iamdata 0.1.202509161__py3-none-any.whl → 0.1.202509181__py3-none-any.whl

iamdata/data/actions/evs.json

@@ -1,4 +1,19 @@
 {
+  "associateeiptovlan": {
+    "name": "AssociateEipToVlan",
+    "description": "Grants permission to associate an Elastic IP address (EIP) with a public VLAN in an Amazon EVS environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "environment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createenvironment": {
     "name": "CreateEnvironment",
     "description": "Grants permission to create an Amazon EVS environment",
@@ -55,6 +70,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disassociateeipfromvlan": {
+    "name": "DisassociateEipFromVlan",
+    "description": "Grants permission to disassociate an Elastic IP address (EIP) from a public VLAN in an Amazon EVS environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "environment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getenvironment": {
     "name": "GetEnvironment",
     "description": "Grants permission to get an Amazon EVS environment",

iamdata/data/actions/sso-oauth.json

@@ -1,7 +1,7 @@
 {
   "createtokenwithiam": {
     "name": "CreateTokenWithIAM",
-    "description": "Grants permission to create OAuth/OIDC tokens to access IAM Identity Center integrated applications",
+    "description": "Grants permission to create and return OAuth 2.0 access tokens and refresh tokens for authorized client applications. These tokens might contain defined scopes that specify permissions such as `read:profile` or `write:data`",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -12,6 +12,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   }
 }

iamdata/data/actions/sso.json

@@ -6,7 +6,9 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": [
-      "ds:AuthorizeApplication"
+      "ds:AuthorizeApplication",
+      "identitystore:CreateIdentityStore",
+      "kms:Decrypt"
     ]
   },
   "associateprofile": {
@@ -15,7 +17,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "attachcustomermanagedpolicyreferencetopermissionset": {
     "name": "AttachCustomerManagedPolicyReferenceToPermissionSet",
@@ -26,7 +30,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -47,7 +53,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -68,7 +76,9 @@
         "name": "Account",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Instance",
@@ -95,7 +105,9 @@
         "name": "ApplicationProvider",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Instance",
@@ -119,7 +131,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -133,7 +147,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "createapplicationinstancecertificate": {
     "name": "CreateApplicationInstanceCertificate",
@@ -141,7 +157,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "createinstance": {
     "name": "CreateInstance",
@@ -154,6 +172,7 @@
         "conditionKeys": [],
         "dependentActions": [
           "iam:CreateServiceLinkedRole",
+          "identitystore:CreateIdentityStore",
           "organizations:DescribeOrganization"
         ]
       }
@@ -187,7 +206,8 @@
       "iam:ListAttachedRolePolicies",
       "iam:ListRolePolicies",
       "iam:PutRolePolicy",
-      "iam:UpdateAssumeRolePolicy"
+      "iam:UpdateAssumeRolePolicy",
+      "kms:Decrypt"
     ]
   },
   "createmanagedapplicationinstance": {
@@ -196,7 +216,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "createpermissionset": {
     "name": "CreatePermissionSet",
@@ -207,7 +229,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -228,7 +252,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "createtrust": {
     "name": "CreateTrust",
@@ -236,7 +262,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "createtrustedtokenissuer": {
     "name": "CreateTrustedTokenIssuer",
@@ -247,7 +275,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -265,7 +295,9 @@
         "name": "Account",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Instance",
@@ -292,7 +324,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -309,7 +343,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -326,7 +362,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -343,7 +381,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -360,7 +400,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -374,7 +416,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "deleteapplicationinstancecertificate": {
     "name": "DeleteApplicationInstanceCertificate",
@@ -382,7 +426,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "deleteinlinepolicyfrompermissionset": {
     "name": "DeleteInlinePolicyFromPermissionSet",
@@ -393,7 +439,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -418,7 +466,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "identitystore:DeleteIdentityStore"
+    ]
   },
   "deleteinstanceaccesscontrolattributeconfiguration": {
     "name": "DeleteInstanceAccessControlAttributeConfiguration",
@@ -433,7 +483,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "deletemanagedapplicationinstance": {
     "name": "DeleteManagedApplicationInstance",
@@ -441,7 +493,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "deletepermissionset": {
     "name": "DeletePermissionSet",
@@ -452,7 +506,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -473,7 +529,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -491,7 +549,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "deletetrustedtokenissuer": {
     "name": "DeleteTrustedTokenIssuer",
@@ -506,7 +566,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "describeaccountassignmentcreationstatus": {
     "name": "DescribeAccountAssignmentCreationStatus",
@@ -521,7 +583,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "describeaccountassignmentdeletionstatus": {
     "name": "DescribeAccountAssignmentDeletionStatus",
@@ -536,7 +600,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "describeapplication": {
     "name": "DescribeApplication",
@@ -547,7 +613,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -564,7 +632,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -615,7 +685,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "describepermissionset": {
     "name": "DescribePermissionSet",
@@ -626,7 +698,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -651,7 +725,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "describeregisteredregions": {
     "name": "DescribeRegisteredRegions",
@@ -674,7 +750,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "detachcustomermanagedpolicyreferencefrompermissionset": {
     "name": "DetachCustomerManagedPolicyReferenceFromPermissionSet",
@@ -685,7 +763,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -706,7 +786,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -725,7 +807,9 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": [
-      "ds:UnauthorizeApplication"
+      "ds:UnauthorizeApplication",
+      "identitystore:DeleteIdentityStore",
+      "kms:Decrypt"
     ]
   },
   "disassociateprofile": {
@@ -734,7 +818,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "getapplicationaccessscope": {
     "name": "GetApplicationAccessScope",
@@ -745,7 +831,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -762,7 +850,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -779,7 +869,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -796,7 +888,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -810,7 +904,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "getapplicationsessionconfiguration": {
     "name": "GetApplicationSessionConfiguration",
@@ -821,7 +917,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -846,7 +944,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -864,7 +964,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "getmfadevicemanagementfordirectory": {
     "name": "GetMfaDeviceManagementForDirectory",
@@ -872,7 +974,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "getpermissionset": {
     "name": "GetPermissionSet",
@@ -880,7 +984,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "getpermissionsboundaryforpermissionset": {
     "name": "GetPermissionsBoundaryForPermissionSet",
@@ -891,7 +997,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -909,7 +1017,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "getssostatus": {
     "name": "GetSSOStatus",
@@ -925,7 +1035,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "getssoconfiguration": {
     "name": "GetSsoConfiguration",
@@ -933,7 +1045,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "gettrust": {
     "name": "GetTrust",
@@ -941,7 +1055,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "importapplicationinstanceserviceprovidermetadata": {
     "name": "ImportApplicationInstanceServiceProviderMetadata",
@@ -949,7 +1065,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listaccountassignmentcreationstatus": {
     "name": "ListAccountAssignmentCreationStatus",
@@ -964,7 +1082,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listaccountassignmentdeletionstatus": {
     "name": "ListAccountAssignmentDeletionStatus",
@@ -979,7 +1099,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listaccountassignments": {
     "name": "ListAccountAssignments",
@@ -990,7 +1112,9 @@
         "name": "Account",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Instance",
@@ -1021,7 +1145,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listaccountsforprovisionedpermissionset": {
     "name": "ListAccountsForProvisionedPermissionSet",
@@ -1032,7 +1158,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -1053,7 +1181,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1070,7 +1200,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1087,7 +1219,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1104,7 +1238,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1121,7 +1257,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1135,7 +1273,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listapplicationinstances": {
     "name": "ListApplicationInstances",
@@ -1144,6 +1284,7 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": [
+      "kms:Decrypt",
       "sso:GetApplicationInstance"
     ]
   },
@@ -1178,7 +1319,9 @@
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listcustomermanagedpolicyreferencesinpermissionset": {
     "name": "ListCustomerManagedPolicyReferencesInPermissionSet",
@@ -1189,7 +1332,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -1207,7 +1352,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listinstances": {
     "name": "ListInstances",
@@ -1226,7 +1373,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -1251,7 +1400,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listpermissionsets": {
     "name": "ListPermissionSets",
@@ -1266,7 +1417,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listpermissionsetsprovisionedtoaccount": {
     "name": "ListPermissionSetsProvisionedToAccount",
@@ -1277,7 +1430,9 @@
         "name": "Account",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Instance",
@@ -1295,7 +1450,9 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "listprofiles": {
     "name": "ListProfiles",
@@ -1304,6 +1461,7 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": [
+      "kms:Decrypt",
       "sso:GetProfile"
     ]
   },
@@ -1316,7 +1474,9 @@
         "name": "Application",
         "required": false,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Instance",
@@ -1353,7 +1513,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "provisionpermissionset": {
     "name": "ProvisionPermissionSet",
@@ -1364,7 +1526,9 @@
         "name": "Account",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Instance",
@@ -1391,7 +1555,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1408,7 +1574,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1425,7 +1593,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1442,7 +1612,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1459,7 +1631,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1476,7 +1650,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -1494,7 +1670,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "putpermissionsboundarytopermissionset": {
     "name": "PutPermissionsBoundaryToPermissionSet",
@@ -1505,7 +1683,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -1523,7 +1703,9 @@
     "accessLevel": "Permissions management",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "searchgroups": {
     "name": "SearchGroups",
@@ -1532,7 +1714,8 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": [
-      "ds:DescribeDirectories"
+      "ds:DescribeDirectories",
+      "kms:Decrypt"
     ]
   },
   "searchusers": {
@@ -1542,7 +1725,8 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": [
-      "ds:DescribeDirectories"
+      "ds:DescribeDirectories",
+      "kms:Decrypt"
     ]
   },
   "startsso": {
@@ -1552,6 +1736,10 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": [
+      "kms:Decrypt",
+      "kms:DescribeKey",
+      "kms:Encrypt",
+      "kms:GenerateDataKeyWithoutPlaintext",
       "organizations:DescribeOrganization",
       "organizations:EnableAWSServiceAccess"
     ]
@@ -1565,7 +1753,9 @@
         "name": "Application",
         "required": false,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Instance",
@@ -1601,7 +1791,9 @@
         "name": "Application",
         "required": false,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "Instance",
@@ -1636,7 +1828,9 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
     "conditionKeys": [
@@ -1650,7 +1844,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updateapplicationinstancedisplaydata": {
     "name": "UpdateApplicationInstanceDisplayData",
@@ -1658,7 +1854,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updateapplicationinstanceresponseconfiguration": {
     "name": "UpdateApplicationInstanceResponseConfiguration",
@@ -1666,7 +1864,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updateapplicationinstanceresponseschemaconfiguration": {
     "name": "UpdateApplicationInstanceResponseSchemaConfiguration",
@@ -1674,7 +1874,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updateapplicationinstancesecurityconfiguration": {
     "name": "UpdateApplicationInstanceSecurityConfiguration",
@@ -1682,7 +1884,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updateapplicationinstanceserviceproviderconfiguration": {
     "name": "UpdateApplicationInstanceServiceProviderConfiguration",
@@ -1690,7 +1894,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updateapplicationinstancestatus": {
     "name": "UpdateApplicationInstanceStatus",
@@ -1698,7 +1904,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updateinstance": {
     "name": "UpdateInstance",
@@ -1713,7 +1921,13 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "identitystore:UpdateIdentityStore",
+      "kms:Decrypt",
+      "kms:DescribeKey",
+      "kms:Encrypt",
+      "kms:GenerateDataKeyWithoutPlaintext"
+    ]
   },
   "updateinstanceaccesscontrolattributeconfiguration": {
     "name": "UpdateInstanceAccessControlAttributeConfiguration",
@@ -1728,7 +1942,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updatemanagedapplicationinstancestatus": {
     "name": "UpdateManagedApplicationInstanceStatus",
@@ -1736,7 +1952,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updatepermissionset": {
     "name": "UpdatePermissionSet",
@@ -1747,7 +1965,9 @@
         "name": "Instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       },
       {
         "name": "PermissionSet",
@@ -1765,7 +1985,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updatessoconfiguration": {
     "name": "UpdateSSOConfiguration",
@@ -1773,7 +1995,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updatetrust": {
     "name": "UpdateTrust",
@@ -1781,7 +2005,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   },
   "updatetrustedtokenissuer": {
     "name": "UpdateTrustedTokenIssuer",
@@ -1796,6 +2022,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
   }
 }

iamdata/data/actions/wisdom.json

@@ -1143,6 +1143,21 @@
     ],
     "dependentActions": []
   },
+  "retrieve": {
+    "name": "Retrieve",
+    "description": "Grants permission to retrieve knowledge content from specified assistant associations",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Assistant",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "searchcontent": {
     "name": "SearchContent",
     "description": "Grants permission to search for content referencing a specified knowledge base. Can be used to get a specific content resource by its name",

iamdata/data/actions/workspaces.json

@@ -659,22 +659,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describerootclientcertificates": {
-    "name": "DescribeRootClientCertificates",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve information for root client certificates",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "certificateid",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describetags": {
     "name": "DescribeTags",
     "description": "Grants permission to describe the tags for WorkSpaces resources",

iamdata/data/metadata.json

@@ -1,4 +1,4 @@
 {
-  "version": "0.1.202509161",
-  "updatedAt": "2025-09-16T04:45:17.124Z"
+  "version": "0.1.202509181",
+  "updatedAt": "2025-09-18T04:46:01.927Z"
 }

{iamdata-0.1.202509161.dist-info → iamdata-0.1.202509181.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iamdata
-Version: 0.1.202509161
+Version: 0.1.202509181
 Summary: IAM data for AWS actions, resources, and conditions based on IAM policy documents. Checked for updates daily.
 Project-URL: Homepage, https://github.com/cloud-copilot/iam-data-python
 Project-URL: Issues, https://github.com/cloud-copilot/iam-data-python/issues

{iamdata-0.1.202509161.dist-info → iamdata-0.1.202509181.dist-info}/RECORD

@@ -5,7 +5,7 @@ iamdata/resources.py,sha256=q55U8l74HnjnkHp1-i2-rZCe-IsZpZWmfGeMvQjf4xo,1166
 iamdata/services.py,sha256=trEYZQnUb_vwEN-L29RY-vJFnEXDGrpppVpAeQazjgw,689
 iamdata/utils.py,sha256=mwNqfgNO51L33Ag_K9VxaP85J6XRoZrN7rKz6Q_DJQk,398
 iamdata/data/conditionPatterns.json,sha256=V5ku4ezJfk6znSFJ1_o-qjzjondyQIR66exDGblNmLY,6431
-iamdata/data/metadata.json,sha256=lGdA4ChbW1ZF5oq5IU4ZLEugrfQKVxWvw8ng9ofSUTg,76
+iamdata/data/metadata.json,sha256=F8Dw3KBCCww2cj89I1-mprqUmaVINJnjBsbQILqIYGA,76
 iamdata/data/serviceNames.json,sha256=7JeiQW8vW89qj2ZiUVKeeAi61Wo-DcxWwCCTKxPx888,18866
 iamdata/data/services.json,sha256=bvvZkc0zB27LMZr4oER7-EXSQU1-r8DdPLK-cEg1DNo,7304
 iamdata/data/unassociatedConditions.json,sha256=6EY1aU1vxuC97fhahdbkuy3FE_vxzxRewxDj8RPuC3U,244
@@ -167,7 +167,7 @@ iamdata/data/actions/entityresolution.json,sha256=8YvuJu5ZnHeUIwZhB5dGiD7PGzEw-q
 iamdata/data/actions/es.json,sha256=bdqD51F2DSxf5DAu6Kh1aTmNBsXH1MHBJCvCSvngMHQ,43956
 iamdata/data/actions/events.json,sha256=XH-xiGKcvRVZgPurZyit0AaXaRUTQNErvStEMvKJ5Yc,25577
 iamdata/data/actions/evidently.json,sha256=_8CG5r8kMEnqHdda6QOKhd7J1_sf8f43BFUEUoGxeM4,13445
-iamdata/data/actions/evs.json,sha256=gz5JOuw_0QrETEaPvJL9ZzlamTbWBIDYjje9tJNaG5Q,4246
+iamdata/data/actions/evs.json,sha256=5druFLDlRXMTKOpCWmMU5nXj_ltTzqgUuhKsVbmApcU,5133
 iamdata/data/actions/execute-api.json,sha256=JK8sAQbfih1ryeIhX2oHCG3Nc8BM6h5PXmz_psr9pbI,1280
 iamdata/data/actions/finspace-api.json,sha256=1YWtEsqWlnn94VfSjPip2wYsQ6SyKghSea00OMFUbak,429
 iamdata/data/actions/finspace.json,sha256=dleWfTnKhIxfM2N5oNBsv20xZE5l2cjS_lsk-OoYSQA,26696
@@ -388,8 +388,8 @@ iamdata/data/actions/ssm-sap.json,sha256=jmiUval48vekNp4OVHVSB4RqtSnL-Z1kUnu2s2b
 iamdata/data/actions/ssm.json,sha256=9mTf108bWFFJHWmhpocqjUx57J9-9BDRW_SVPJFQ3q0,72148
 iamdata/data/actions/ssmmessages.json,sha256=qgUMhrTZNlb0cktmE6j2kqt89c6pbknWMvXJ6g1XeCY,1321
 iamdata/data/actions/sso-directory.json,sha256=d_kgAAQaui8k4UDevqkhk3W2GkHHscq36667ppbHZXU,17404
-iamdata/data/actions/sso-oauth.json,sha256=qvNNSnmRdrN-yqZsnRCTLULeva6ju_kXh3YC8RW2MLw,432
-iamdata/data/actions/sso.json,sha256=fthvCl2Jl9TDo8Q34haAzvWU2NzZtKkzze7UqIZtrLA,51518
+iamdata/data/actions/sso-oauth.json,sha256=I2Rgq813GDfxS-pvuSiUIXxmqqK3IXs5CBO4UGQh9YQ,581
+iamdata/data/actions/sso.json,sha256=Q3ZJJtfiVO921UVGaGrMpukjhyK1g1JS8K6vW0Wcn6g,55099
 iamdata/data/actions/states.json,sha256=DNJWrTYPKKwY-qi9CINOI1Ajv9bkI0bIckSEA2E28w8,15468
 iamdata/data/actions/storagegateway.json,sha256=87l-rpd-cqGJTH5KUx7vcY9_xTFjlZ9m7eGplOpjIAY,43905
 iamdata/data/actions/sts.json,sha256=PG27BFhzE3DeNQRmJI2_fKA3u6-E-xQ9mzC_k8AtyBA,8283
@@ -429,14 +429,14 @@ iamdata/data/actions/wafv2.json,sha256=ed5B_tlEMA73na3eO0EonFV9Pzj4p2DC7d9Ae0bRS
 iamdata/data/actions/wam.json,sha256=ObJNnWYEUExtuuvWrEZKs0pPq7YEwkZLXTDVRj_BGsA,313
 iamdata/data/actions/wellarchitected.json,sha256=adE5brMSOmkAdJLmanW8YzdXhXf5-OF_KLQb7sTzeyI,30270
 iamdata/data/actions/wickr.json,sha256=XmwBroYcJP6F_TFKqdmJFnvhnPCe57SH1Sud6E5Ot_o,2594
-iamdata/data/actions/wisdom.json,sha256=TqaFTRO8CHFy--Ozc8rbmwGY1V3-bvoijGp6EGsjslw,40297
+iamdata/data/actions/wisdom.json,sha256=JouBsHvVRrlGD4lYbcayJC9ZKGJrGquzOkJf_0f6keE,40690
 iamdata/data/actions/workdocs.json,sha256=u8F-gh348948tbmxwFExBxd5e57wmQbZiWwW7bqwufw,16993
 iamdata/data/actions/worklink.json,sha256=kFJjO6FyD8FjqcS3kwooIyqfj1ik8mDZtH0WJVunzOI,14184
 iamdata/data/actions/workmail.json,sha256=-jvK5uBMMZZb14NefPsoKAhvseWyqFv1KfJ5FnFc7z8,53171
 iamdata/data/actions/workmailmessageflow.json,sha256=J9wg1dkXioNULN8nhKqbXSTq5zezo2XYNetqfnw2_xE,841
 iamdata/data/actions/workspaces-instances.json,sha256=lTKAhRp8mNNKu_rXwLt093h--hn8Varn1M9VRRMLflQ,5037
 iamdata/data/actions/workspaces-web.json,sha256=bjOvY3Kkd9TIUP5d52BNC75ENzXqoKXhupuJV1f1_yk,32085
-iamdata/data/actions/workspaces.json,sha256=rSYOm5ZLgA_LOeSc02VBlFYr5_0Z-Ha_K0rfVoKjzv4,40551
+iamdata/data/actions/workspaces.json,sha256=fUbL2xf0CkzDbwNExZYXHWinPMPGwldElzFR8vo9gCo,40095
 iamdata/data/actions/xray.json,sha256=FymyznsdIZpLeNopAUqWJNnT2DLPkc633cLkCRwsP4Y,14510
 iamdata/data/conditionKeys/a2c.json,sha256=RBNvo1WzZ4oRRq0W9-hknpT7T8If536DEMBg9hyq_4o,2
 iamdata/data/conditionKeys/a4b.json,sha256=rxQCKCe125TdAUcjup1xxhAlFRFh5HrcaAk__zF9hA0,876
@@ -1300,7 +1300,7 @@ iamdata/tests/actions.py,sha256=cg2f1KPOzBYvGf7kJC9OokOo9oP_hS55tvt0_UKZVMw,1071
 iamdata/tests/conditions.py,sha256=YbQZ_V7zQh4FkCp2wCBjw_NmNMVmwtcLAQrN7Iw2uJ0,1250
 iamdata/tests/resources.py,sha256=I9N-PHtu1wjrB-y9kBTvb1lFnvsDb03EipHRj2nIQl4,1177
 iamdata/tests/services.py,sha256=Kj1EQ9AeHHXYifvnybdH83xafXTxgYFt40KUghP_B8I,1016
-iamdata-0.1.202509161.dist-info/METADATA,sha256=A1Hd5rW0ZtcuYUgr4MQe_e7NIGNDaY8PUnfITbfs4mc,3491
-iamdata-0.1.202509161.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-iamdata-0.1.202509161.dist-info/licenses/LICENSE.txt,sha256=f7okslHWZM8fVIaucefW0FUlap5UxIqOrAWqzSCoeZA,1069
-iamdata-0.1.202509161.dist-info/RECORD,,
+iamdata-0.1.202509181.dist-info/METADATA,sha256=IfxvS4X0hj8DyeifNB9MVfguzpNpad7Rf2dYFCvxINE,3491
+iamdata-0.1.202509181.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+iamdata-0.1.202509181.dist-info/licenses/LICENSE.txt,sha256=f7okslHWZM8fVIaucefW0FUlap5UxIqOrAWqzSCoeZA,1069
+iamdata-0.1.202509181.dist-info/RECORD,,