iamdata 0.1.202507291__py3-none-any.whl → 0.1.202508241__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of iamdata might be problematic. Click here for more details.

Files changed (101) hide show
  1. iamdata/data/actions/aoss.json +32 -0
  2. iamdata/data/actions/aps.json +51 -0
  3. iamdata/data/actions/arc-region-switch.json +334 -0
  4. iamdata/data/actions/arc-zonal-shift.json +50 -0
  5. iamdata/data/actions/auditmanager.json +14 -1
  6. iamdata/data/actions/batch.json +162 -6
  7. iamdata/data/actions/bcm-dashboards.json +74 -0
  8. iamdata/data/actions/bcm-recommended-actions.json +10 -0
  9. iamdata/data/actions/bedrock-agentcore.json +328 -30
  10. iamdata/data/actions/bedrock.json +459 -0
  11. iamdata/data/actions/budgets.json +6 -2
  12. iamdata/data/actions/cases.json +22 -2
  13. iamdata/data/actions/chatbot.json +87 -20
  14. iamdata/data/actions/cleanrooms-ml.json +11 -0
  15. iamdata/data/actions/cleanrooms.json +44 -0
  16. iamdata/data/actions/connect.json +23 -0
  17. iamdata/data/actions/datazone.json +64 -0
  18. iamdata/data/actions/deadline.json +32 -10
  19. iamdata/data/actions/dms.json +1 -8
  20. iamdata/data/actions/ds.json +122 -0
  21. iamdata/data/actions/events.json +16 -0
  22. iamdata/data/actions/glue.json +32 -0
  23. iamdata/data/actions/groundtruthlabeling.json +7 -7
  24. iamdata/data/actions/guardduty.json +173 -0
  25. iamdata/data/actions/imagebuilder.json +185 -237
  26. iamdata/data/actions/iot.json +31 -0
  27. iamdata/data/actions/iotmanagedintegrations.json +11 -4
  28. iamdata/data/actions/iotsitewise.json +271 -0
  29. iamdata/data/actions/observabilityadmin.json +196 -0
  30. iamdata/data/actions/odb.json +4 -4
  31. iamdata/data/actions/outposts.json +15 -0
  32. iamdata/data/actions/partnercentral.json +96 -32
  33. iamdata/data/actions/qbusiness.json +20 -46
  34. iamdata/data/actions/quicksight.json +2 -6
  35. iamdata/data/actions/rds.json +12 -6
  36. iamdata/data/actions/repostspace.json +90 -0
  37. iamdata/data/actions/s3.json +261 -125
  38. iamdata/data/actions/s3express.json +24 -4
  39. iamdata/data/actions/sagemaker.json +128 -0
  40. iamdata/data/actions/security-ir.json +23 -8
  41. iamdata/data/actions/securityhub.json +12 -0
  42. iamdata/data/actions/servicediscovery.json +140 -14
  43. iamdata/data/actions/ses.json +286 -2
  44. iamdata/data/actions/social-messaging.json +64 -0
  45. iamdata/data/actions/sso.json +34 -50
  46. iamdata/data/actions/transcribe.json +12 -0
  47. iamdata/data/actions/uxc.json +26 -0
  48. iamdata/data/actions/workspaces-web.json +112 -0
  49. iamdata/data/actions/workspaces.json +114 -0
  50. iamdata/data/actions/xray.json +9 -3
  51. iamdata/data/conditionKeys/arc-region-switch.json +17 -0
  52. iamdata/data/conditionKeys/bcm-dashboards.json +1 -0
  53. iamdata/data/conditionKeys/bcm-recommended-actions.json +1 -0
  54. iamdata/data/conditionKeys/chatbot.json +17 -1
  55. iamdata/data/conditionKeys/ebs.json +2 -2
  56. iamdata/data/conditionKeys/imagebuilder.json +2 -2
  57. iamdata/data/conditionKeys/iotmanagedintegrations.json +10 -0
  58. iamdata/data/conditionKeys/observabilityadmin.json +17 -1
  59. iamdata/data/conditionKeys/quicksight.json +0 -5
  60. iamdata/data/conditionKeys/rds.json +5 -0
  61. iamdata/data/conditionKeys/s3.json +5 -0
  62. iamdata/data/conditionKeys/s3express.json +5 -0
  63. iamdata/data/conditionKeys/savingsplans.json +1 -1
  64. iamdata/data/conditionKeys/secretsmanager.json +1 -1
  65. iamdata/data/conditionKeys/servicediscovery.json +5 -0
  66. iamdata/data/conditionKeys/ses.json +5 -0
  67. iamdata/data/conditionKeys/uxc.json +1 -0
  68. iamdata/data/conditionKeys/xray.json +10 -0
  69. iamdata/data/conditionPatterns.json +128 -0
  70. iamdata/data/metadata.json +2 -2
  71. iamdata/data/resourceTypes/apigateway.json +3 -3
  72. iamdata/data/resourceTypes/arc-region-switch.json +9 -0
  73. iamdata/data/resourceTypes/batch.json +14 -0
  74. iamdata/data/resourceTypes/bcm-dashboards.json +1 -0
  75. iamdata/data/resourceTypes/bcm-recommended-actions.json +1 -0
  76. iamdata/data/resourceTypes/bedrock-agentcore.json +8 -0
  77. iamdata/data/resourceTypes/bedrock.json +14 -0
  78. iamdata/data/resourceTypes/chatbot.json +8 -2
  79. iamdata/data/resourceTypes/deadline.json +4 -1
  80. iamdata/data/resourceTypes/execute-api.json +1 -1
  81. iamdata/data/resourceTypes/guardduty.json +14 -0
  82. iamdata/data/resourceTypes/imagebuilder.json +12 -18
  83. iamdata/data/resourceTypes/iotsitewise.json +7 -0
  84. iamdata/data/resourceTypes/mpa.json +3 -3
  85. iamdata/data/resourceTypes/observabilityadmin.json +16 -1
  86. iamdata/data/resourceTypes/partnercentral.json +8 -2
  87. iamdata/data/resourceTypes/qbusiness.json +0 -4
  88. iamdata/data/resourceTypes/s3.json +19 -1
  89. iamdata/data/resourceTypes/s3express.json +5 -1
  90. iamdata/data/resourceTypes/securityhub.json +12 -3
  91. iamdata/data/resourceTypes/ses.json +11 -0
  92. iamdata/data/resourceTypes/uxc.json +1 -0
  93. iamdata/data/resourceTypes/workspaces-web.json +7 -0
  94. iamdata/data/resourceTypes/workspaces.json +4 -0
  95. iamdata/data/serviceNames.json +4 -0
  96. iamdata/data/services.json +4 -0
  97. iamdata/data/unassociatedConditions.json +20 -0
  98. {iamdata-0.1.202507291.dist-info → iamdata-0.1.202508241.dist-info}/METADATA +1 -1
  99. {iamdata-0.1.202507291.dist-info → iamdata-0.1.202508241.dist-info}/RECORD +101 -87
  100. {iamdata-0.1.202507291.dist-info → iamdata-0.1.202508241.dist-info}/WHEEL +0 -0
  101. {iamdata-0.1.202507291.dist-info → iamdata-0.1.202508241.dist-info}/licenses/LICENSE.txt +0 -0
iamdata/data/actions/s3.json CHANGED
@@ -4,18 +4,21 @@
4
4
  "description": "Grants permission to abort a multipart upload",
5
5
  "accessLevel": "Write",
6
6
  "resourceTypes": [
7
+ {
8
+ "name": "accesspointobject",
9
+ "required": false,
10
+ "conditionKeys": [],
11
+ "dependentActions": []
12
+ },
7
13
  {
8
14
  "name": "object",
9
- "required": true,
15
+ "required": false,
10
16
  "conditionKeys": [],
11
17
  "dependentActions": []
12
18
  }
13
19
  ],
14
20
  "conditionKeys": [
15
- "s3:DataAccessPointArn",
16
21
  "s3:AccessGrantsInstanceArn",
17
- "s3:DataAccessPointAccount",
18
- "s3:AccessPointNetworkOrigin",
19
22
  "s3:authType",
20
23
  "s3:ResourceAccount",
21
24
  "s3:signatureAge",
@@ -53,17 +56,20 @@
53
56
  "description": "Grants permission to allow circumvention of governance-mode object retention settings",
54
57
  "accessLevel": "Permissions management",
55
58
  "resourceTypes": [
59
+ {
60
+ "name": "accesspointobject",
61
+ "required": false,
62
+ "conditionKeys": [],
63
+ "dependentActions": []
64
+ },
56
65
  {
57
66
  "name": "object",
58
- "required": true,
67
+ "required": false,
59
68
  "conditionKeys": [],
60
69
  "dependentActions": []
61
70
  }
62
71
  ],
63
72
  "conditionKeys": [
64
- "s3:DataAccessPointAccount",
65
- "s3:DataAccessPointArn",
66
- "s3:AccessPointNetworkOrigin",
67
73
  "s3:RequestObjectTag/<key>",
68
74
  "s3:RequestObjectTagKeys",
69
75
  "s3:authType",
@@ -188,7 +194,11 @@
188
194
  "s3:signatureversion",
189
195
  "s3:TlsVersion",
190
196
  "s3:x-amz-acl",
191
- "s3:x-amz-content-sha256"
197
+ "s3:x-amz-content-sha256",
198
+ "s3:AccessPointTag/${TagKey}",
199
+ "aws:RequestTag/${TagKey}",
200
+ "aws:ResourceTag/${TagKey}",
201
+ "aws:TagKeys"
192
202
  ],
193
203
  "dependentActions": []
194
204
  },
@@ -454,7 +464,9 @@
454
464
  "s3:signatureAge",
455
465
  "s3:signatureversion",
456
466
  "s3:TlsVersion",
457
- "s3:x-amz-content-sha256"
467
+ "s3:x-amz-content-sha256",
468
+ "s3:AccessPointTag/${TagKey}",
469
+ "aws:ResourceTag/${TagKey}"
458
470
  ],
459
471
  "dependentActions": []
460
472
  },
@@ -504,7 +516,9 @@
504
516
  "s3:signatureAge",
505
517
  "s3:signatureversion",
506
518
  "s3:TlsVersion",
507
- "s3:x-amz-content-sha256"
519
+ "s3:x-amz-content-sha256",
520
+ "s3:AccessPointTag/${TagKey}",
521
+ "aws:ResourceTag/${TagKey}"
508
522
  ],
509
523
  "dependentActions": []
510
524
  },
@@ -674,18 +688,21 @@
674
688
  "description": "Grants permission to remove the null version of an object and insert a delete marker, which becomes the current version of the object",
675
689
  "accessLevel": "Write",
676
690
  "resourceTypes": [
691
+ {
692
+ "name": "accesspointobject",
693
+ "required": false,
694
+ "conditionKeys": [],
695
+ "dependentActions": []
696
+ },
677
697
  {
678
698
  "name": "object",
679
- "required": true,
699
+ "required": false,
680
700
  "conditionKeys": [],
681
701
  "dependentActions": []
682
702
  }
683
703
  ],
684
704
  "conditionKeys": [
685
705
  "s3:AccessGrantsInstanceArn",
686
- "s3:DataAccessPointAccount",
687
- "s3:DataAccessPointArn",
688
- "s3:AccessPointNetworkOrigin",
689
706
  "s3:authType",
690
707
  "s3:ResourceAccount",
691
708
  "s3:signatureAge",
@@ -700,17 +717,20 @@
700
717
  "description": "Grants permission to use the tagging subresource to remove the entire tag set from the specified object",
701
718
  "accessLevel": "Tagging",
702
719
  "resourceTypes": [
720
+ {
721
+ "name": "accesspointobject",
722
+ "required": false,
723
+ "conditionKeys": [],
724
+ "dependentActions": []
725
+ },
703
726
  {
704
727
  "name": "object",
705
- "required": true,
728
+ "required": false,
706
729
  "conditionKeys": [],
707
730
  "dependentActions": []
708
731
  }
709
732
  ],
710
733
  "conditionKeys": [
711
- "s3:DataAccessPointAccount",
712
- "s3:DataAccessPointArn",
713
- "s3:AccessPointNetworkOrigin",
714
734
  "s3:ExistingObjectTag/<key>",
715
735
  "s3:authType",
716
736
  "s3:ResourceAccount",
@@ -726,18 +746,21 @@
726
746
  "description": "Grants permission to remove a specific version of an object",
727
747
  "accessLevel": "Write",
728
748
  "resourceTypes": [
749
+ {
750
+ "name": "accesspointobject",
751
+ "required": false,
752
+ "conditionKeys": [],
753
+ "dependentActions": []
754
+ },
729
755
  {
730
756
  "name": "object",
731
- "required": true,
757
+ "required": false,
732
758
  "conditionKeys": [],
733
759
  "dependentActions": []
734
760
  }
735
761
  ],
736
762
  "conditionKeys": [
737
763
  "s3:AccessGrantsInstanceArn",
738
- "s3:DataAccessPointAccount",
739
- "s3:DataAccessPointArn",
740
- "s3:AccessPointNetworkOrigin",
741
764
  "s3:authType",
742
765
  "s3:ResourceAccount",
743
766
  "s3:signatureAge",
@@ -753,17 +776,20 @@
753
776
  "description": "Grants permission to remove the entire tag set for a specific version of the object",
754
777
  "accessLevel": "Tagging",
755
778
  "resourceTypes": [
779
+ {
780
+ "name": "accesspointobject",
781
+ "required": false,
782
+ "conditionKeys": [],
783
+ "dependentActions": []
784
+ },
756
785
  {
757
786
  "name": "object",
758
- "required": true,
787
+ "required": false,
759
788
  "conditionKeys": [],
760
789
  "dependentActions": []
761
790
  }
762
791
  ],
763
792
  "conditionKeys": [
764
- "s3:DataAccessPointAccount",
765
- "s3:DataAccessPointArn",
766
- "s3:AccessPointNetworkOrigin",
767
793
  "s3:ExistingObjectTag/<key>",
768
794
  "s3:authType",
769
795
  "s3:ResourceAccount",
@@ -1060,7 +1086,9 @@
1060
1086
  "s3:signatureAge",
1061
1087
  "s3:signatureversion",
1062
1088
  "s3:TlsVersion",
1063
- "s3:x-amz-content-sha256"
1089
+ "s3:x-amz-content-sha256",
1090
+ "s3:AccessPointTag/${TagKey}",
1091
+ "aws:ResourceTag/${TagKey}"
1064
1092
  ],
1065
1093
  "dependentActions": []
1066
1094
  },
@@ -1135,7 +1163,9 @@
1135
1163
  "s3:signatureAge",
1136
1164
  "s3:signatureversion",
1137
1165
  "s3:TlsVersion",
1138
- "s3:x-amz-content-sha256"
1166
+ "s3:x-amz-content-sha256",
1167
+ "s3:AccessPointTag/${TagKey}",
1168
+ "aws:ResourceTag/${TagKey}"
1139
1169
  ],
1140
1170
  "dependentActions": []
1141
1171
  },
@@ -1185,7 +1215,9 @@
1185
1215
  "s3:signatureAge",
1186
1216
  "s3:signatureversion",
1187
1217
  "s3:TlsVersion",
1188
- "s3:x-amz-content-sha256"
1218
+ "s3:x-amz-content-sha256",
1219
+ "s3:AccessPointTag/${TagKey}",
1220
+ "aws:ResourceTag/${TagKey}"
1189
1221
  ],
1190
1222
  "dependentActions": []
1191
1223
  },
@@ -1256,9 +1288,15 @@
1256
1288
  "description": "Grants permission to use the acl subresource to return the access control list (ACL) of an Amazon S3 bucket",
1257
1289
  "accessLevel": "Read",
1258
1290
  "resourceTypes": [
1291
+ {
1292
+ "name": "accesspoint",
1293
+ "required": false,
1294
+ "conditionKeys": [],
1295
+ "dependentActions": []
1296
+ },
1259
1297
  {
1260
1298
  "name": "bucket",
1261
- "required": true,
1299
+ "required": false,
1262
1300
  "conditionKeys": [],
1263
1301
  "dependentActions": []
1264
1302
  }
@@ -1278,9 +1316,15 @@
1278
1316
  "description": "Grants permission to return the CORS configuration information set for an Amazon S3 bucket",
1279
1317
  "accessLevel": "Read",
1280
1318
  "resourceTypes": [
1319
+ {
1320
+ "name": "accesspoint",
1321
+ "required": false,
1322
+ "conditionKeys": [],
1323
+ "dependentActions": []
1324
+ },
1281
1325
  {
1282
1326
  "name": "bucket",
1283
- "required": true,
1327
+ "required": false,
1284
1328
  "conditionKeys": [],
1285
1329
  "dependentActions": []
1286
1330
  }
@@ -1300,9 +1344,15 @@
1300
1344
  "description": "Grants permission to return the Region that an Amazon S3 bucket resides in",
1301
1345
  "accessLevel": "Read",
1302
1346
  "resourceTypes": [
1347
+ {
1348
+ "name": "accesspoint",
1349
+ "required": false,
1350
+ "conditionKeys": [],
1351
+ "dependentActions": []
1352
+ },
1303
1353
  {
1304
1354
  "name": "bucket",
1305
- "required": true,
1355
+ "required": false,
1306
1356
  "conditionKeys": [],
1307
1357
  "dependentActions": []
1308
1358
  }
@@ -1366,9 +1416,15 @@
1366
1416
  "description": "Grants permission to get the notification configuration of an Amazon S3 bucket",
1367
1417
  "accessLevel": "Read",
1368
1418
  "resourceTypes": [
1419
+ {
1420
+ "name": "accesspoint",
1421
+ "required": false,
1422
+ "conditionKeys": [],
1423
+ "dependentActions": []
1424
+ },
1369
1425
  {
1370
1426
  "name": "bucket",
1371
- "required": true,
1427
+ "required": false,
1372
1428
  "conditionKeys": [],
1373
1429
  "dependentActions": []
1374
1430
  }
@@ -1432,9 +1488,15 @@
1432
1488
  "description": "Grants permission to return the policy of the specified bucket",
1433
1489
  "accessLevel": "Read",
1434
1490
  "resourceTypes": [
1491
+ {
1492
+ "name": "accesspoint",
1493
+ "required": false,
1494
+ "conditionKeys": [],
1495
+ "dependentActions": []
1496
+ },
1435
1497
  {
1436
1498
  "name": "bucket",
1437
- "required": true,
1499
+ "required": false,
1438
1500
  "conditionKeys": [],
1439
1501
  "dependentActions": []
1440
1502
  }
@@ -1837,18 +1899,21 @@
1837
1899
  "description": "Grants permission to retrieve objects from Amazon S3",
1838
1900
  "accessLevel": "Read",
1839
1901
  "resourceTypes": [
1902
+ {
1903
+ "name": "accesspointobject",
1904
+ "required": false,
1905
+ "conditionKeys": [],
1906
+ "dependentActions": []
1907
+ },
1840
1908
  {
1841
1909
  "name": "object",
1842
- "required": true,
1910
+ "required": false,
1843
1911
  "conditionKeys": [],
1844
1912
  "dependentActions": []
1845
1913
  }
1846
1914
  ],
1847
1915
  "conditionKeys": [
1848
1916
  "s3:AccessGrantsInstanceArn",
1849
- "s3:DataAccessPointAccount",
1850
- "s3:DataAccessPointArn",
1851
- "s3:AccessPointNetworkOrigin",
1852
1917
  "s3:ExistingObjectTag/<key>",
1853
1918
  "s3:authType",
1854
1919
  "s3:ResourceAccount",
@@ -1866,18 +1931,21 @@
1866
1931
  "description": "Grants permission to return the access control list (ACL) of an object",
1867
1932
  "accessLevel": "Read",
1868
1933
  "resourceTypes": [
1934
+ {
1935
+ "name": "accesspointobject",
1936
+ "required": false,
1937
+ "conditionKeys": [],
1938
+ "dependentActions": []
1939
+ },
1869
1940
  {
1870
1941
  "name": "object",
1871
- "required": true,
1942
+ "required": false,
1872
1943
  "conditionKeys": [],
1873
1944
  "dependentActions": []
1874
1945
  }
1875
1946
  ],
1876
1947
  "conditionKeys": [
1877
1948
  "s3:AccessGrantsInstanceArn",
1878
- "s3:DataAccessPointAccount",
1879
- "s3:DataAccessPointArn",
1880
- "s3:AccessPointNetworkOrigin",
1881
1949
  "s3:ExistingObjectTag/<key>",
1882
1950
  "s3:authType",
1883
1951
  "s3:ResourceAccount",
@@ -1894,22 +1962,19 @@
1894
1962
  "accessLevel": "Read",
1895
1963
  "resourceTypes": [
1896
1964
  {
1897
- "name": "accesspoint",
1898
- "required": true,
1965
+ "name": "accesspointobject",
1966
+ "required": false,
1899
1967
  "conditionKeys": [],
1900
1968
  "dependentActions": []
1901
1969
  },
1902
1970
  {
1903
1971
  "name": "object",
1904
- "required": true,
1972
+ "required": false,
1905
1973
  "conditionKeys": [],
1906
1974
  "dependentActions": []
1907
1975
  }
1908
1976
  ],
1909
1977
  "conditionKeys": [
1910
- "s3:DataAccessPointAccount",
1911
- "s3:DataAccessPointArn",
1912
- "s3:AccessPointNetworkOrigin",
1913
1978
  "s3:ExistingObjectTag/<key>",
1914
1979
  "s3:authType",
1915
1980
  "s3:ResourceAccount",
@@ -1925,17 +1990,20 @@
1925
1990
  "description": "Grants permission to get an object's current Legal Hold status",
1926
1991
  "accessLevel": "Read",
1927
1992
  "resourceTypes": [
1993
+ {
1994
+ "name": "accesspointobject",
1995
+ "required": false,
1996
+ "conditionKeys": [],
1997
+ "dependentActions": []
1998
+ },
1928
1999
  {
1929
2000
  "name": "object",
1930
- "required": true,
2001
+ "required": false,
1931
2002
  "conditionKeys": [],
1932
2003
  "dependentActions": []
1933
2004
  }
1934
2005
  ],
1935
2006
  "conditionKeys": [
1936
- "s3:DataAccessPointAccount",
1937
- "s3:DataAccessPointArn",
1938
- "s3:AccessPointNetworkOrigin",
1939
2007
  "s3:authType",
1940
2008
  "s3:ResourceAccount",
1941
2009
  "s3:signatureAge",
@@ -1950,17 +2018,20 @@
1950
2018
  "description": "Grants permission to retrieve the retention settings for an object",
1951
2019
  "accessLevel": "Read",
1952
2020
  "resourceTypes": [
2021
+ {
2022
+ "name": "accesspointobject",
2023
+ "required": false,
2024
+ "conditionKeys": [],
2025
+ "dependentActions": []
2026
+ },
1953
2027
  {
1954
2028
  "name": "object",
1955
- "required": true,
2029
+ "required": false,
1956
2030
  "conditionKeys": [],
1957
2031
  "dependentActions": []
1958
2032
  }
1959
2033
  ],
1960
2034
  "conditionKeys": [
1961
- "s3:DataAccessPointAccount",
1962
- "s3:DataAccessPointArn",
1963
- "s3:AccessPointNetworkOrigin",
1964
2035
  "s3:authType",
1965
2036
  "s3:ResourceAccount",
1966
2037
  "s3:signatureAge",
@@ -1975,17 +2046,20 @@
1975
2046
  "description": "Grants permission to return the tag set of an object",
1976
2047
  "accessLevel": "Read",
1977
2048
  "resourceTypes": [
2049
+ {
2050
+ "name": "accesspointobject",
2051
+ "required": false,
2052
+ "conditionKeys": [],
2053
+ "dependentActions": []
2054
+ },
1978
2055
  {
1979
2056
  "name": "object",
1980
- "required": true,
2057
+ "required": false,
1981
2058
  "conditionKeys": [],
1982
2059
  "dependentActions": []
1983
2060
  }
1984
2061
  ],
1985
2062
  "conditionKeys": [
1986
- "s3:DataAccessPointAccount",
1987
- "s3:DataAccessPointArn",
1988
- "s3:AccessPointNetworkOrigin",
1989
2063
  "s3:ExistingObjectTag/<key>",
1990
2064
  "s3:authType",
1991
2065
  "s3:ResourceAccount",
@@ -2023,18 +2097,21 @@
2023
2097
  "description": "Grants permission to retrieve a specific version of an object",
2024
2098
  "accessLevel": "Read",
2025
2099
  "resourceTypes": [
2100
+ {
2101
+ "name": "accesspointobject",
2102
+ "required": false,
2103
+ "conditionKeys": [],
2104
+ "dependentActions": []
2105
+ },
2026
2106
  {
2027
2107
  "name": "object",
2028
- "required": true,
2108
+ "required": false,
2029
2109
  "conditionKeys": [],
2030
2110
  "dependentActions": []
2031
2111
  }
2032
2112
  ],
2033
2113
  "conditionKeys": [
2034
2114
  "s3:AccessGrantsInstanceArn",
2035
- "s3:DataAccessPointAccount",
2036
- "s3:DataAccessPointArn",
2037
- "s3:AccessPointNetworkOrigin",
2038
2115
  "s3:ExistingObjectTag/<key>",
2039
2116
  "s3:authType",
2040
2117
  "s3:ResourceAccount",
@@ -2051,18 +2128,21 @@
2051
2128
  "description": "Grants permission to return the access control list (ACL) of a specific object version",
2052
2129
  "accessLevel": "Read",
2053
2130
  "resourceTypes": [
2131
+ {
2132
+ "name": "accesspointobject",
2133
+ "required": false,
2134
+ "conditionKeys": [],
2135
+ "dependentActions": []
2136
+ },
2054
2137
  {
2055
2138
  "name": "object",
2056
- "required": true,
2139
+ "required": false,
2057
2140
  "conditionKeys": [],
2058
2141
  "dependentActions": []
2059
2142
  }
2060
2143
  ],
2061
2144
  "conditionKeys": [
2062
2145
  "s3:AccessGrantsInstanceArn",
2063
- "s3:DataAccessPointAccount",
2064
- "s3:DataAccessPointArn",
2065
- "s3:AccessPointNetworkOrigin",
2066
2146
  "s3:ExistingObjectTag/<key>",
2067
2147
  "s3:authType",
2068
2148
  "s3:ResourceAccount",
@@ -2079,17 +2159,20 @@
2079
2159
  "description": "Grants permission to retrieve attributes related to a specific version of an object",
2080
2160
  "accessLevel": "Read",
2081
2161
  "resourceTypes": [
2162
+ {
2163
+ "name": "accesspointobject",
2164
+ "required": false,
2165
+ "conditionKeys": [],
2166
+ "dependentActions": []
2167
+ },
2082
2168
  {
2083
2169
  "name": "object",
2084
- "required": true,
2170
+ "required": false,
2085
2171
  "conditionKeys": [],
2086
2172
  "dependentActions": []
2087
2173
  }
2088
2174
  ],
2089
2175
  "conditionKeys": [
2090
- "s3:DataAccessPointAccount",
2091
- "s3:DataAccessPointArn",
2092
- "s3:AccessPointNetworkOrigin",
2093
2176
  "s3:ExistingObjectTag/<key>",
2094
2177
  "s3:authType",
2095
2178
  "s3:ResourceAccount",
@@ -2128,17 +2211,20 @@
2128
2211
  "description": "Grants permission to return the tag set for a specific version of the object",
2129
2212
  "accessLevel": "Read",
2130
2213
  "resourceTypes": [
2214
+ {
2215
+ "name": "accesspointobject",
2216
+ "required": false,
2217
+ "conditionKeys": [],
2218
+ "dependentActions": []
2219
+ },
2131
2220
  {
2132
2221
  "name": "object",
2133
- "required": true,
2222
+ "required": false,
2134
2223
  "conditionKeys": [],
2135
2224
  "dependentActions": []
2136
2225
  }
2137
2226
  ],
2138
2227
  "conditionKeys": [
2139
- "s3:DataAccessPointAccount",
2140
- "s3:DataAccessPointArn",
2141
- "s3:AccessPointNetworkOrigin",
2142
2228
  "s3:ExistingObjectTag/<key>",
2143
2229
  "s3:authType",
2144
2230
  "s3:ResourceAccount",
@@ -2412,18 +2498,21 @@
2412
2498
  "description": "Grants permission to list some or all of the objects in an Amazon S3 bucket (up to 1000)",
2413
2499
  "accessLevel": "List",
2414
2500
  "resourceTypes": [
2501
+ {
2502
+ "name": "accesspoint",
2503
+ "required": false,
2504
+ "conditionKeys": [],
2505
+ "dependentActions": []
2506
+ },
2415
2507
  {
2416
2508
  "name": "bucket",
2417
- "required": true,
2509
+ "required": false,
2418
2510
  "conditionKeys": [],
2419
2511
  "dependentActions": []
2420
2512
  }
2421
2513
  ],
2422
2514
  "conditionKeys": [
2423
2515
  "s3:AccessGrantsInstanceArn",
2424
- "s3:DataAccessPointAccount",
2425
- "s3:DataAccessPointArn",
2426
- "s3:AccessPointNetworkOrigin",
2427
2516
  "s3:authType",
2428
2517
  "s3:delimiter",
2429
2518
  "s3:max-keys",
@@ -2458,7 +2547,9 @@
2458
2547
  "s3:signatureAge",
2459
2548
  "s3:signatureversion",
2460
2549
  "s3:TlsVersion",
2461
- "s3:x-amz-content-sha256"
2550
+ "s3:x-amz-content-sha256",
2551
+ "s3:AccessPointTag/${TagKey}",
2552
+ "aws:ResourceTag/${TagKey}"
2462
2553
  ],
2463
2554
  "dependentActions": []
2464
2555
  },
@@ -2467,18 +2558,21 @@
2467
2558
  "description": "Grants permission to list metadata about all the versions of objects in an Amazon S3 bucket",
2468
2559
  "accessLevel": "List",
2469
2560
  "resourceTypes": [
2561
+ {
2562
+ "name": "accesspoint",
2563
+ "required": false,
2564
+ "conditionKeys": [],
2565
+ "dependentActions": []
2566
+ },
2470
2567
  {
2471
2568
  "name": "bucket",
2472
- "required": true,
2569
+ "required": false,
2473
2570
  "conditionKeys": [],
2474
2571
  "dependentActions": []
2475
2572
  }
2476
2573
  ],
2477
2574
  "conditionKeys": [
2478
2575
  "s3:AccessGrantsInstanceArn",
2479
- "s3:DataAccessPointAccount",
2480
- "s3:DataAccessPointArn",
2481
- "s3:AccessPointNetworkOrigin",
2482
2576
  "s3:authType",
2483
2577
  "s3:delimiter",
2484
2578
  "s3:max-keys",
@@ -2548,18 +2642,21 @@
2548
2642
  "description": "Grants permission to list the parts that have been uploaded for a specific multipart upload",
2549
2643
  "accessLevel": "List",
2550
2644
  "resourceTypes": [
2645
+ {
2646
+ "name": "accesspointobject",
2647
+ "required": false,
2648
+ "conditionKeys": [],
2649
+ "dependentActions": []
2650
+ },
2551
2651
  {
2552
2652
  "name": "object",
2553
- "required": true,
2653
+ "required": false,
2554
2654
  "conditionKeys": [],
2555
2655
  "dependentActions": []
2556
2656
  }
2557
2657
  ],
2558
2658
  "conditionKeys": [
2559
2659
  "s3:AccessGrantsInstanceArn",
2560
- "s3:DataAccessPointAccount",
2561
- "s3:DataAccessPointArn",
2562
- "s3:AccessPointNetworkOrigin",
2563
2660
  "s3:authType",
2564
2661
  "s3:ResourceAccount",
2565
2662
  "s3:signatureAge",
@@ -2622,6 +2719,12 @@
2622
2719
  "conditionKeys": [],
2623
2720
  "dependentActions": []
2624
2721
  },
2722
+ {
2723
+ "name": "accesspoint",
2724
+ "required": false,
2725
+ "conditionKeys": [],
2726
+ "dependentActions": []
2727
+ },
2625
2728
  {
2626
2729
  "name": "storagelensgroup",
2627
2730
  "required": false,
@@ -2771,9 +2874,6 @@
2771
2874
  }
2772
2875
  ],
2773
2876
  "conditionKeys": [
2774
- "s3:DataAccessPointAccount",
2775
- "s3:DataAccessPointArn",
2776
- "s3:AccessPointNetworkOrigin",
2777
2877
  "s3:authType",
2778
2878
  "s3:ResourceAccount",
2779
2879
  "s3:signatureAge",
@@ -3288,18 +3388,21 @@
3288
3388
  "description": "Grants permission to add an object to a bucket",
3289
3389
  "accessLevel": "Write",
3290
3390
  "resourceTypes": [
3391
+ {
3392
+ "name": "accesspointobject",
3393
+ "required": false,
3394
+ "conditionKeys": [],
3395
+ "dependentActions": []
3396
+ },
3291
3397
  {
3292
3398
  "name": "object",
3293
- "required": true,
3399
+ "required": false,
3294
3400
  "conditionKeys": [],
3295
3401
  "dependentActions": []
3296
3402
  }
3297
3403
  ],
3298
3404
  "conditionKeys": [
3299
3405
  "s3:AccessGrantsInstanceArn",
3300
- "s3:DataAccessPointAccount",
3301
- "s3:DataAccessPointArn",
3302
- "s3:AccessPointNetworkOrigin",
3303
3406
  "s3:RequestObjectTag/<key>",
3304
3407
  "s3:RequestObjectTagKeys",
3305
3408
  "s3:authType",
@@ -3336,18 +3439,21 @@
3336
3439
  "description": "Grants permission to set the access control list (ACL) permissions for new or existing objects in an S3 bucket",
3337
3440
  "accessLevel": "Permissions management",
3338
3441
  "resourceTypes": [
3442
+ {
3443
+ "name": "accesspointobject",
3444
+ "required": false,
3445
+ "conditionKeys": [],
3446
+ "dependentActions": []
3447
+ },
3339
3448
  {
3340
3449
  "name": "object",
3341
- "required": true,
3450
+ "required": false,
3342
3451
  "conditionKeys": [],
3343
3452
  "dependentActions": []
3344
3453
  }
3345
3454
  ],
3346
3455
  "conditionKeys": [
3347
3456
  "s3:AccessGrantsInstanceArn",
3348
- "s3:DataAccessPointAccount",
3349
- "s3:DataAccessPointArn",
3350
- "s3:AccessPointNetworkOrigin",
3351
3457
  "s3:ExistingObjectTag/<key>",
3352
3458
  "s3:authType",
3353
3459
  "s3:ResourceAccount",
@@ -3370,17 +3476,20 @@
3370
3476
  "description": "Grants permission to apply a Legal Hold configuration to the specified object",
3371
3477
  "accessLevel": "Write",
3372
3478
  "resourceTypes": [
3479
+ {
3480
+ "name": "accesspointobject",
3481
+ "required": false,
3482
+ "conditionKeys": [],
3483
+ "dependentActions": []
3484
+ },
3373
3485
  {
3374
3486
  "name": "object",
3375
- "required": true,
3487
+ "required": false,
3376
3488
  "conditionKeys": [],
3377
3489
  "dependentActions": []
3378
3490
  }
3379
3491
  ],
3380
3492
  "conditionKeys": [
3381
- "s3:DataAccessPointAccount",
3382
- "s3:DataAccessPointArn",
3383
- "s3:AccessPointNetworkOrigin",
3384
3493
  "s3:authType",
3385
3494
  "s3:ResourceAccount",
3386
3495
  "s3:signatureAge",
@@ -3396,17 +3505,20 @@
3396
3505
  "description": "Grants permission to place an Object Retention configuration on an object",
3397
3506
  "accessLevel": "Write",
3398
3507
  "resourceTypes": [
3508
+ {
3509
+ "name": "accesspointobject",
3510
+ "required": false,
3511
+ "conditionKeys": [],
3512
+ "dependentActions": []
3513
+ },
3399
3514
  {
3400
3515
  "name": "object",
3401
- "required": true,
3516
+ "required": false,
3402
3517
  "conditionKeys": [],
3403
3518
  "dependentActions": []
3404
3519
  }
3405
3520
  ],
3406
3521
  "conditionKeys": [
3407
- "s3:DataAccessPointAccount",
3408
- "s3:DataAccessPointArn",
3409
- "s3:AccessPointNetworkOrigin",
3410
3522
  "s3:authType",
3411
3523
  "s3:ResourceAccount",
3412
3524
  "s3:signatureAge",
@@ -3424,17 +3536,20 @@
3424
3536
  "description": "Grants permission to set the supplied tag-set to an object that already exists in a bucket",
3425
3537
  "accessLevel": "Tagging",
3426
3538
  "resourceTypes": [
3539
+ {
3540
+ "name": "accesspointobject",
3541
+ "required": false,
3542
+ "conditionKeys": [],
3543
+ "dependentActions": []
3544
+ },
3427
3545
  {
3428
3546
  "name": "object",
3429
- "required": true,
3547
+ "required": false,
3430
3548
  "conditionKeys": [],
3431
3549
  "dependentActions": []
3432
3550
  }
3433
3551
  ],
3434
3552
  "conditionKeys": [
3435
- "s3:DataAccessPointAccount",
3436
- "s3:DataAccessPointArn",
3437
- "s3:AccessPointNetworkOrigin",
3438
3553
  "s3:ExistingObjectTag/<key>",
3439
3554
  "s3:RequestObjectTag/<key>",
3440
3555
  "s3:RequestObjectTagKeys",
@@ -3452,18 +3567,21 @@
3452
3567
  "description": "Grants permission to use the acl subresource to set the access control list (ACL) permissions for an object that already exists in a bucket",
3453
3568
  "accessLevel": "Permissions management",
3454
3569
  "resourceTypes": [
3570
+ {
3571
+ "name": "accesspointobject",
3572
+ "required": false,
3573
+ "conditionKeys": [],
3574
+ "dependentActions": []
3575
+ },
3455
3576
  {
3456
3577
  "name": "object",
3457
- "required": true,
3578
+ "required": false,
3458
3579
  "conditionKeys": [],
3459
3580
  "dependentActions": []
3460
3581
  }
3461
3582
  ],
3462
3583
  "conditionKeys": [
3463
3584
  "s3:AccessGrantsInstanceArn",
3464
- "s3:DataAccessPointAccount",
3465
- "s3:DataAccessPointArn",
3466
- "s3:AccessPointNetworkOrigin",
3467
3585
  "s3:ExistingObjectTag/<key>",
3468
3586
  "s3:authType",
3469
3587
  "s3:ResourceAccount",
@@ -3487,17 +3605,20 @@
3487
3605
  "description": "Grants permission to set the supplied tag-set for a specific version of an object",
3488
3606
  "accessLevel": "Tagging",
3489
3607
  "resourceTypes": [
3608
+ {
3609
+ "name": "accesspointobject",
3610
+ "required": false,
3611
+ "conditionKeys": [],
3612
+ "dependentActions": []
3613
+ },
3490
3614
  {
3491
3615
  "name": "object",
3492
- "required": true,
3616
+ "required": false,
3493
3617
  "conditionKeys": [],
3494
3618
  "dependentActions": []
3495
3619
  }
3496
3620
  ],
3497
3621
  "conditionKeys": [
3498
- "s3:DataAccessPointAccount",
3499
- "s3:DataAccessPointArn",
3500
- "s3:AccessPointNetworkOrigin",
3501
3622
  "s3:ExistingObjectTag/<key>",
3502
3623
  "s3:RequestObjectTag/<key>",
3503
3624
  "s3:RequestObjectTagKeys",
@@ -3651,17 +3772,20 @@
3651
3772
  "description": "Grants permission to restore an archived copy of an object back into Amazon S3",
3652
3773
  "accessLevel": "Write",
3653
3774
  "resourceTypes": [
3775
+ {
3776
+ "name": "accesspointobject",
3777
+ "required": false,
3778
+ "conditionKeys": [],
3779
+ "dependentActions": []
3780
+ },
3654
3781
  {
3655
3782
  "name": "object",
3656
- "required": true,
3783
+ "required": false,
3657
3784
  "conditionKeys": [],
3658
3785
  "dependentActions": []
3659
3786
  }
3660
3787
  ],
3661
3788
  "conditionKeys": [
3662
- "s3:DataAccessPointAccount",
3663
- "s3:DataAccessPointArn",
3664
- "s3:AccessPointNetworkOrigin",
3665
3789
  "s3:authType",
3666
3790
  "s3:ResourceAccount",
3667
3791
  "s3:signatureAge",
@@ -3718,6 +3842,12 @@
3718
3842
  "conditionKeys": [],
3719
3843
  "dependentActions": []
3720
3844
  },
3845
+ {
3846
+ "name": "accesspoint",
3847
+ "required": false,
3848
+ "conditionKeys": [],
3849
+ "dependentActions": []
3850
+ },
3721
3851
  {
3722
3852
  "name": "storagelensgroup",
3723
3853
  "required": false,
@@ -3760,6 +3890,12 @@
3760
3890
  "conditionKeys": [],
3761
3891
  "dependentActions": []
3762
3892
  },
3893
+ {
3894
+ "name": "accesspoint",
3895
+ "required": false,
3896
+ "conditionKeys": [],
3897
+ "dependentActions": []
3898
+ },
3763
3899
  {
3764
3900
  "name": "storagelensgroup",
3765
3901
  "required": false,