iamdata 0.1.202507291__tar.gz → 0.1.202508251__tar.gz

{iamdata-0.1.202507291 → iamdata-0.1.202508251}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iamdata
-Version: 0.1.202507291
+Version: 0.1.202508251
 Summary: IAM data for AWS actions, resources, and conditions based on IAM policy documents. Checked for updates daily.
 Project-URL: Homepage, https://github.com/cloud-copilot/iam-data-python
 Project-URL: Issues, https://github.com/cloud-copilot/iam-data-python/issues

{iamdata-0.1.202507291 → iamdata-0.1.202508251}/iamdata/data/actions/aoss.json

@@ -74,6 +74,14 @@
     ],
     "dependentActions": []
   },
+  "createindex": {
+    "name": "CreateIndex",
+    "description": "Grants permission to create an opensearch index",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createlifecyclepolicy": {
     "name": "CreateLifecyclePolicy",
     "description": "Grants permission to create a lifecycle policy",
@@ -154,6 +162,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteindex": {
+    "name": "DeleteIndex",
+    "description": "Grants permission to delete an opensearch index",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletelifecyclepolicy": {
     "name": "DeleteLifecyclePolicy",
     "description": "Grants permission to delete a lifecycle policy",
@@ -209,6 +225,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getindex": {
+    "name": "GetIndex",
+    "description": "Grants permission to get an opensearch index",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getpoliciesstats": {
     "name": "GetPoliciesStats",
     "description": "Grants permission to get statistis about the security policies in your account",
@@ -347,6 +371,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateindex": {
+    "name": "UpdateIndex",
+    "description": "Grants permission to update an opensearch index",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatelifecyclepolicy": {
     "name": "UpdateLifecyclePolicy",
     "description": "Grants permission to update a lifecycle policy",

{iamdata-0.1.202507291 → iamdata-0.1.202508251}/iamdata/data/actions/aps.json

@@ -195,6 +195,23 @@
     ],
     "dependentActions": []
   },
+  "deleteresourcepolicy": {
+    "name": "DeleteResourcePolicy",
+    "description": "Grants permission to delete workspace resource policy",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deleterulegroupsnamespace": {
     "name": "DeleteRuleGroupsNamespace",
     "description": "Grants permission to delete a rule groups namespace",
@@ -297,6 +314,23 @@
     ],
     "dependentActions": []
   },
+  "describeresourcepolicy": {
+    "name": "DescribeResourcePolicy",
+    "description": "Grants permission to describe workspace resource policy",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "describerulegroupsnamespace": {
     "name": "DescribeRuleGroupsNamespace",
     "description": "Grants permission to describe a rule groups namespace",
@@ -657,6 +691,23 @@
     ],
     "dependentActions": []
   },
+  "putresourcepolicy": {
+    "name": "PutResourcePolicy",
+    "description": "Grants permission to create and update workspace resource policy",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "putrulegroupsnamespace": {
     "name": "PutRuleGroupsNamespace",
     "description": "Grants permission to update a rule groups namespace",

iamdata-0.1.202508251/iamdata/data/actions/arc-region-switch.json

@@ -0,0 +1,334 @@
+{
+  "approveplanexecutionstep": {
+    "name": "ApprovePlanExecutionStep",
+    "description": "Grants permission to approve a plan execution step",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "cancelplanexecution": {
+    "name": "CancelPlanExecution",
+    "description": "Grants permission to cancel a plan execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createplan": {
+    "name": "CreatePlan",
+    "description": "Grants permission to create a plan",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deleteplan": {
+    "name": "DeletePlan",
+    "description": "Grants permission to delete a plan",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteresourcepolicy": {
+    "name": "DeleteResourcePolicy",
+    "isPermissionOnly": true,
+    "description": "Grants permission to delete the RAM access control policy for a plan",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getplan": {
+    "name": "GetPlan",
+    "description": "Grants permission to get information about plans in all AWS Regions using a control plane",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getplanevaluationstatus": {
+    "name": "GetPlanEvaluationStatus",
+    "description": "Grants permission to get a plan's evaluation status",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getplanexecution": {
+    "name": "GetPlanExecution",
+    "description": "Grants permission to get plan execution details and setup information",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getplaninregion": {
+    "name": "GetPlanInRegion",
+    "description": "Grants permission to get information about a plan in a specific AWS Region using the Region switch Regional data plane",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getresourcepolicy": {
+    "name": "GetResourcePolicy",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get the resource policy of a plan",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listplanexecutionevents": {
+    "name": "ListPlanExecutionEvents",
+    "description": "Grants permission to list plan execution events",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listplanexecutions": {
+    "name": "ListPlanExecutions",
+    "description": "Grants permission to list plan executions",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listplans": {
+    "name": "ListPlans",
+    "description": "Grants permission to list plans in all AWS Regions using a control plane",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listplansinregion": {
+    "name": "ListPlansInRegion",
+    "description": "Grants permission to list plans in a specific AWS Region using the Region switch Regional data plane",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listroute53healthchecks": {
+    "name": "ListRoute53HealthChecks",
+    "description": "Grants permission to list Route 53 health checks",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list tags for a resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "putresourcepolicy": {
+    "name": "PutResourcePolicy",
+    "isPermissionOnly": true,
+    "description": "Grants permission to define the RAM access control policy for a plan",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startplanexecution": {
+    "name": "StartPlanExecution",
+    "description": "Grants permission to start a plan execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to tag a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove tags from a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updateplan": {
+    "name": "UpdatePlan",
+    "description": "Grants permission to update a plan",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateplanexecution": {
+    "name": "UpdatePlanExecution",
+    "description": "Grants permission to update a plan execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateplanexecutionstep": {
+    "name": "UpdatePlanExecutionStep",
+    "description": "Grants permission to update a plan execution step",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

{iamdata-0.1.202507291 → iamdata-0.1.202508251}/iamdata/data/actions/arc-zonal-shift.json

@@ -1,4 +1,29 @@
 {
+  "cancelpracticerun": {
+    "name": "CancelPracticeRun",
+    "description": "Grants permission to cancel an active practice run",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ALB",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "NLB",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "arc-zonal-shift:ResourceIdentifier",
+      "aws:ResourceTag/${TagKey}",
+      "elasticloadbalancing:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "cancelzonalshift": {
     "name": "CancelZonalShift",
     "description": "Grants permission to cancel an active zonal shift",
@@ -134,6 +159,31 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startpracticerun": {
+    "name": "StartPracticeRun",
+    "description": "Grants permission to start a practice run",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ALB",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "NLB",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "arc-zonal-shift:ResourceIdentifier",
+      "aws:ResourceTag/${TagKey}",
+      "elasticloadbalancing:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "startzonalshift": {
     "name": "StartZonalShift",
     "description": "Grants permission to start a zonal shift",

{iamdata-0.1.202507291 → iamdata-0.1.202508251}/iamdata/data/actions/auditmanager.json

@@ -117,7 +117,14 @@
     "name": "CreateAssessmentFramework",
     "description": "Grants permission to create a framework for use in AWS Audit Manager",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "control",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
@@ -734,6 +741,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "control",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],