iamdata 0.1.202509101__py3-none-any.whl → 0.1.202511241__py3-none-any.whl

iamdata/data/actions/s3tables.json

@@ -29,7 +29,11 @@
     "conditionKeys": [
       "s3tables:namespace",
       "s3tables:SSEAlgorithm",
-      "s3tables:KMSKeyArn"
+      "s3tables:KMSKeyArn",
+      "s3tables:TableBucketTag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -47,7 +51,11 @@
     ],
     "conditionKeys": [
       "s3tables:SSEAlgorithm",
-      "s3tables:KMSKeyArn"
+      "s3tables:KMSKeyArn",
+      "s3tables:TableBucketTag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -393,6 +401,30 @@
     ],
     "dependentActions": []
   },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list the tag for a S3Table's resource",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "TableBucket",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "s3tables:TableBucketTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "puttablebucketencryption": {
     "name": "PutTableBucketEncryption",
     "description": "Grants permission to put or overwrite encryption configuration on a table bucket",
@@ -534,6 +566,57 @@
     ],
     "dependentActions": []
   },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to tag a S3Table's resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "Table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "TableBucket",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "s3tables:TableBucketTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to untag a S3Table's resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "Table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "TableBucket",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:ResourceTag/${TagKey}",
+      "s3tables:TableBucketTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "updatetablemetadatalocation": {
     "name": "UpdateTableMetadataLocation",
     "description": "Grants permission to update the metadata location of a table",

iamdata/data/actions/sagemaker-unified-studio-mcp.json

@@ -0,0 +1,26 @@
+{
+  "callprivilegedtool": {
+    "name": "CallPrivilegedTool",
+    "description": "Grants permission to call privileged tools in MCP service",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "callreadonlytool": {
+    "name": "CallReadOnlyTool",
+    "description": "Grants permission to call read-only tools in MCP service",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invokemcp": {
+    "name": "InvokeMcp",
+    "description": "Grants permission to use MCP service",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

iamdata/data/actions/sagemaker.json

@@ -274,7 +274,11 @@
       {
         "name": "model-package",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "sagemaker:CurrentModelLifeCycleStageStatus",
+          "sagemaker:CurrentModelLifeCycleStage",
+          "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+        ],
         "dependentActions": []
       },
       {
@@ -479,7 +483,11 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:CurrentModelLifeCycleStageStatus",
+      "sagemaker:CurrentModelLifeCycleStage",
+      "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+    ],
     "dependentActions": []
   },
   "batchgetmetrics": {
@@ -1552,7 +1560,11 @@
       {
         "name": "model-package",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "sagemaker:CurrentModelLifeCycleStageStatus",
+          "sagemaker:CurrentModelLifeCycleStage",
+          "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+        ],
         "dependentActions": [
           "sagemaker:AddTags"
         ]
@@ -2778,7 +2790,11 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:CurrentModelLifeCycleStageStatus",
+      "sagemaker:CurrentModelLifeCycleStage",
+      "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+    ],
     "dependentActions": []
   },
   "deletemodelpackagegroup": {
@@ -3224,7 +3240,11 @@
       {
         "name": "model-package",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "sagemaker:CurrentModelLifeCycleStageStatus",
+          "sagemaker:CurrentModelLifeCycleStage",
+          "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+        ],
         "dependentActions": []
       },
       {
@@ -4154,7 +4174,11 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:CurrentModelLifeCycleStageStatus",
+      "sagemaker:CurrentModelLifeCycleStage",
+      "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+    ],
     "dependentActions": []
   },
   "describemodelpackagegroup": {
@@ -5777,7 +5801,11 @@
       {
         "name": "model-package",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "sagemaker:CurrentModelLifeCycleStageStatus",
+          "sagemaker:CurrentModelLifeCycleStage",
+          "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+        ],
         "dependentActions": []
       },
       {
@@ -7065,7 +7093,11 @@
       {
         "name": "model-package",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "sagemaker:CurrentModelLifeCycleStageStatus",
+          "sagemaker:CurrentModelLifeCycleStage",
+          "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+        ],
         "dependentActions": []
       }
     ],

iamdata/data/actions/scn.json

@@ -41,7 +41,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createdatalakedataset": {
@@ -56,7 +59,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createdatalakenamespace": {
@@ -71,7 +77,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createinstance": {
@@ -86,7 +95,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createssoapplication": {
@@ -361,7 +373,7 @@
   },
   "listdatalakedatasets": {
     "name": "ListDataLakeDatasets",
-    "description": "Grants permission to list the data lake datasets under specific instance and namespace",
+    "description": "Grants permission to list the data lake datasets under specific instance or namespace",
     "accessLevel": "List",
     "resourceTypes": [
       {

iamdata/data/actions/secretsmanager.json

@@ -24,7 +24,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -50,7 +51,8 @@
       "aws:TagKeys",
       "secretsmanager:ResourceTag/tag-key",
       "secretsmanager:AddReplicaRegions",
-      "secretsmanager:ForceOverwriteReplicaSecret"
+      "secretsmanager:ForceOverwriteReplicaSecret",
+      "secretsmanager:Type"
     ],
     "dependentActions": []
   },
@@ -71,7 +73,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -94,7 +97,8 @@
       "secretsmanager:ForceDeleteWithoutRecovery",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -115,7 +119,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -144,7 +149,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -167,7 +173,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -188,7 +195,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -218,7 +226,8 @@
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
       "secretsmanager:BlockPublicPolicy",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -239,7 +248,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -260,7 +270,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -283,7 +294,8 @@
       "aws:ResourceTag/${TagKey}",
       "secretsmanager:SecretPrimaryRegion",
       "secretsmanager:AddReplicaRegions",
-      "secretsmanager:ForceOverwriteReplicaSecret"
+      "secretsmanager:ForceOverwriteReplicaSecret",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -304,7 +316,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -328,7 +341,9 @@
       "aws:ResourceTag/${TagKey}",
       "secretsmanager:SecretPrimaryRegion",
       "secretsmanager:ModifyRotationRules",
-      "secretsmanager:RotateImmediately"
+      "secretsmanager:RotateImmediately",
+      "secretsmanager:resource/Type",
+      "secretsmanager:ExternalSecretRotationRoleArn"
     ],
     "dependentActions": []
   },
@@ -349,7 +364,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -372,7 +388,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -394,7 +411,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -418,7 +436,9 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:Type",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -440,7 +460,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -461,7 +482,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   }

iamdata/data/actions/securityhub.json

@@ -944,6 +944,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getfindingstrendsv2": {
+    "name": "GetFindingsTrendsV2",
+    "description": "Grants permission to retrieve findings trends",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getfreetrialenddate": {
     "name": "GetFreeTrialEndDate",
     "isPermissionOnly": true,
@@ -1082,6 +1097,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getresourcestrendsv2": {
+    "name": "GetResourcesTrendsV2",
+    "description": "Grants permission to retrieve resources trends",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getresourcesv2": {
     "name": "GetResourcesV2",
     "description": "Grants permission to retrieve a list of resources",

iamdata/data/actions/servicequotas.json

@@ -56,6 +56,14 @@
       "organizations:DescribeOrganization"
     ]
   },
+  "getautomanagementconfiguration": {
+    "name": "GetAutoManagementConfiguration",
+    "description": "Grants permission to retrieve the automatic management of Service Quotas configuration, including notification settings, opt-in type, and excluded quotas",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getrequestedservicequotachange": {
     "name": "GetRequestedServiceQuotaChange",
     "description": "Grants permission to retrieve the details for a particular service quota increase request",
@@ -194,6 +202,22 @@
     ],
     "dependentActions": []
   },
+  "startautomanagement": {
+    "name": "StartAutoManagement",
+    "description": "Grants permission to enable automatic management of Service Quotas for an AWS account, including notification preferences and excluded quotas configurations",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopautomanagement": {
+    "name": "StopAutoManagement",
+    "description": "Grants permission to stop automatic management of Service Quotas for an AWS account and remove all associated configurations",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to associate a set of tags with an existing SQ resource",
@@ -214,5 +238,13 @@
       "aws:TagKeys"
     ],
     "dependentActions": []
+  },
+  "updateautomanagement": {
+    "name": "UpdateAutoManagement",
+    "description": "Grants permission to update the automatic management of Service Quotas configuration, including notification preferences and excluded quotas",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

iamdata/data/actions/signin.json

@@ -1,4 +1,20 @@
 {
+  "authorizeoauth2access": {
+    "name": "AuthorizeOAuth2Access",
+    "description": "Grants permission to authenticate through a browser and obtain an OAuth 2.0 authorization code for credential exchange",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createoauth2token": {
+    "name": "CreateOAuth2Token",
+    "description": "Grants permission to exchange an authorization code for OAuth 2.0 access token and refresh token that can be used to access AWS services from developer tools and applications",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createtrustedidentitypropagationapplicationforconsole": {
     "name": "CreateTrustedIdentityPropagationApplicationForConsole",
     "description": "Grants permission to create an Identity Center application that represents the AWS Management Console on an Identity Center organization instance",