iamdata 0.1.202509301__py3-none-any.whl → 0.1.202511241__py3-none-any.whl

iamdata/data/actions/eks-mcp.json

@@ -0,0 +1,26 @@
+{
+  "callprivilegedtool": {
+    "name": "CallPrivilegedTool",
+    "description": "Grants permission to call privileged tools in MCP service",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "callreadonlytool": {
+    "name": "CallReadOnlyTool",
+    "description": "Grants permission to call read-only tools in MCP service",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invokemcp": {
+    "name": "InvokeMcp",
+    "description": "Grants permission to use MCP service",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

iamdata/data/actions/eks.json

@@ -129,7 +129,8 @@
       "eks:supportType",
       "eks:computeConfigEnabled",
       "eks:elasticLoadBalancingEnabled",
-      "eks:blockStorageEnabled"
+      "eks:blockStorageEnabled",
+      "eks:loggingType/${type}"
     ],
     "dependentActions": []
   },
@@ -811,6 +812,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "mutateviakubernetesapi": {
+    "name": "MutateViaKubernetesApi",
+    "isPermissionOnly": true,
+    "description": "Grants permission to modify Kubernetes objects via AWS console",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "eks:AccessKubernetesApi"
+    ]
+  },
   "registercluster": {
     "name": "RegisterCluster",
     "description": "Grants permission to register an External cluster",
@@ -1021,7 +1040,8 @@
       "eks:supportType",
       "eks:computeConfigEnabled",
       "eks:elasticLoadBalancingEnabled",
-      "eks:blockStorageEnabled"
+      "eks:blockStorageEnabled",
+      "eks:loggingType/${type}"
     ],
     "dependentActions": []
   },

iamdata/data/actions/elasticloadbalancing.json

@@ -62,6 +62,15 @@
     ],
     "dependentActions": []
   },
+  "allowvendedlogdeliveryforresource": {
+    "name": "AllowVendedLogDeliveryForResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to configure vended log delivery for load balancers",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createlistener": {
     "name": "CreateListener",
     "description": "Grants permission to create a listener for the specified Application Load Balancer",

iamdata/data/actions/emr-containers.json

@@ -104,6 +104,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletesecurityconfiguration": {
+    "name": "DeleteSecurityConfiguration",
+    "description": "Grants permission to delete a security configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "securityConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletevirtualcluster": {
     "name": "DeleteVirtualCluster",
     "description": "Grants permission to delete a virtual cluster",

iamdata/data/actions/es.json

@@ -216,6 +216,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createindex": {
+    "name": "CreateIndex",
+    "description": "Grants permission to create index for the OpenSearch Service domain",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createoutboundconnection": {
     "name": "CreateOutboundConnection",
     "description": "Grants permission to create a new cross-cluster search connection from a source domain to a destination domain",
@@ -369,6 +384,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteindex": {
+    "name": "DeleteIndex",
+    "description": "Grants permission to delete Index for the OpenSearch Service domain",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteoutboundconnection": {
     "name": "DeleteOutboundConnection",
     "description": "Grants permission to the source domain owner to delete an existing outbound cross-cluster search connection",
@@ -887,6 +917,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getindex": {
+    "name": "GetIndex",
+    "description": "Grants permission to get index for the OpenSearch Service domain",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getpackageversionhistory": {
     "name": "GetPackageVersionHistory",
     "description": "Grants permission to fetch the version history for a package",
@@ -1311,6 +1356,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateindex": {
+    "name": "UpdateIndex",
+    "description": "Grants permission to update index for the OpenSearch Service domain",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatepackage": {
     "name": "UpdatePackage",
     "description": "Grants permission to update a package for use with OpenSearch Service domains",

iamdata/data/actions/fsx.json

@@ -161,7 +161,10 @@
       {
         "name": "association",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "fsx:NfsDataRepositoryAuthenticationEnabled",
+          "fsx:NfsDataRepositoryEncryptionInTransitEnabled"
+        ],
         "dependentActions": [
           "fsx:TagResource"
         ]
@@ -490,7 +493,7 @@
   "deleteresourcepolicy": {
     "name": "DeleteResourcePolicy",
     "isPermissionOnly": true,
-    "description": "Required to manage cross-account sharing of FSx volumes through AWS Resource Access Manager (RAM). PutResourcePolicy and GetResourcePolicy are also required",
+    "description": "Grants permission to manage cross-account sharing of FSx volumes through AWS Resource Access Manager (RAM). PutResourcePolicy and GetResourcePolicy are also required",
     "accessLevel": "Permissions management",
     "resourceTypes": [
       {
@@ -723,7 +726,7 @@
   "getresourcepolicy": {
     "name": "GetResourcePolicy",
     "isPermissionOnly": true,
-    "description": "Required to manage cross-account sharing of FSx volumes through AWS Resource Access Manager (RAM). PutResourcePolicy and DeleteResourcePolicy are also required",
+    "description": "Grants permission to manage cross-account sharing of FSx volumes through AWS Resource Access Manager (RAM). PutResourcePolicy and DeleteResourcePolicy are also required",
     "accessLevel": "Permissions management",
     "resourceTypes": [
       {
@@ -812,7 +815,7 @@
   "putresourcepolicy": {
     "name": "PutResourcePolicy",
     "isPermissionOnly": true,
-    "description": "Required to manage cross-account sharing of FSx volumes through AWS Resource Access Manager (RAM). DeleteResourcePolicy and GetResourcePolicy are also required",
+    "description": "Grants permission to manage cross-account sharing of FSx volumes through AWS Resource Access Manager (RAM). DeleteResourcePolicy and GetResourcePolicy are also required",
     "accessLevel": "Permissions management",
     "resourceTypes": [
       {
@@ -884,7 +887,10 @@
       {
         "name": "association",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "fsx:NfsDataRepositoryAuthenticationEnabled",
+          "fsx:NfsDataRepositoryEncryptionInTransitEnabled"
+        ],
         "dependentActions": []
       },
       {
@@ -926,7 +932,10 @@
       {
         "name": "volume",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "fsx:ParentVolumeId",
+          "fsx:StorageVirtualMachineId"
+        ],
         "dependentActions": []
       }
     ],

iamdata/data/actions/glue.json

@@ -503,7 +503,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -619,7 +620,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -956,7 +958,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -1106,7 +1109,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -1313,7 +1317,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -1610,7 +1615,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -1820,6 +1826,30 @@
     ],
     "dependentActions": []
   },
+  "federateauthorization": {
+    "name": "FederateAuthorization",
+    "description": "Grants permission to read and write redshift federated resources",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "rootcatalog",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "catalog",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "glue:EnabledForRedshiftAutoDiscovery",
+      "glue:FederatedAuthorizationSource"
+    ],
+    "dependentActions": []
+  },
   "getblueprint": {
     "name": "GetBlueprint",
     "description": "Grants permission to retrieve a blueprint",
@@ -1885,7 +1915,8 @@
     ],
     "conditionKeys": [
       "glue:EnabledForRedshiftAutoDiscovery",
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -1926,7 +1957,8 @@
     ],
     "conditionKeys": [
       "glue:EnabledForRedshiftAutoDiscovery",
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -2305,7 +2337,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -2334,7 +2367,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -3051,7 +3085,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -3185,7 +3220,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -3350,7 +3386,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -4005,6 +4042,42 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "renametable": {
+    "name": "RenameTable",
+    "description": "Grants permission to rename a table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "database",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "rootcatalog",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "catalog",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
+    ],
+    "dependentActions": []
+  },
   "requestlogparsing": {
     "name": "RequestLogParsing",
     "description": "Grants permission to request log parsing for SparkUI",
@@ -4763,7 +4836,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -4958,7 +5032,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -5205,7 +5280,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },

iamdata/data/actions/groundstation.json

@@ -163,6 +163,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getagenttaskresponseurl": {
+    "name": "GetAgentTaskResponseUrl",
+    "description": "Grants permission to retrieve presigned S3 logging URLs",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Agent",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getconfig": {
     "name": "GetConfig",
     "description": "Grants permission to return a configuration",

iamdata/data/actions/guardduty.json

@@ -93,7 +93,11 @@
     "description": "Grants permission to create a publishing destination",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": [
       "s3:GetObject",
       "s3:ListBucket"
@@ -467,6 +471,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getmalwarescan": {
+    "name": "GetMalwareScan",
+    "description": "Grants permission to retrieve a malware scan's details",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getmalwarescansettings": {
     "name": "GetMalwareScanSettings",
     "description": "Grants permission to retrieve the malware scan settings",
@@ -639,6 +651,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listmalwarescans": {
+    "name": "ListMalwareScans",
+    "description": "Grants permission to retrieve a list of malware scans",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listmembers": {
     "name": "ListMembers",
     "description": "Grants permission to retrieve a list of GuardDuty member accounts associated with an administrator account",
@@ -692,6 +712,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "publishingDestination",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "threatentityset",
         "required": false,
@@ -738,6 +764,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "sendobjectmalwarescan": {
+    "name": "SendObjectMalwareScan",
+    "description": "Grants permission to initiate a new object malware scan",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "sendsecuritytelemetry": {
     "name": "SendSecurityTelemetry",
     "description": "Grants permission to send security telemetry for a specific GuardDuty account in a Region",
@@ -799,6 +833,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "publishingDestination",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "threatentityset",
         "required": false,
@@ -861,6 +901,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "publishingDestination",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "threatentityset",
         "required": false,