iamdata 0.1.202509301__py3-none-any.whl → 0.1.202512101__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of iamdata might be problematic. Click here for more details.

Files changed (207) hide show
  1. iamdata/data/actions/aco-automation.json +252 -0
  2. iamdata/data/actions/action-recommendations.json +10 -0
  3. iamdata/data/actions/aidevops.json +481 -0
  4. iamdata/data/actions/aiops.json +159 -0
  5. iamdata/data/actions/airflow-serverless.json +225 -0
  6. iamdata/data/actions/application-signals.json +8 -0
  7. iamdata/data/actions/appstream.json +120 -36
  8. iamdata/data/actions/aps.json +190 -0
  9. iamdata/data/actions/athena.json +88 -1
  10. iamdata/data/actions/autoscaling.json +41 -3
  11. iamdata/data/actions/aws-marketplace.json +48 -0
  12. iamdata/data/actions/aws-mcp.json +26 -0
  13. iamdata/data/actions/backup.json +170 -2
  14. iamdata/data/actions/batch.json +28 -18
  15. iamdata/data/actions/bcm-data-exports.json +12 -0
  16. iamdata/data/actions/bedrock-agentcore.json +921 -11
  17. iamdata/data/actions/bedrock-mantle.json +106 -0
  18. iamdata/data/actions/bedrock.json +130 -5
  19. iamdata/data/actions/billing.json +22 -4
  20. iamdata/data/actions/braket.json +62 -0
  21. iamdata/data/actions/ce.json +8 -0
  22. iamdata/data/actions/cloudformation.json +33 -0
  23. iamdata/data/actions/cloudfront.json +309 -87
  24. iamdata/data/actions/cloudtrail.json +35 -8
  25. iamdata/data/actions/cloudwatch.json +45 -0
  26. iamdata/data/actions/cognito-idp.json +75 -0
  27. iamdata/data/actions/connect.json +1159 -9
  28. iamdata/data/actions/cost-optimization-hub.json +8 -0
  29. iamdata/data/actions/datazone.json +240 -0
  30. iamdata/data/actions/dms.json +132 -0
  31. iamdata/data/actions/dsql.json +46 -8
  32. iamdata/data/actions/ec2.json +219 -33
  33. iamdata/data/actions/ecr.json +78 -0
  34. iamdata/data/actions/ecs.json +110 -2
  35. iamdata/data/actions/eks-mcp.json +26 -0
  36. iamdata/data/actions/eks.json +130 -2
  37. iamdata/data/actions/elasticloadbalancing.json +9 -0
  38. iamdata/data/actions/emr-containers.json +15 -0
  39. iamdata/data/actions/es.json +60 -0
  40. iamdata/data/actions/fsx.json +15 -6
  41. iamdata/data/actions/glue.json +92 -16
  42. iamdata/data/actions/groundstation.json +15 -0
  43. iamdata/data/actions/guardduty.json +47 -1
  44. iamdata/data/actions/healthlake.json +226 -0
  45. iamdata/data/actions/iam.json +158 -5
  46. iamdata/data/actions/identitystore.json +95 -27
  47. iamdata/data/actions/imagebuilder.json +50 -6
  48. iamdata/data/actions/invoicing.json +57 -2
  49. iamdata/data/actions/iotmanagedintegrations.json +15 -0
  50. iamdata/data/actions/kafka.json +71 -0
  51. iamdata/data/actions/kinesis.json +63 -0
  52. iamdata/data/actions/kinesisvideo.json +30 -0
  53. iamdata/data/actions/kms.json +4 -1
  54. iamdata/data/actions/lakeformation.json +16 -0
  55. iamdata/data/actions/lambda.json +300 -6
  56. iamdata/data/actions/license-manager.json +217 -3
  57. iamdata/data/actions/logs.json +203 -0
  58. iamdata/data/actions/mediaconnect.json +795 -65
  59. iamdata/data/actions/medialive.json +24 -0
  60. iamdata/data/actions/mgn.json +54 -1
  61. iamdata/data/actions/notifications-contacts.json +2 -1
  62. iamdata/data/actions/nova-act.json +276 -0
  63. iamdata/data/actions/observabilityadmin.json +204 -3
  64. iamdata/data/actions/odb.json +37 -0
  65. iamdata/data/actions/opensearch.json +40 -0
  66. iamdata/data/actions/organizations.json +117 -0
  67. iamdata/data/actions/partnercentral-account-management.json +22 -0
  68. iamdata/data/actions/partnercentral.json +1340 -155
  69. iamdata/data/actions/pcs.json +26 -0
  70. iamdata/data/actions/pi.json +6 -0
  71. iamdata/data/actions/pricingplanmanager.json +66 -0
  72. iamdata/data/actions/profile.json +398 -0
  73. iamdata/data/actions/quicksight.json +466 -0
  74. iamdata/data/actions/rds.json +66 -11
  75. iamdata/data/actions/redshift-serverless.json +2 -2
  76. iamdata/data/actions/resource-explorer-2.json +82 -0
  77. iamdata/data/actions/route53.json +15 -0
  78. iamdata/data/actions/route53globalresolver.json +700 -0
  79. iamdata/data/actions/rtbfabric.json +481 -0
  80. iamdata/data/actions/s3.json +66 -1
  81. iamdata/data/actions/s3tables.json +325 -2
  82. iamdata/data/actions/s3vectors.json +147 -22
  83. iamdata/data/actions/sagemaker-unified-studio-mcp.json +29 -0
  84. iamdata/data/actions/sagemaker.json +110 -0
  85. iamdata/data/actions/scn.json +17 -5
  86. iamdata/data/actions/secretsmanager.json +42 -20
  87. iamdata/data/actions/security-ir.json +31 -0
  88. iamdata/data/actions/securityagent.json +503 -0
  89. iamdata/data/actions/securityhub.json +30 -0
  90. iamdata/data/actions/servicequotas.json +32 -0
  91. iamdata/data/actions/signin.json +16 -0
  92. iamdata/data/actions/social-messaging.json +64 -8
  93. iamdata/data/actions/sts.json +34 -0
  94. iamdata/data/actions/support-console.json +18 -0
  95. iamdata/data/actions/support.json +35 -1
  96. iamdata/data/actions/tag.json +8 -0
  97. iamdata/data/actions/transform-custom.json +274 -0
  98. iamdata/data/actions/transform.json +72 -0
  99. iamdata/data/actions/user-subscriptions.json +8 -0
  100. iamdata/data/actions/vpc-lattice-svcs.json +2 -0
  101. iamdata/data/actions/vpc-lattice.json +81 -0
  102. iamdata/data/actions/vpce.json +14 -1
  103. iamdata/data/actions/workspaces-web.json +25 -9
  104. iamdata/data/actions/xray.json +6 -2
  105. iamdata/data/conditionKeys/aco-automation.json +17 -0
  106. iamdata/data/conditionKeys/aidevops.json +22 -0
  107. iamdata/data/conditionKeys/airflow-serverless.json +17 -0
  108. iamdata/data/conditionKeys/bedrock-agentcore.json +35 -0
  109. iamdata/data/conditionKeys/bedrock-mantle.json +17 -0
  110. iamdata/data/conditionKeys/bedrock.json +5 -0
  111. iamdata/data/conditionKeys/connect.json +10 -0
  112. iamdata/data/conditionKeys/dynamodb.json +21 -1
  113. iamdata/data/conditionKeys/ec2.json +15 -15
  114. iamdata/data/conditionKeys/eks-mcp.json +1 -0
  115. iamdata/data/conditionKeys/eks.json +5 -0
  116. iamdata/data/conditionKeys/events.json +1 -1
  117. iamdata/data/conditionKeys/glue.json +5 -0
  118. iamdata/data/conditionKeys/iam.json +20 -0
  119. iamdata/data/conditionKeys/identitystore.json +26 -1
  120. iamdata/data/conditionKeys/kinesis.json +15 -0
  121. iamdata/data/conditionKeys/lambda.json +5 -0
  122. iamdata/data/conditionKeys/mediaconnect.json +17 -1
  123. iamdata/data/conditionKeys/nova-act.json +1 -0
  124. iamdata/data/conditionKeys/observabilityadmin.json +5 -0
  125. iamdata/data/conditionKeys/organizations.json +10 -0
  126. iamdata/data/conditionKeys/partnercentral-account-management.json +12 -1
  127. iamdata/data/conditionKeys/partnercentral.json +22 -2
  128. iamdata/data/conditionKeys/pricingplanmanager.json +1 -0
  129. iamdata/data/conditionKeys/route53globalresolver.json +17 -0
  130. iamdata/data/conditionKeys/rtbfabric.json +47 -0
  131. iamdata/data/conditionKeys/s3.json +5 -0
  132. iamdata/data/conditionKeys/s3tables.json +25 -0
  133. iamdata/data/conditionKeys/s3vectors.json +20 -0
  134. iamdata/data/conditionKeys/sagemaker-unified-studio-mcp.json +1 -0
  135. iamdata/data/conditionKeys/secretsmanager.json +15 -0
  136. iamdata/data/conditionKeys/securityagent.json +1 -0
  137. iamdata/data/conditionKeys/sso.json +10 -0
  138. iamdata/data/conditionKeys/sts.json +10 -0
  139. iamdata/data/conditionKeys/transform-custom.json +17 -0
  140. iamdata/data/conditionKeys/vpc-lattice-svcs.json +5 -0
  141. iamdata/data/conditionKeys/vpc-lattice.json +15 -0
  142. iamdata/data/conditionKeys/xray.json +5 -0
  143. iamdata/data/conditionPatterns.json +11 -0
  144. iamdata/data/metadata.json +2 -2
  145. iamdata/data/resourceTypes/aco-automation.json +9 -0
  146. iamdata/data/resourceTypes/action-recommendations.json +1 -0
  147. iamdata/data/resourceTypes/aidevops.json +24 -0
  148. iamdata/data/resourceTypes/airflow-serverless.json +9 -0
  149. iamdata/data/resourceTypes/apigateway.json +3 -0
  150. iamdata/data/resourceTypes/aps.json +9 -0
  151. iamdata/data/resourceTypes/athena.json +7 -0
  152. iamdata/data/resourceTypes/aws-mcp.json +1 -0
  153. iamdata/data/resourceTypes/backup.json +7 -0
  154. iamdata/data/resourceTypes/bcm-data-exports.json +7 -0
  155. iamdata/data/resourceTypes/bedrock-agentcore.json +48 -7
  156. iamdata/data/resourceTypes/bedrock-mantle.json +6 -0
  157. iamdata/data/resourceTypes/bedrock.json +4 -0
  158. iamdata/data/resourceTypes/braket.json +7 -0
  159. iamdata/data/resourceTypes/cloudformation.json +4 -0
  160. iamdata/data/resourceTypes/cloudfront.json +14 -0
  161. iamdata/data/resourceTypes/connect.json +18 -0
  162. iamdata/data/resourceTypes/ec2.json +19 -5
  163. iamdata/data/resourceTypes/eks-mcp.json +1 -0
  164. iamdata/data/resourceTypes/eks.json +7 -0
  165. iamdata/data/resourceTypes/guardduty.json +4 -1
  166. iamdata/data/resourceTypes/iam.json +7 -0
  167. iamdata/data/resourceTypes/invoicing.json +7 -0
  168. iamdata/data/resourceTypes/lambda.json +11 -0
  169. iamdata/data/resourceTypes/license-manager.json +14 -0
  170. iamdata/data/resourceTypes/logs.json +7 -0
  171. iamdata/data/resourceTypes/mediaconnect.json +55 -14
  172. iamdata/data/resourceTypes/nova-act.json +10 -0
  173. iamdata/data/resourceTypes/observabilityadmin.json +17 -3
  174. iamdata/data/resourceTypes/omics.json +0 -4
  175. iamdata/data/resourceTypes/organizations.json +7 -0
  176. iamdata/data/resourceTypes/partnercentral.json +63 -0
  177. iamdata/data/resourceTypes/pi.json +4 -1
  178. iamdata/data/resourceTypes/pricingplanmanager.json +6 -0
  179. iamdata/data/resourceTypes/profile.json +14 -0
  180. iamdata/data/resourceTypes/quicksight.json +26 -1
  181. iamdata/data/resourceTypes/rds.json +8 -2
  182. iamdata/data/resourceTypes/route53globalresolver.json +37 -0
  183. iamdata/data/resourceTypes/rtbfabric.json +46 -0
  184. iamdata/data/resourceTypes/s3.json +11 -2
  185. iamdata/data/resourceTypes/s3tables.json +7 -1
  186. iamdata/data/resourceTypes/s3vectors.json +10 -2
  187. iamdata/data/resourceTypes/sagemaker-unified-studio-mcp.json +1 -0
  188. iamdata/data/resourceTypes/sagemaker.json +8 -0
  189. iamdata/data/resourceTypes/scn.json +16 -4
  190. iamdata/data/resourceTypes/secretsmanager.json +2 -1
  191. iamdata/data/resourceTypes/securityagent.json +38 -0
  192. iamdata/data/resourceTypes/transform-custom.json +18 -0
  193. iamdata/data/resourceTypes/vpc-lattice.json +12 -0
  194. iamdata/data/resourceTypes/vpce.json +10 -1
  195. iamdata/data/serviceNames.json +15 -3
  196. iamdata/data/services.json +14 -2
  197. iamdata/data/unassociatedConditions.json +3 -0
  198. {iamdata-0.1.202509301.dist-info → iamdata-0.1.202512101.dist-info}/METADATA +1 -1
  199. {iamdata-0.1.202509301.dist-info → iamdata-0.1.202512101.dist-info}/RECORD +203 -167
  200. {iamdata-0.1.202509301.dist-info → iamdata-0.1.202512101.dist-info}/WHEEL +1 -1
  201. iamdata/data/actions/application-cost-profiler.json +0 -50
  202. iamdata/data/actions/deepcomposer.json +0 -316
  203. iamdata/data/conditionKeys/deepcomposer.json +0 -17
  204. iamdata/data/resourceTypes/deepcomposer.json +0 -20
  205. /iamdata/data/conditionKeys/{application-cost-profiler.json → action-recommendations.json} +0 -0
  206. /iamdata/data/{resourceTypes/application-cost-profiler.json → conditionKeys/aws-mcp.json} +0 -0
  207. {iamdata-0.1.202509301.dist-info → iamdata-0.1.202512101.dist-info}/licenses/LICENSE.txt +0 -0
@@ -29,7 +29,11 @@
29
29
  "conditionKeys": [
30
30
  "s3tables:namespace",
31
31
  "s3tables:SSEAlgorithm",
32
- "s3tables:KMSKeyArn"
32
+ "s3tables:KMSKeyArn",
33
+ "s3tables:TableBucketTag/${TagKey}",
34
+ "aws:RequestTag/${TagKey}",
35
+ "aws:ResourceTag/${TagKey}",
36
+ "aws:TagKeys"
33
37
  ],
34
38
  "dependentActions": []
35
39
  },
@@ -47,7 +51,11 @@
47
51
  ],
48
52
  "conditionKeys": [
49
53
  "s3tables:SSEAlgorithm",
50
- "s3tables:KMSKeyArn"
54
+ "s3tables:KMSKeyArn",
55
+ "s3tables:TableBucketTag/${TagKey}",
56
+ "aws:RequestTag/${TagKey}",
57
+ "aws:ResourceTag/${TagKey}",
58
+ "aws:TagKeys"
51
59
  ],
52
60
  "dependentActions": []
53
61
  },
@@ -131,6 +139,21 @@
131
139
  "conditionKeys": [],
132
140
  "dependentActions": []
133
141
  },
142
+ "deletetablebucketreplication": {
143
+ "name": "DeleteTableBucketReplication",
144
+ "description": "Grants permission to delete table bucket replication configuration on a bucket",
145
+ "accessLevel": "Write",
146
+ "resourceTypes": [
147
+ {
148
+ "name": "TableBucket",
149
+ "required": true,
150
+ "conditionKeys": [],
151
+ "dependentActions": []
152
+ }
153
+ ],
154
+ "conditionKeys": [],
155
+ "dependentActions": []
156
+ },
134
157
  "deletetablepolicy": {
135
158
  "name": "DeleteTablePolicy",
136
159
  "description": "Grants permission to delete a policy on a table",
@@ -149,6 +172,24 @@
149
172
  ],
150
173
  "dependentActions": []
151
174
  },
175
+ "deletetablereplication": {
176
+ "name": "DeleteTableReplication",
177
+ "description": "Grants permission to delete table replication configuration on a table",
178
+ "accessLevel": "Write",
179
+ "resourceTypes": [
180
+ {
181
+ "name": "Table",
182
+ "required": true,
183
+ "conditionKeys": [],
184
+ "dependentActions": []
185
+ }
186
+ ],
187
+ "conditionKeys": [
188
+ "s3tables:namespace",
189
+ "s3tables:tableName"
190
+ ],
191
+ "dependentActions": []
192
+ },
152
193
  "getnamespace": {
153
194
  "name": "GetNamespace",
154
195
  "description": "Grants permission to get a namespace",
@@ -244,6 +285,36 @@
244
285
  "conditionKeys": [],
245
286
  "dependentActions": []
246
287
  },
288
+ "gettablebucketreplication": {
289
+ "name": "GetTableBucketReplication",
290
+ "description": "Grants permission to retrieve a table bucket replication configuration on a bucket",
291
+ "accessLevel": "Read",
292
+ "resourceTypes": [
293
+ {
294
+ "name": "TableBucket",
295
+ "required": true,
296
+ "conditionKeys": [],
297
+ "dependentActions": []
298
+ }
299
+ ],
300
+ "conditionKeys": [],
301
+ "dependentActions": []
302
+ },
303
+ "gettablebucketstorageclass": {
304
+ "name": "GetTableBucketStorageClass",
305
+ "description": "Grants permission to retrieve the storage class configuration for a table bucket",
306
+ "accessLevel": "Read",
307
+ "resourceTypes": [
308
+ {
309
+ "name": "TableBucket",
310
+ "required": true,
311
+ "conditionKeys": [],
312
+ "dependentActions": []
313
+ }
314
+ ],
315
+ "conditionKeys": [],
316
+ "dependentActions": []
317
+ },
247
318
  "gettabledata": {
248
319
  "name": "GetTableData",
249
320
  "isPermissionOnly": true,
@@ -353,6 +424,96 @@
353
424
  ],
354
425
  "dependentActions": []
355
426
  },
427
+ "gettablerecordexpirationconfiguration": {
428
+ "name": "GetTableRecordExpirationConfiguration",
429
+ "description": "Grants permission to retrieve a table maintenance configuration on a system table",
430
+ "accessLevel": "Read",
431
+ "resourceTypes": [
432
+ {
433
+ "name": "Table",
434
+ "required": true,
435
+ "conditionKeys": [],
436
+ "dependentActions": []
437
+ }
438
+ ],
439
+ "conditionKeys": [
440
+ "s3tables:namespace",
441
+ "s3tables:tableName"
442
+ ],
443
+ "dependentActions": []
444
+ },
445
+ "gettablerecordexpirationjobstatus": {
446
+ "name": "GetTableRecordExpirationJobStatus",
447
+ "description": "Grants permission to retrieve the status of table record expiration jobs on a system table",
448
+ "accessLevel": "Read",
449
+ "resourceTypes": [
450
+ {
451
+ "name": "Table",
452
+ "required": true,
453
+ "conditionKeys": [],
454
+ "dependentActions": []
455
+ }
456
+ ],
457
+ "conditionKeys": [
458
+ "s3tables:namespace",
459
+ "s3tables:tableName"
460
+ ],
461
+ "dependentActions": []
462
+ },
463
+ "gettablereplication": {
464
+ "name": "GetTableReplication",
465
+ "description": "Grants permission to retrieve a table replication configuration on a table",
466
+ "accessLevel": "Read",
467
+ "resourceTypes": [
468
+ {
469
+ "name": "Table",
470
+ "required": true,
471
+ "conditionKeys": [],
472
+ "dependentActions": []
473
+ }
474
+ ],
475
+ "conditionKeys": [
476
+ "s3tables:namespace",
477
+ "s3tables:tableName"
478
+ ],
479
+ "dependentActions": []
480
+ },
481
+ "gettablereplicationstatus": {
482
+ "name": "GetTableReplicationStatus",
483
+ "description": "Grants permission to retrieve a table replication status on a table",
484
+ "accessLevel": "Read",
485
+ "resourceTypes": [
486
+ {
487
+ "name": "Table",
488
+ "required": true,
489
+ "conditionKeys": [],
490
+ "dependentActions": []
491
+ }
492
+ ],
493
+ "conditionKeys": [
494
+ "s3tables:namespace",
495
+ "s3tables:tableName"
496
+ ],
497
+ "dependentActions": []
498
+ },
499
+ "gettablestorageclass": {
500
+ "name": "GetTableStorageClass",
501
+ "description": "Grants permission to retrieve the storage class configuration for a specific table",
502
+ "accessLevel": "Read",
503
+ "resourceTypes": [
504
+ {
505
+ "name": "Table",
506
+ "required": true,
507
+ "conditionKeys": [],
508
+ "dependentActions": []
509
+ }
510
+ ],
511
+ "conditionKeys": [
512
+ "s3tables:namespace",
513
+ "s3tables:tableName"
514
+ ],
515
+ "dependentActions": []
516
+ },
356
517
  "listnamespaces": {
357
518
  "name": "ListNamespaces",
358
519
  "description": "Grants permission to list namespaces",
@@ -393,6 +554,30 @@
393
554
  ],
394
555
  "dependentActions": []
395
556
  },
557
+ "listtagsforresource": {
558
+ "name": "ListTagsForResource",
559
+ "description": "Grants permission to list the tags for an S3 Tables resource",
560
+ "accessLevel": "List",
561
+ "resourceTypes": [
562
+ {
563
+ "name": "Table",
564
+ "required": false,
565
+ "conditionKeys": [],
566
+ "dependentActions": []
567
+ },
568
+ {
569
+ "name": "TableBucket",
570
+ "required": false,
571
+ "conditionKeys": [],
572
+ "dependentActions": []
573
+ }
574
+ ],
575
+ "conditionKeys": [
576
+ "aws:ResourceTag/${TagKey}",
577
+ "s3tables:TableBucketTag/${TagKey}"
578
+ ],
579
+ "dependentActions": []
580
+ },
396
581
  "puttablebucketencryption": {
397
582
  "name": "PutTableBucketEncryption",
398
583
  "description": "Grants permission to put or overwrite encryption configuration on a table bucket",
@@ -441,6 +626,38 @@
441
626
  "conditionKeys": [],
442
627
  "dependentActions": []
443
628
  },
629
+ "puttablebucketreplication": {
630
+ "name": "PutTableBucketReplication",
631
+ "description": "Grants permission to put table bucket replication configuration on a bucket",
632
+ "accessLevel": "Write",
633
+ "resourceTypes": [
634
+ {
635
+ "name": "TableBucket",
636
+ "required": true,
637
+ "conditionKeys": [],
638
+ "dependentActions": []
639
+ }
640
+ ],
641
+ "conditionKeys": [],
642
+ "dependentActions": []
643
+ },
644
+ "puttablebucketstorageclass": {
645
+ "name": "PutTableBucketStorageClass",
646
+ "description": "Grants permission to set or update the storage class configuration for a table bucket",
647
+ "accessLevel": "Write",
648
+ "resourceTypes": [
649
+ {
650
+ "name": "TableBucket",
651
+ "required": true,
652
+ "conditionKeys": [],
653
+ "dependentActions": []
654
+ }
655
+ ],
656
+ "conditionKeys": [
657
+ "s3tables:StorageClass"
658
+ ],
659
+ "dependentActions": []
660
+ },
444
661
  "puttabledata": {
445
662
  "name": "PutTableData",
446
663
  "isPermissionOnly": true,
@@ -516,6 +733,61 @@
516
733
  ],
517
734
  "dependentActions": []
518
735
  },
736
+ "puttablerecordexpirationconfiguration": {
737
+ "name": "PutTableRecordExpirationConfiguration",
738
+ "description": "Grants permission to put a table record expiration configuration on a system table",
739
+ "accessLevel": "Write",
740
+ "resourceTypes": [
741
+ {
742
+ "name": "Table",
743
+ "required": true,
744
+ "conditionKeys": [],
745
+ "dependentActions": []
746
+ }
747
+ ],
748
+ "conditionKeys": [
749
+ "s3tables:namespace",
750
+ "s3tables:tableName"
751
+ ],
752
+ "dependentActions": []
753
+ },
754
+ "puttablereplication": {
755
+ "name": "PutTableReplication",
756
+ "description": "Grants permission to put table replication configuration on a table",
757
+ "accessLevel": "Write",
758
+ "resourceTypes": [
759
+ {
760
+ "name": "Table",
761
+ "required": true,
762
+ "conditionKeys": [],
763
+ "dependentActions": []
764
+ }
765
+ ],
766
+ "conditionKeys": [
767
+ "s3tables:namespace",
768
+ "s3tables:tableName"
769
+ ],
770
+ "dependentActions": []
771
+ },
772
+ "puttablestorageclass": {
773
+ "name": "PutTableStorageClass",
774
+ "description": "Grants permission to set or update the storage class configuration for a table",
775
+ "accessLevel": "Write",
776
+ "resourceTypes": [
777
+ {
778
+ "name": "Table",
779
+ "required": true,
780
+ "conditionKeys": [],
781
+ "dependentActions": []
782
+ }
783
+ ],
784
+ "conditionKeys": [
785
+ "s3tables:namespace",
786
+ "s3tables:tableName",
787
+ "s3tables:StorageClass"
788
+ ],
789
+ "dependentActions": []
790
+ },
519
791
  "renametable": {
520
792
  "name": "RenameTable",
521
793
  "description": "Grants permission to rename a table or move a table across namespaces",
@@ -534,6 +806,57 @@
534
806
  ],
535
807
  "dependentActions": []
536
808
  },
809
+ "tagresource": {
810
+ "name": "TagResource",
811
+ "description": "Grants permission to tag a S3 Tables resource",
812
+ "accessLevel": "Tagging",
813
+ "resourceTypes": [
814
+ {
815
+ "name": "Table",
816
+ "required": false,
817
+ "conditionKeys": [],
818
+ "dependentActions": []
819
+ },
820
+ {
821
+ "name": "TableBucket",
822
+ "required": false,
823
+ "conditionKeys": [],
824
+ "dependentActions": []
825
+ }
826
+ ],
827
+ "conditionKeys": [
828
+ "aws:TagKeys",
829
+ "aws:RequestTag/${TagKey}",
830
+ "aws:ResourceTag/${TagKey}",
831
+ "s3tables:TableBucketTag/${TagKey}"
832
+ ],
833
+ "dependentActions": []
834
+ },
835
+ "untagresource": {
836
+ "name": "UntagResource",
837
+ "description": "Grants permission to untag a S3 Tables resource",
838
+ "accessLevel": "Tagging",
839
+ "resourceTypes": [
840
+ {
841
+ "name": "Table",
842
+ "required": false,
843
+ "conditionKeys": [],
844
+ "dependentActions": []
845
+ },
846
+ {
847
+ "name": "TableBucket",
848
+ "required": false,
849
+ "conditionKeys": [],
850
+ "dependentActions": []
851
+ }
852
+ ],
853
+ "conditionKeys": [
854
+ "aws:TagKeys",
855
+ "aws:ResourceTag/${TagKey}",
856
+ "s3tables:TableBucketTag/${TagKey}"
857
+ ],
858
+ "dependentActions": []
859
+ },
537
860
  "updatetablemetadatalocation": {
538
861
  "name": "UpdateTableMetadataLocation",
539
862
  "description": "Grants permission to update the metadata location of a table",
@@ -11,7 +11,14 @@
11
11
  "dependentActions": []
12
12
  }
13
13
  ],
14
- "conditionKeys": [],
14
+ "conditionKeys": [
15
+ "s3vectors:sseType",
16
+ "s3vectors:kmsKeyArn",
17
+ "aws:RequestTag/${TagKey}",
18
+ "aws:TagKeys",
19
+ "aws:ResourceTag/${TagKey}",
20
+ "s3vectors:VectorBucketTag/${TagKey}"
21
+ ],
15
22
  "dependentActions": []
16
23
  },
17
24
  "createvectorbucket": {
@@ -28,7 +35,11 @@
28
35
  ],
29
36
  "conditionKeys": [
30
37
  "s3vectors:sseType",
31
- "s3vectors:kmsKeyArn"
38
+ "s3vectors:kmsKeyArn",
39
+ "aws:RequestTag/${TagKey}",
40
+ "aws:TagKeys",
41
+ "aws:ResourceTag/${TagKey}",
42
+ "s3vectors:VectorBucketTag/${TagKey}"
32
43
  ],
33
44
  "dependentActions": []
34
45
  },
@@ -44,7 +55,10 @@
44
55
  "dependentActions": []
45
56
  }
46
57
  ],
47
- "conditionKeys": [],
58
+ "conditionKeys": [
59
+ "aws:ResourceTag/${TagKey}",
60
+ "s3vectors:VectorBucketTag/${TagKey}"
61
+ ],
48
62
  "dependentActions": []
49
63
  },
50
64
  "deletevectorbucket": {
@@ -59,7 +73,10 @@
59
73
  "dependentActions": []
60
74
  }
61
75
  ],
62
- "conditionKeys": [],
76
+ "conditionKeys": [
77
+ "aws:ResourceTag/${TagKey}",
78
+ "s3vectors:VectorBucketTag/${TagKey}"
79
+ ],
63
80
  "dependentActions": []
64
81
  },
65
82
  "deletevectorbucketpolicy": {
@@ -74,7 +91,10 @@
74
91
  "dependentActions": []
75
92
  }
76
93
  ],
77
- "conditionKeys": [],
94
+ "conditionKeys": [
95
+ "aws:ResourceTag/${TagKey}",
96
+ "s3vectors:VectorBucketTag/${TagKey}"
97
+ ],
78
98
  "dependentActions": []
79
99
  },
80
100
  "deletevectors": {
@@ -89,7 +109,10 @@
89
109
  "dependentActions": []
90
110
  }
91
111
  ],
92
- "conditionKeys": [],
112
+ "conditionKeys": [
113
+ "aws:ResourceTag/${TagKey}",
114
+ "s3vectors:VectorBucketTag/${TagKey}"
115
+ ],
93
116
  "dependentActions": []
94
117
  },
95
118
  "getindex": {
@@ -104,7 +127,10 @@
104
127
  "dependentActions": []
105
128
  }
106
129
  ],
107
- "conditionKeys": [],
130
+ "conditionKeys": [
131
+ "aws:ResourceTag/${TagKey}",
132
+ "s3vectors:VectorBucketTag/${TagKey}"
133
+ ],
108
134
  "dependentActions": []
109
135
  },
110
136
  "getvectorbucket": {
@@ -119,7 +145,10 @@
119
145
  "dependentActions": []
120
146
  }
121
147
  ],
122
- "conditionKeys": [],
148
+ "conditionKeys": [
149
+ "aws:ResourceTag/${TagKey}",
150
+ "s3vectors:VectorBucketTag/${TagKey}"
151
+ ],
123
152
  "dependentActions": []
124
153
  },
125
154
  "getvectorbucketpolicy": {
@@ -134,7 +163,10 @@
134
163
  "dependentActions": []
135
164
  }
136
165
  ],
137
- "conditionKeys": [],
166
+ "conditionKeys": [
167
+ "aws:ResourceTag/${TagKey}",
168
+ "s3vectors:VectorBucketTag/${TagKey}"
169
+ ],
138
170
  "dependentActions": []
139
171
  },
140
172
  "getvectors": {
@@ -149,7 +181,10 @@
149
181
  "dependentActions": []
150
182
  }
151
183
  ],
152
- "conditionKeys": [],
184
+ "conditionKeys": [
185
+ "aws:ResourceTag/${TagKey}",
186
+ "s3vectors:VectorBucketTag/${TagKey}"
187
+ ],
153
188
  "dependentActions": []
154
189
  },
155
190
  "listindexes": {
@@ -164,7 +199,34 @@
164
199
  "dependentActions": []
165
200
  }
166
201
  ],
167
- "conditionKeys": [],
202
+ "conditionKeys": [
203
+ "aws:ResourceTag/${TagKey}",
204
+ "s3vectors:VectorBucketTag/${TagKey}"
205
+ ],
206
+ "dependentActions": []
207
+ },
208
+ "listtagsforresource": {
209
+ "name": "ListTagsForResource",
210
+ "description": "Grants permission to list tags for specified S3Vector resource",
211
+ "accessLevel": "List",
212
+ "resourceTypes": [
213
+ {
214
+ "name": "Index",
215
+ "required": false,
216
+ "conditionKeys": [],
217
+ "dependentActions": []
218
+ },
219
+ {
220
+ "name": "VectorBucket",
221
+ "required": false,
222
+ "conditionKeys": [],
223
+ "dependentActions": []
224
+ }
225
+ ],
226
+ "conditionKeys": [
227
+ "aws:ResourceTag/${TagKey}",
228
+ "s3vectors:VectorBucketTag/${TagKey}"
229
+ ],
168
230
  "dependentActions": []
169
231
  },
170
232
  "listvectorbuckets": {
@@ -184,13 +246,16 @@
184
246
  "name": "Index",
185
247
  "required": true,
186
248
  "conditionKeys": [],
187
- "dependentActions": []
249
+ "dependentActions": [
250
+ "s3vectors:GetVectors"
251
+ ]
188
252
  }
189
253
  ],
190
- "conditionKeys": [],
191
- "dependentActions": [
192
- "s3vectors:GetVectors"
193
- ]
254
+ "conditionKeys": [
255
+ "aws:ResourceTag/${TagKey}",
256
+ "s3vectors:VectorBucketTag/${TagKey}"
257
+ ],
258
+ "dependentActions": []
194
259
  },
195
260
  "putvectorbucketpolicy": {
196
261
  "name": "PutVectorBucketPolicy",
@@ -204,7 +269,10 @@
204
269
  "dependentActions": []
205
270
  }
206
271
  ],
207
- "conditionKeys": [],
272
+ "conditionKeys": [
273
+ "aws:ResourceTag/${TagKey}",
274
+ "s3vectors:VectorBucketTag/${TagKey}"
275
+ ],
208
276
  "dependentActions": []
209
277
  },
210
278
  "putvectors": {
@@ -219,7 +287,10 @@
219
287
  "dependentActions": []
220
288
  }
221
289
  ],
222
- "conditionKeys": [],
290
+ "conditionKeys": [
291
+ "aws:ResourceTag/${TagKey}",
292
+ "s3vectors:VectorBucketTag/${TagKey}"
293
+ ],
223
294
  "dependentActions": []
224
295
  },
225
296
  "queryvectors": {
@@ -231,12 +302,66 @@
231
302
  "name": "Index",
232
303
  "required": true,
233
304
  "conditionKeys": [],
305
+ "dependentActions": [
306
+ "s3vectors:GetVectors"
307
+ ]
308
+ }
309
+ ],
310
+ "conditionKeys": [
311
+ "aws:ResourceTag/${TagKey}",
312
+ "s3vectors:VectorBucketTag/${TagKey}"
313
+ ],
314
+ "dependentActions": []
315
+ },
316
+ "tagresource": {
317
+ "name": "TagResource",
318
+ "description": "Grants permission to tag a S3Vector resource",
319
+ "accessLevel": "Tagging",
320
+ "resourceTypes": [
321
+ {
322
+ "name": "Index",
323
+ "required": false,
324
+ "conditionKeys": [],
325
+ "dependentActions": []
326
+ },
327
+ {
328
+ "name": "VectorBucket",
329
+ "required": false,
330
+ "conditionKeys": [],
234
331
  "dependentActions": []
235
332
  }
236
333
  ],
237
- "conditionKeys": [],
238
- "dependentActions": [
239
- "s3vectors:GetVectors"
240
- ]
334
+ "conditionKeys": [
335
+ "aws:RequestTag/${TagKey}",
336
+ "aws:TagKeys",
337
+ "aws:ResourceTag/${TagKey}",
338
+ "s3vectors:VectorBucketTag/${TagKey}"
339
+ ],
340
+ "dependentActions": []
341
+ },
342
+ "untagresource": {
343
+ "name": "UntagResource",
344
+ "description": "Grants permission to untag a S3Vector resource",
345
+ "accessLevel": "Tagging",
346
+ "resourceTypes": [
347
+ {
348
+ "name": "Index",
349
+ "required": false,
350
+ "conditionKeys": [],
351
+ "dependentActions": []
352
+ },
353
+ {
354
+ "name": "VectorBucket",
355
+ "required": false,
356
+ "conditionKeys": [],
357
+ "dependentActions": []
358
+ }
359
+ ],
360
+ "conditionKeys": [
361
+ "aws:TagKeys",
362
+ "aws:ResourceTag/${TagKey}",
363
+ "s3vectors:VectorBucketTag/${TagKey}"
364
+ ],
365
+ "dependentActions": []
241
366
  }
242
367
  }
@@ -0,0 +1,29 @@
1
+ {
2
+ "callprivilegedtool": {
3
+ "name": "CallPrivilegedTool",
4
+ "isPermissionOnly": true,
5
+ "description": "Grants permission to call privileged tools in MCP service",
6
+ "accessLevel": "Write",
7
+ "resourceTypes": [],
8
+ "conditionKeys": [],
9
+ "dependentActions": []
10
+ },
11
+ "callreadonlytool": {
12
+ "name": "CallReadOnlyTool",
13
+ "isPermissionOnly": true,
14
+ "description": "Grants permission to call read-only tools in MCP service",
15
+ "accessLevel": "Read",
16
+ "resourceTypes": [],
17
+ "conditionKeys": [],
18
+ "dependentActions": []
19
+ },
20
+ "invokemcp": {
21
+ "name": "InvokeMcp",
22
+ "isPermissionOnly": true,
23
+ "description": "Grants permission to use MCP service",
24
+ "accessLevel": "Read",
25
+ "resourceTypes": [],
26
+ "conditionKeys": [],
27
+ "dependentActions": []
28
+ }
29
+ }