iamdata 0.1.202509301__py3-none-any.whl → 0.1.202511241__py3-none-any.whl

iamdata/data/actions/sagemaker-unified-studio-mcp.json

@@ -0,0 +1,26 @@
+{
+  "callprivilegedtool": {
+    "name": "CallPrivilegedTool",
+    "description": "Grants permission to call privileged tools in MCP service",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "callreadonlytool": {
+    "name": "CallReadOnlyTool",
+    "description": "Grants permission to call read-only tools in MCP service",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invokemcp": {
+    "name": "InvokeMcp",
+    "description": "Grants permission to use MCP service",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

iamdata/data/actions/scn.json

@@ -41,7 +41,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createdatalakedataset": {
@@ -56,7 +59,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createdatalakenamespace": {
@@ -71,7 +77,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createinstance": {
@@ -86,7 +95,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createssoapplication": {
@@ -361,7 +373,7 @@
   },
   "listdatalakedatasets": {
     "name": "ListDataLakeDatasets",
-    "description": "Grants permission to list the data lake datasets under specific instance and namespace",
+    "description": "Grants permission to list the data lake datasets under specific instance or namespace",
     "accessLevel": "List",
     "resourceTypes": [
       {

iamdata/data/actions/secretsmanager.json

@@ -24,7 +24,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -50,7 +51,8 @@
       "aws:TagKeys",
       "secretsmanager:ResourceTag/tag-key",
       "secretsmanager:AddReplicaRegions",
-      "secretsmanager:ForceOverwriteReplicaSecret"
+      "secretsmanager:ForceOverwriteReplicaSecret",
+      "secretsmanager:Type"
     ],
     "dependentActions": []
   },
@@ -71,7 +73,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -94,7 +97,8 @@
       "secretsmanager:ForceDeleteWithoutRecovery",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -115,7 +119,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -144,7 +149,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -167,7 +173,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -188,7 +195,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -218,7 +226,8 @@
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
       "secretsmanager:BlockPublicPolicy",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -239,7 +248,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -260,7 +270,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -283,7 +294,8 @@
       "aws:ResourceTag/${TagKey}",
       "secretsmanager:SecretPrimaryRegion",
       "secretsmanager:AddReplicaRegions",
-      "secretsmanager:ForceOverwriteReplicaSecret"
+      "secretsmanager:ForceOverwriteReplicaSecret",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -304,7 +316,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -328,7 +341,9 @@
       "aws:ResourceTag/${TagKey}",
       "secretsmanager:SecretPrimaryRegion",
       "secretsmanager:ModifyRotationRules",
-      "secretsmanager:RotateImmediately"
+      "secretsmanager:RotateImmediately",
+      "secretsmanager:resource/Type",
+      "secretsmanager:ExternalSecretRotationRoleArn"
     ],
     "dependentActions": []
   },
@@ -349,7 +364,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -372,7 +388,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -394,7 +411,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -418,7 +436,9 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:Type",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -440,7 +460,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -461,7 +482,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   }

iamdata/data/actions/securityhub.json

@@ -944,6 +944,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getfindingstrendsv2": {
+    "name": "GetFindingsTrendsV2",
+    "description": "Grants permission to retrieve findings trends",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getfreetrialenddate": {
     "name": "GetFreeTrialEndDate",
     "isPermissionOnly": true,
@@ -1082,6 +1097,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getresourcestrendsv2": {
+    "name": "GetResourcesTrendsV2",
+    "description": "Grants permission to retrieve resources trends",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getresourcesv2": {
     "name": "GetResourcesV2",
     "description": "Grants permission to retrieve a list of resources",

iamdata/data/actions/servicequotas.json

@@ -56,6 +56,14 @@
       "organizations:DescribeOrganization"
     ]
   },
+  "getautomanagementconfiguration": {
+    "name": "GetAutoManagementConfiguration",
+    "description": "Grants permission to retrieve the automatic management of Service Quotas configuration, including notification settings, opt-in type, and excluded quotas",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getrequestedservicequotachange": {
     "name": "GetRequestedServiceQuotaChange",
     "description": "Grants permission to retrieve the details for a particular service quota increase request",
@@ -194,6 +202,22 @@
     ],
     "dependentActions": []
   },
+  "startautomanagement": {
+    "name": "StartAutoManagement",
+    "description": "Grants permission to enable automatic management of Service Quotas for an AWS account, including notification preferences and excluded quotas configurations",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopautomanagement": {
+    "name": "StopAutoManagement",
+    "description": "Grants permission to stop automatic management of Service Quotas for an AWS account and remove all associated configurations",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to associate a set of tags with an existing SQ resource",
@@ -214,5 +238,13 @@
       "aws:TagKeys"
     ],
     "dependentActions": []
+  },
+  "updateautomanagement": {
+    "name": "UpdateAutoManagement",
+    "description": "Grants permission to update the automatic management of Service Quotas configuration, including notification preferences and excluded quotas",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

iamdata/data/actions/signin.json

@@ -1,4 +1,20 @@
 {
+  "authorizeoauth2access": {
+    "name": "AuthorizeOAuth2Access",
+    "description": "Grants permission to authenticate through a browser and obtain an OAuth 2.0 authorization code for credential exchange",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createoauth2token": {
+    "name": "CreateOAuth2Token",
+    "description": "Grants permission to exchange an authorization code for OAuth 2.0 access token and refresh token that can be used to access AWS services from developer tools and applications",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createtrustedidentitypropagationapplicationforconsole": {
     "name": "CreateTrustedIdentityPropagationApplicationForConsole",
     "description": "Grants permission to create an Identity Center application that represents the AWS Management Console on an Identity Center organization instance",

iamdata/data/actions/social-messaging.json

@@ -15,7 +15,14 @@
     "name": "CreateWhatsAppMessageTemplate",
     "description": "Grants permission to create a WhatsApp message template",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "waba",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -23,7 +30,14 @@
     "name": "CreateWhatsAppMessageTemplateFromLibrary",
     "description": "Grants permission to create a WhatsApp message template from Meta's template library",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "waba",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -31,7 +45,14 @@
     "name": "CreateWhatsAppMessageTemplateMedia",
     "description": "Grants permission to create media for WhatsApp message templates",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "waba",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -54,7 +75,14 @@
     "name": "DeleteWhatsAppMessageTemplate",
     "description": "Grants permission to delete a WhatsApp message template",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "waba",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -122,7 +150,14 @@
     "name": "GetWhatsAppMessageTemplate",
     "description": "Grants permission to get details of a WhatsApp message template",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "waba",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -159,7 +194,14 @@
     "name": "ListWhatsAppMessageTemplates",
     "description": "Grants permission to list WhatsApp message templates",
     "accessLevel": "List",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "waba",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -167,7 +209,14 @@
     "name": "ListWhatsAppTemplateLibrary",
     "description": "Grants permission to list available templates from Meta's template library",
     "accessLevel": "List",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "waba",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -269,7 +318,14 @@
     "name": "UpdateWhatsAppMessageTemplate",
     "description": "Grants permission to update a WhatsApp message template",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "waba",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   }

iamdata/data/actions/sts.json

@@ -159,6 +159,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdelegatedaccesstoken": {
+    "name": "GetDelegatedAccessToken",
+    "description": "Returns temporary security credentials for accessing an AWS account after temporary delegation request approval. This API requires the tradeInToken provided upon request delegation approval and is intended to be used only by Amazon or AWS Partners",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getfederationtoken": {
     "name": "GetFederationToken",
     "description": "Grants permission to obtain a set of temporary security credentials (consisting of an access key ID, a secret access key, and a security token) for a federated user",
@@ -203,6 +211,20 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getwebidentitytoken": {
+    "name": "GetWebIdentityToken",
+    "description": "Grants permission to obtain a short-lived, publicly verifiable JSON Web Token (JWT) that represents the calling IAM principal's identity",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "sts:DurationSeconds",
+      "sts:IdentityTokenAudience",
+      "sts:SigningAlgorithm",
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "setcontext": {
     "name": "SetContext",
     "isPermissionOnly": true,
@@ -252,6 +274,18 @@
     ],
     "dependentActions": []
   },
+  "taggetwebidentitytoken": {
+    "name": "TagGetWebIdentityToken",
+    "isPermissionOnly": true,
+    "description": "Grants permission to add tags to the JSON Web Token (JWT) generated by the GetWebIdentityToken API",
+    "accessLevel": "Tagging",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "tagsession": {
     "name": "TagSession",
     "isPermissionOnly": true,

iamdata/data/actions/support-console.json

@@ -80,6 +80,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getissueclassificationpredictions": {
+    "name": "GetIssueClassificationPredictions",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get classification predictions of an issue",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getissuetextsummary": {
+    "name": "GetIssueTextSummary",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get a generated text summary of an issue",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getquestionnaire": {
     "name": "GetQuestionnaire",
     "isPermissionOnly": true,

iamdata/data/actions/support.json

@@ -175,6 +175,30 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "initiatelivecontactforcase": {
+    "name": "InitiateLiveContactForCase",
+    "description": "Grants permission to initiate a live contact on AWS Support Center. This is an internally managed function",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listinteractionentries": {
+    "name": "ListInteractionEntries",
+    "description": "Grants permission to retrieve a list of entries within a specific interaction, including messages, status updates, or other relevant data points",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listinteractions": {
+    "name": "ListInteractions",
+    "description": "Grants permission to retrieve a list of interactions, potentially with filters or pagination",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putcaseattributes": {
     "name": "PutCaseAttributes",
     "description": "Grants permission to allow secondary services to attach attributes to AWS Support cases. This is an internally managed function",
@@ -207,6 +231,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "resolveinteraction": {
+    "name": "ResolveInteraction",
+    "description": "Grants permission to mark a specific interaction as resolved by its unique identifier, indicating that the issue has been addressed and no further action is needed",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "searchforcases": {
     "name": "SearchForCases",
     "description": "Grants permission to return a list of AWS Support cases that matches the given inputs",
@@ -221,7 +253,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "support:DescribeSupportLevel"
+    ]
   },
   "updatecaseseverity": {
     "name": "UpdateCaseSeverity",

iamdata/data/actions/tag.json

@@ -39,6 +39,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listrequiredtags": {
+    "name": "ListRequiredTags",
+    "description": "Grants permission to list required tags for supported resource types in the calling account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startreportcreation": {
     "name": "StartReportCreation",
     "description": "Grants permission to start generating a report listing all tagged resources in accounts across your organization, and whether each resource is compliant with the effective tag policy",