iamdata 0.1.202509301__py3-none-any.whl → 0.1.202512101__py3-none-any.whl

iamdata/data/actions/sagemaker.json

@@ -241,6 +241,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "mlflow-app",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "mlflow-tracking-server",
         "required": false,
@@ -547,6 +553,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "callmlflowappapi": {
+    "name": "CallMlflowAppApi",
+    "description": "Grants permission to invoke MLflow APIs",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "callpartnerappapi": {
     "name": "CallPartnerAppApi",
     "description": "Grants permission for Partner App SDK to access the Partner App for reading or writing data use cases",
@@ -1413,6 +1434,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createmlflowapp": {
+    "name": "CreateMlflowApp",
+    "description": "Grants permission to create an MLflow app",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:PassRole",
+          "sagemaker:AddTags"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createmlflowtrackingserver": {
     "name": "CreateMlflowTrackingServer",
     "description": "Grants permission to create an MLflow tracking server",
@@ -1805,6 +1847,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createpresignedmlflowappurl": {
+    "name": "CreatePresignedMlflowAppUrl",
+    "description": "Grants permission to return a URL that you can use from your browser to connect to the MLflow app",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createpresignedmlflowtrackingserverurl": {
     "name": "CreatePresignedMlflowTrackingServerUrl",
     "description": "Grants permission to return a URL that you can use from your browser to connect to the MLflow tracking server",
@@ -2703,6 +2760,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletemlflowapp": {
+    "name": "DeleteMlflowApp",
+    "description": "Grants permission to delete an MLflow app",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletemlflowtrackingserver": {
     "name": "DeleteMlflowTrackingServer",
     "description": "Grants permission to delete an MLflow tracking server",
@@ -4072,6 +4144,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describemlflowapp": {
+    "name": "DescribeMlflowApp",
+    "description": "Grants permission to get information about an MLflow app",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "mlflow-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describemlflowtrackingserver": {
     "name": "DescribeMlflowTrackingServer",
     "description": "Grants permission to get information about an MLflow tracking server",
@@ -5234,6 +5321,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listmlflowapps": {
+    "name": "ListMlflowApps",
+    "description": "Grants permission to list SageMaker MLflow Apps in your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listmlflowtrackingservers": {
     "name": "ListMlflowTrackingServers",
     "description": "Grants permission to list MLflow tracking servers",
@@ -7055,6 +7150,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatemlflowapp": {
+    "name": "UpdateMlflowApp",
+    "description": "Grants permission to update an MLflow app",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatemlflowtrackingserver": {
     "name": "UpdateMlflowTrackingServer",
     "description": "Grants permission to update an MLflow tracking server",

iamdata/data/actions/scn.json

@@ -41,7 +41,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createdatalakedataset": {
@@ -56,7 +59,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createdatalakenamespace": {
@@ -71,7 +77,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createinstance": {
@@ -86,7 +95,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createssoapplication": {
@@ -361,7 +373,7 @@
   },
   "listdatalakedatasets": {
     "name": "ListDataLakeDatasets",
-    "description": "Grants permission to list the data lake datasets under specific instance and namespace",
+    "description": "Grants permission to list the data lake datasets under specific instance or namespace",
     "accessLevel": "List",
     "resourceTypes": [
       {

iamdata/data/actions/secretsmanager.json

@@ -24,7 +24,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -50,7 +51,8 @@
       "aws:TagKeys",
       "secretsmanager:ResourceTag/tag-key",
       "secretsmanager:AddReplicaRegions",
-      "secretsmanager:ForceOverwriteReplicaSecret"
+      "secretsmanager:ForceOverwriteReplicaSecret",
+      "secretsmanager:Type"
     ],
     "dependentActions": []
   },
@@ -71,7 +73,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -94,7 +97,8 @@
       "secretsmanager:ForceDeleteWithoutRecovery",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -115,7 +119,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -144,7 +149,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -167,7 +173,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -188,7 +195,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -218,7 +226,8 @@
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
       "secretsmanager:BlockPublicPolicy",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -239,7 +248,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -260,7 +270,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -283,7 +294,8 @@
       "aws:ResourceTag/${TagKey}",
       "secretsmanager:SecretPrimaryRegion",
       "secretsmanager:AddReplicaRegions",
-      "secretsmanager:ForceOverwriteReplicaSecret"
+      "secretsmanager:ForceOverwriteReplicaSecret",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -304,7 +316,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -328,7 +341,9 @@
       "aws:ResourceTag/${TagKey}",
       "secretsmanager:SecretPrimaryRegion",
       "secretsmanager:ModifyRotationRules",
-      "secretsmanager:RotateImmediately"
+      "secretsmanager:RotateImmediately",
+      "secretsmanager:resource/Type",
+      "secretsmanager:ExternalSecretRotationRoleArn"
     ],
     "dependentActions": []
   },
@@ -349,7 +364,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -372,7 +388,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -394,7 +411,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -418,7 +436,9 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:Type",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -440,7 +460,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -461,7 +482,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   }

iamdata/data/actions/security-ir.json

@@ -89,6 +89,7 @@
         "dependentActions": [
           "iam:CreateServiceLinkedRole",
           "organizations:DescribeOrganization",
+          "organizations:ListAWSServiceAccessForOrganization",
           "organizations:ListDelegatedAdministrators"
         ]
       }
@@ -197,6 +198,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listinvestigations": {
+    "name": "ListInvestigations",
+    "description": "Grants permission to list investigations for a case",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "case",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listmemberships": {
     "name": "ListMemberships",
     "description": "Grants permission to list memberships",
@@ -229,6 +245,21 @@
     ],
     "dependentActions": []
   },
+  "sendfeedback": {
+    "name": "SendFeedback",
+    "description": "Grants permission to send feedback for investigation results",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "case",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to the specified resource",