iamdata 0.1.202509301__py3-none-any.whl → 0.1.202511241__py3-none-any.whl

iamdata/data/actions/bedrock-agentcore.json

@@ -15,6 +15,95 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "batchcreatememoryrecords": {
+    "name": "BatchCreateMemoryRecords",
+    "description": "Grants permission to create one or more memory records",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "memory",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "bedrock-agentcore:namespace"
+    ],
+    "dependentActions": []
+  },
+  "batchdeletememoryrecords": {
+    "name": "BatchDeleteMemoryRecords",
+    "description": "Grants permission to delete one or more memory records",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "memory",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchupdatememoryrecords": {
+    "name": "BatchUpdateMemoryRecords",
+    "description": "Grants permission to update one or more memory records",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "memory",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "bedrock-agentcore:namespace"
+    ],
+    "dependentActions": []
+  },
+  "completeresourcetokenauth": {
+    "name": "CompleteResourceTokenAuth",
+    "description": "Grants permission to retrieve access token with OAuth2 for 3LO flow to access external resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "oauth2credentialprovider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "token-vault",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workload-identity",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workload-identity-directory",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "bedrock-agentcore:InboundJwtClaim/iss",
+      "bedrock-agentcore:InboundJwtClaim/sub",
+      "bedrock-agentcore:InboundJwtClaim/aud",
+      "bedrock-agentcore:InboundJwtClaim/scope",
+      "bedrock-agentcore:InboundJwtClaim/client_id",
+      "bedrock-agentcore:userid"
+    ],
+    "dependentActions": []
+  },
   "connectbrowserautomationstream": {
     "name": "ConnectBrowserAutomationStream",
     "description": "Grants permission to connect to a browser automation stream",
@@ -80,7 +169,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createbrowser": {
@@ -128,7 +220,10 @@
     "description": "Grants permission to create a new gateway",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": [
       "iam:PassRole"
     ]
@@ -153,7 +248,11 @@
     "description": "Grants permission to create a Memory resource",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "bedrock-agentcore:KmsKeyArn"
+    ],
     "dependentActions": [
       "iam:PassRole"
     ]
@@ -176,7 +275,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createworkloadidentity": {
@@ -197,7 +299,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "deleteagentruntime": {
@@ -407,6 +512,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getagentcard": {
+    "name": "GetAgentCard",
+    "description": "Grants permission to retrieve an agent card for A2A",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "runtime",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "runtime-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getagentruntime": {
     "name": "GetAgentRuntime",
     "description": "Grants permission to get details of an agent runtime",
@@ -755,7 +881,13 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "bedrock-agentcore:InboundJwtClaim/iss",
+      "bedrock-agentcore:InboundJwtClaim/sub",
+      "bedrock-agentcore:InboundJwtClaim/aud",
+      "bedrock-agentcore:InboundJwtClaim/scope",
+      "bedrock-agentcore:InboundJwtClaim/client_id"
+    ],
     "dependentActions": []
   },
   "getworkloadaccesstokenforuserid": {
@@ -776,7 +908,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "bedrock-agentcore:userid"
+    ],
     "dependentActions": []
   },
   "getworkloadidentity": {
@@ -821,6 +955,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "invokeagentruntimeforuser": {
+    "name": "InvokeAgentRuntimeForUser",
+    "description": "Grants permission to invoke an agent runtime endpoint with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "runtime",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "runtime-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "invokecodeinterpreter": {
     "name": "InvokeCodeInterpreter",
     "description": "Grants permission to invoke a code interpreter session",
@@ -842,6 +997,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "invokegateway": {
+    "name": "InvokeGateway",
+    "isPermissionOnly": true,
+    "description": "Grants permission to invoke a gateway",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listactors": {
     "name": "ListActors",
     "description": "Grants permission to list Actors",
@@ -1057,6 +1228,12 @@
     "description": "Grants permission to list tags for a Bedrock-AgentCore resource",
     "accessLevel": "List",
     "resourceTypes": [
+      {
+        "name": "apikeycredentialprovider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "browser-custom",
         "required": false,
@@ -1069,6 +1246,24 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "memory",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "oauth2credentialprovider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "runtime",
         "required": false,
@@ -1080,6 +1275,24 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "token-vault",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workload-identity",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workload-identity-directory",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -1223,6 +1436,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "stopruntimesession": {
+    "name": "StopRuntimeSession",
+    "description": "Grants permission to stop a runtime session",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "runtime",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "runtime-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "synchronizegatewaytargets": {
     "name": "SynchronizeGatewayTargets",
     "isPermissionOnly": true,
@@ -1244,6 +1478,12 @@
     "description": "Grants permission to Tag a Bedrock-AgentCore resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "apikeycredentialprovider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "browser-custom",
         "required": false,
@@ -1256,6 +1496,24 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "memory",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "oauth2credentialprovider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "runtime",
         "required": false,
@@ -1267,6 +1525,24 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "token-vault",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workload-identity",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workload-identity-directory",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1280,6 +1556,12 @@
     "description": "Grants permission to Untag a Bedrock-AgentCore resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "apikeycredentialprovider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "browser-custom",
         "required": false,
@@ -1292,6 +1574,24 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "memory",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "oauth2credentialprovider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "runtime",
         "required": false,
@@ -1303,6 +1603,24 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "token-vault",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workload-identity",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workload-identity-directory",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [

iamdata/data/actions/bedrock.json

@@ -2133,6 +2133,33 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "invokedataautomation": {
+    "name": "InvokeDataAutomation",
+    "description": "Grants permission to invoke a call to Sync API of Bedrock data automation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "blueprint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "data-automation-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "data-automation-project",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "invokedataautomationasync": {
     "name": "InvokeDataAutomationAsync",
     "description": "Grants permission to invoke a Bedrock data automation job",
@@ -2260,7 +2287,8 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
       "bedrock:GuardrailIdentifier",
-      "bedrock:BearerTokenType"
+      "bedrock:BearerTokenType",
+      "bedrock:ServiceTier"
     ],
     "dependentActions": []
   },
@@ -2328,8 +2356,24 @@
       "bedrock:InferenceProfileArn",
       "bedrock:PromptRouterArn",
       "bedrock:GuardrailIdentifier",
-      "bedrock:BearerTokenType"
+      "bedrock:BearerTokenType",
+      "bedrock:ServiceTier"
+    ],
+    "dependentActions": []
+  },
+  "invoketool": {
+    "name": "InvokeTool",
+    "description": "Grants permission to invoke the specified Bedrock tool to run inference",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "system-tool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
     ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "listagentactiongroups": {

iamdata/data/actions/billing.json

@@ -97,8 +97,17 @@
     "isPermissionOnly": true,
     "description": "Grants permission to perform queries on billing information",
     "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
+    "resourceTypes": [
+      {
+        "name": "billingview",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getbillingdetails": {
@@ -106,8 +115,17 @@
     "isPermissionOnly": true,
     "description": "Grants permission to view detailed line item billing information",
     "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
+    "resourceTypes": [
+      {
+        "name": "billingview",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getbillingnotifications": {

iamdata/data/actions/braket.json

@@ -62,6 +62,30 @@
     ],
     "dependentActions": []
   },
+  "createspendinglimit": {
+    "name": "CreateSpendingLimit",
+    "description": "Grants permission to create a spending limit",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deletespendinglimit": {
+    "name": "DeleteSpendingLimit",
+    "description": "Grants permission to delete a spending limit",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "getdevice": {
     "name": "GetDevice",
     "description": "Grants permission to retrieve information about the devices available in Amazon Braket",
@@ -134,6 +158,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "spending-limit",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -163,6 +193,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "searchspendinglimits": {
+    "name": "SearchSpendingLimits",
+    "description": "Grants permission to search for spending limit",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add one or more tags to a quantum task or a hybrid job",
@@ -179,6 +217,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "spending-limit",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -203,11 +247,29 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "spending-limit",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
       "aws:TagKeys"
     ],
     "dependentActions": []
+  },
+  "updatespendinglimit": {
+    "name": "UpdateSpendingLimit",
+    "description": "Grants permission to update a spending limit",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
   }
 }