grants permission to add tags to a Security Hub resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "aggregatorv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "automation-rule",
         "required": false,
@@ -1430,6 +1436,12 @@
     "description": "Grants permission to remove tags from a Security Hub resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "aggregatorv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "automation-rule",
         "required": false,

iamdata/data/actions/servicediscovery.json

@@ -72,6 +72,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteresourcepolicy": {
+    "name": "DeleteResourcePolicy",
+    "isPermissionOnly": true,
+    "description": "Grants permission to delete the RAM access control policy for a namespace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "namespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteservice": {
     "name": "DeleteService",
     "description": "Grants permission to delete a specified service",
@@ -84,7 +100,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "servicediscovery:ServiceCreatedByAccount"
+    ],
     "dependentActions": []
   },
   "deleteserviceattributes": {
@@ -99,7 +117,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "servicediscovery:ServiceCreatedByAccount"
+    ],
     "dependentActions": []
   },
   "deregisterinstance": {
@@ -115,7 +135,8 @@
       }
     ],
     "conditionKeys": [
-      "servicediscovery:ServiceArn"
+      "servicediscovery:ServiceArn",
+      "servicediscovery:ServiceCreatedByAccount"
     ],
     "dependentActions": []
   },
@@ -123,7 +144,20 @@
     "name": "DiscoverInstances",
     "description": "Grants permission to discover registered instances for a specified namespace and service",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "namespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "servicediscovery:NamespaceName",
       "servicediscovery:ServiceName"
@@ -134,7 +168,20 @@
     "name": "DiscoverInstancesRevision",
     "description": "Grants permission to discover the revision of the instances for a specified namespace and service",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "namespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "servicediscovery:NamespaceName",
       "servicediscovery:ServiceName"
@@ -145,7 +192,14 @@
     "name": "GetInstance",
     "description": "Grants permission to get information about a specified instance",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "servicediscovery:ServiceArn"
     ],
@@ -155,7 +209,14 @@
     "name": "GetInstancesHealthStatus",
     "description": "Grants permission to get the current health status (Healthy, Unhealthy, or Unknown) of one or more instances",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "servicediscovery:ServiceArn"
     ],
@@ -180,7 +241,36 @@
     "name": "GetOperation",
     "description": "Grants permission to get information about a specific operation",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "namespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "service",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getresourcepolicy": {
+    "name": "GetResourcePolicy",
+    "isPermissionOnly": true,
+    "description": "Grants permission to read the RAM access control policy for a namespace",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "namespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -218,7 +308,14 @@
     "name": "ListInstances",
     "description": "Grants permission to get summary information about the instances that were registered with a specified service",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "servicediscovery:ServiceArn"
     ],
@@ -256,6 +353,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putresourcepolicy": {
+    "name": "PutResourcePolicy",
+    "isPermissionOnly": true,
+    "description": "Grants permission to define the RAM access control policy for a namespace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "namespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "registerinstance": {
     "name": "RegisterInstance",
     "description": "Grants permission to register an instance based on the settings in a specified service",
@@ -269,7 +382,8 @@
       }
     ],
     "conditionKeys": [
-      "servicediscovery:ServiceArn"
+      "servicediscovery:ServiceArn",
+      "servicediscovery:ServiceCreatedByAccount"
     ],
     "dependentActions": []
   },
@@ -313,9 +427,17 @@
     "name": "UpdateInstanceCustomHealthStatus",
     "description": "Grants permission to update the current health status for an instance that has a custom health check",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
-      "servicediscovery:ServiceArn"
+      "servicediscovery:ServiceArn",
+      "servicediscovery:ServiceCreatedByAccount"
     ],
     "dependentActions": []
   },
@@ -361,7 +483,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "servicediscovery:ServiceCreatedByAccount"
+    ],
     "dependentActions": []
   },
   "updateserviceattributes": {
@@ -376,7 +500,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "servicediscovery:ServiceCreatedByAccount"
+    ],
     "dependentActions": []
   }
 }