iamdata 0.1.202509141__tar.gz → 0.1.202509161__tar.gz

{iamdata-0.1.202509141 → iamdata-0.1.202509161}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iamdata
-Version: 0.1.202509141
+Version: 0.1.202509161
 Summary: IAM data for AWS actions, resources, and conditions based on IAM policy documents. Checked for updates daily.
 Project-URL: Homepage, https://github.com/cloud-copilot/iam-data-python
 Project-URL: Issues, https://github.com/cloud-copilot/iam-data-python/issues

{iamdata-0.1.202509141 → iamdata-0.1.202509161}/iamdata/data/actions/cloudformation.json

@@ -748,6 +748,16 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listallhookresults": {
+    "name": "ListAllHookResults",
+    "description": "Grants permission to return Hook invocations result information for a specified Hook, a combination of Hook and status, or all Hooks",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "cloudformation:TypeArn"
+    ],
+    "dependentActions": []
+  },
   "listchangesets": {
     "name": "ListChangeSets",
     "description": "Grants permission to return the ID and status of each active change set for a stack. For example, AWS CloudFormation lists change sets that are in the CREATE_IN_PROGRESS or CREATE_PENDING state",

{iamdata-0.1.202509141 → iamdata-0.1.202509161}/iamdata/data/actions/datazone.json

@@ -204,7 +204,6 @@
   },
   "createenvironmentblueprint": {
     "name": "CreateEnvironmentBlueprint",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a custom Environment Blueprint that allow user to add Environments to their Project",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -429,7 +428,6 @@
   },
   "deleteenvironmentblueprint": {
     "name": "DeleteEnvironmentBlueprint",
-    "isPermissionOnly": true,
     "description": "Grants permission to delete Environment Blueprint",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -1524,7 +1522,6 @@
   },
   "updateenvironmentblueprint": {
     "name": "UpdateEnvironmentBlueprint",
-    "isPermissionOnly": true,
     "description": "Grants permission to update Environment Blueprint settings",
     "accessLevel": "Write",
     "resourceTypes": [],

{iamdata-0.1.202509141 → iamdata-0.1.202509161}/iamdata/data/actions/identitystore.json

@@ -12,7 +12,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "creategroupmembership": {
     "name": "CreateGroupMembership",
@@ -23,7 +25,9 @@
         "name": "Group",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Identitystore",
@@ -41,6 +45,19 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createidentitystore": {
+    "name": "CreateIdentityStore",
+    "description": "Grants permission to create a new IdentityStore in an AWS account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt",
+      "kms:DescribeKey",
+      "kms:Encrypt",
+      "kms:GenerateDataKeyWithoutPlaintext"
+    ]
+  },
   "createuser": {
     "name": "CreateUser",
     "description": "Grants permission to create a user in the specified IdentityStore",
@@ -54,7 +71,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "deletegroup": {
     "name": "DeleteGroup",
@@ -65,7 +84,9 @@
         "name": "Group",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Identitystore",
@@ -86,7 +107,9 @@
         "name": "Group",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "GroupMembership",
@@ -110,6 +133,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteidentitystore": {
+    "name": "DeleteIdentityStore",
+    "description": "Grants permission to delete an IdentityStore",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteuser": {
     "name": "DeleteUser",
     "description": "Grants permission to delete a user in the specified IdentityStore",
@@ -119,7 +150,9 @@
         "name": "Identitystore",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "User",
@@ -140,7 +173,9 @@
         "name": "Group",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Identitystore",
@@ -161,7 +196,9 @@
         "name": "Group",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "GroupMembership",
@@ -194,7 +231,9 @@
         "name": "Identitystore",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "User",
@@ -215,7 +254,9 @@
         "name": "Group",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Identitystore",
@@ -236,7 +277,9 @@
         "name": "Group",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "GroupMembership",
@@ -269,7 +312,9 @@
         "name": "Identitystore",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "User",
@@ -290,7 +335,9 @@
         "name": "AllGroupMemberships",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Group",
@@ -323,7 +370,9 @@
         "name": "AllGroupMemberships",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Group",
@@ -350,7 +399,9 @@
         "name": "AllGroupMemberships",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Identitystore",
@@ -377,7 +428,9 @@
         "name": "AllGroups",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Identitystore",
@@ -398,7 +451,9 @@
         "name": "AllUsers",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Identitystore",
@@ -419,7 +474,9 @@
         "name": "Group",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Identitystore",
@@ -431,6 +488,19 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateidentitystore": {
+    "name": "UpdateIdentityStore",
+    "description": "Grants permission to update the configuration of an IdentityStore",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt",
+      "kms:DescribeKey",
+      "kms:Encrypt",
+      "kms:GenerateDataKeyWithoutPlaintext"
+    ]
+  },
   "updateuser": {
     "name": "UpdateUser",
     "description": "Grants permission to update user information in the specified IdentityStore",
@@ -440,7 +510,9 @@
         "name": "Identitystore",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "User",

{iamdata-0.1.202509141 → iamdata-0.1.202509161}/iamdata/data/actions/invoicing.json

@@ -35,6 +35,15 @@
     ],
     "dependentActions": []
   },
+  "getinvoicecorrection": {
+    "name": "GetInvoiceCorrection",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get Invoice Correction",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getinvoiceemaildeliverypreferences": {
     "name": "GetInvoiceEmailDeliveryPreferences",
     "isPermissionOnly": true,
@@ -68,6 +77,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listinvoicecorrections": {
+    "name": "ListInvoiceCorrections",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list Invoice Corrections",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listinvoicesummaries": {
     "name": "ListInvoiceSummaries",
     "description": "Grants permission to get Invoice summary information for your account or linked account",
@@ -110,6 +128,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startinvoicecorrection": {
+    "name": "StartInvoiceCorrection",
+    "isPermissionOnly": true,
+    "description": "Grants permission to start Invoice Correction",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource",

{iamdata-0.1.202509141 → iamdata-0.1.202509161}/iamdata/data/actions/observabilityadmin.json

@@ -1,4 +1,25 @@
 {
+  "createcentralizationrulefororganization": {
+    "name": "CreateCentralizationRuleForOrganization",
+    "description": "Grants permission to create a new organization centralization rule with the specified name for the organization",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization-centralization-rule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}",
+      "observabilityadmin:CentralizationSourceRegions",
+      "observabilityadmin:CentralizationDestinationRegion",
+      "observabilityadmin:CentralizationBackupRegion"
+    ],
+    "dependentActions": []
+  },
   "createtelemetryrule": {
     "name": "CreateTelemetryRule",
     "description": "Grants permission to create a new telemetry rule with the specified name for the account",
@@ -35,6 +56,21 @@
     ],
     "dependentActions": []
   },
+  "deletecentralizationrulefororganization": {
+    "name": "DeleteCentralizationRuleForOrganization",
+    "description": "Grants permission to delete an organization centralization rule with the specified name for the organization",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization-centralization-rule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletetelemetryrule": {
     "name": "DeleteTelemetryRule",
     "description": "Grants permission to delete a telemetry rule with the specified name for the account",
@@ -65,6 +101,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getcentralizationrulefororganization": {
+    "name": "GetCentralizationRuleForOrganization",
+    "description": "Grants permission to retrieve the specified organization centralization rule for the organization",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gettelemetryenrichmentstatus": {
+    "name": "GetTelemetryEnrichmentStatus",
+    "description": "Grants permission to retrieve the status of the Resource tags for telemetry feature for the account",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "gettelemetryevaluationstatus": {
     "name": "GetTelemetryEvaluationStatus",
     "description": "Grants permission to retrieve the Telemetry Config feature status for the account",
@@ -97,6 +149,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcentralizationrulesfororganization": {
+    "name": "ListCentralizationRulesForOrganization",
+    "description": "Grants permission to list the centralization rules for the organization",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listresourcetelemetry": {
     "name": "ListResourceTelemetry",
     "description": "Grants permission to retrieve telemetry configurations for resources associated with the account",
@@ -118,6 +178,12 @@
     "description": "Grants permission to list the tags for the specified resource",
     "accessLevel": "List",
     "resourceTypes": [
+      {
+        "name": "organization-centralization-rule",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "organization-telemetry-rule",
         "required": false,
@@ -150,6 +216,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "starttelemetryenrichment": {
+    "name": "StartTelemetryEnrichment",
+    "description": "Grants permission to enable the Resource tags for telemetry feature for the account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "starttelemetryevaluation": {
     "name": "StartTelemetryEvaluation",
     "description": "Grants permission to start the Telemetry Config feature for the account",
@@ -166,6 +240,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "stoptelemetryenrichment": {
+    "name": "StopTelemetryEnrichment",
+    "description": "Grants permission to disable the Resource tags for telemetry feature for the account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "stoptelemetryevaluation": {
     "name": "StopTelemetryEvaluation",
     "description": "Grants permission to stop the Telemetry Config feature for the account",
@@ -187,6 +269,12 @@
     "description": "Grants permission to add or update the specified tags for the specified resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "organization-centralization-rule",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "organization-telemetry-rule",
         "required": false,
@@ -211,6 +299,12 @@
     "description": "Grants permission to remove the specified tags from the specified resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "organization-centralization-rule",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "organization-telemetry-rule",
         "required": false,
@@ -229,6 +323,25 @@
     ],
     "dependentActions": []
   },
+  "updatecentralizationrulefororganization": {
+    "name": "UpdateCentralizationRuleForOrganization",
+    "description": "Grants permission to update the specified centralization rule for the organization",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization-centralization-rule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "observabilityadmin:CentralizationSourceRegions",
+      "observabilityadmin:CentralizationDestinationRegion",
+      "observabilityadmin:CentralizationBackupRegion"
+    ],
+    "dependentActions": []
+  },
   "updatetelemetryrule": {
     "name": "UpdateTelemetryRule",
     "description": "Grants permission to update the specified telemetry rule for the account",
@@ -246,7 +359,7 @@
   },
   "updatetelemetryrulefororganization": {
     "name": "UpdateTelemetryRuleForOrganization",
-    "description": "Grants permission to retrieve the specified organization telemetry rule for the organization",
+    "description": "Grants permission to update the specified telemetry rule for the organization",
     "accessLevel": "Write",
     "resourceTypes": [
       {

{iamdata-0.1.202509141 → iamdata-0.1.202509161}/iamdata/data/actions/s3.json

@@ -708,7 +708,8 @@
       "s3:signatureAge",
       "s3:signatureversion",
       "s3:TlsVersion",
-      "s3:x-amz-content-sha256"
+      "s3:x-amz-content-sha256",
+      "s3:if-match"
     ],
     "dependentActions": []
   },