iamdata 0.1.202510231__tar.gz → 0.1.202510251__tar.gz

{iamdata-0.1.202510231 → iamdata-0.1.202510251}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iamdata
-Version: 0.1.202510231
+Version: 0.1.202510251
 Summary: IAM data for AWS actions, resources, and conditions based on IAM policy documents. Checked for updates daily.
 Project-URL: Homepage, https://github.com/cloud-copilot/iam-data-python
 Project-URL: Issues, https://github.com/cloud-copilot/iam-data-python/issues

{iamdata-0.1.202510231 → iamdata-0.1.202510251}/iamdata/data/actions/dsql.json

@@ -83,6 +83,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteclusterpolicy": {
+    "name": "DeleteClusterPolicy",
+    "description": "Grants permission to remove the inline resource-based policy attached to a cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getbackupjob": {
     "name": "GetBackupJob",
     "description": "Grants permission to get the status of an Aurora DSQL cluster backup job",
@@ -113,6 +128,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getclusterpolicy": {
+    "name": "GetClusterPolicy",
+    "description": "Grants permission to retrieve the inline resource-based policy attached to a cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getrestorejob": {
     "name": "GetRestoreJob",
     "description": "Grants permission to get the status of an Aurora DSQL cluster restore job",
@@ -148,14 +178,7 @@
     "isPermissionOnly": true,
     "description": "Grants permission to inject errors in targeted clusters",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "Cluster",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [
       "dsql:FisActionId",
       "dsql:FisTargetArns"
@@ -185,6 +208,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putclusterpolicy": {
+    "name": "PutClusterPolicy",
+    "description": "Grants permission to attach or update the inline resource-based policy attached to a cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putmultiregionproperties": {
     "name": "PutMultiRegionProperties",
     "isPermissionOnly": true,

{iamdata-0.1.202510231 → iamdata-0.1.202510251}/iamdata/data/actions/observabilityadmin.json

@@ -105,7 +105,14 @@
     "name": "GetCentralizationRuleForOrganization",
     "description": "Grants permission to retrieve the specified organization centralization rule for the organization",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "organization-centralization-rule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -137,7 +144,14 @@
     "name": "GetTelemetryRule",
     "description": "Grants permission to retrieve the specified telemetry rule for the account",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "telemetry-rule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -145,7 +159,14 @@
     "name": "GetTelemetryRuleForOrganization",
     "description": "Grants permission to retrieve the specified organization telemetry rule for the organization",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "organization-telemetry-rule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },

iamdata-0.1.202510251/iamdata/data/actions/rtbfabric.json

@@ -0,0 +1,377 @@
+{
+  "acceptlink": {
+    "name": "AcceptLink",
+    "description": "Grants permission to accept a link invitation from another Gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Link",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createinboundexternallink": {
+    "name": "CreateInboundExternalLink",
+    "description": "Grants permission to create an inbound external link for a responder gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ResponderGateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createlink": {
+    "name": "CreateLink",
+    "description": "Grants permission to create a new link between RTB applications",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createoutboundexternallink": {
+    "name": "CreateOutboundExternalLink",
+    "description": "Grants permission to create an outbound external link for a requester gateway to connect to external public responder endpoints",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "RequesterGateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createrequestergateway": {
+    "name": "CreateRequesterGateway",
+    "description": "Grants permission to create a requester gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createrespondergateway": {
+    "name": "CreateResponderGateway",
+    "description": "Grants permission to create a responder gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteinboundexternallink": {
+    "name": "DeleteInboundExternalLink",
+    "description": "Grants permission to delete an inbound external link",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "InboundExternalLink",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ResponderGateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletelink": {
+    "name": "DeleteLink",
+    "description": "Grants permission to delete a link between RTB applications",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Link",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteoutboundexternallink": {
+    "name": "DeleteOutboundExternalLink",
+    "description": "Grants permission to delete an outbound external link",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "OutboundExternalLink",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "RequesterGateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleterequestergateway": {
+    "name": "DeleteRequesterGateway",
+    "description": "Grants permission to delete a requester gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "RequesterGateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleterespondergateway": {
+    "name": "DeleteResponderGateway",
+    "description": "Grants permission to delete a responder gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ResponderGateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getinboundexternallink": {
+    "name": "GetInboundExternalLink",
+    "description": "Grants permission to retrieve information about an inbound external link",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "InboundExternalLink",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ResponderGateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getlink": {
+    "name": "GetLink",
+    "description": "Grants permission to retrieve information about a link between RTB applications",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Link",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getoutboundexternallink": {
+    "name": "GetOutboundExternalLink",
+    "description": "Grants permission to retrieve information about an outbound external link",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "OutboundExternalLink",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "RequesterGateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getrequestergateway": {
+    "name": "GetRequesterGateway",
+    "description": "Grants permission to retrieve information about a requester gateway",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "RequesterGateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getrespondergateway": {
+    "name": "GetResponderGateway",
+    "description": "Grants permission to retrieve information about a responder gateway",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ResponderGateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listlinks": {
+    "name": "ListLinks",
+    "description": "Grants permission to list links associated with an RTB application",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listrequestergateways": {
+    "name": "ListRequesterGateways",
+    "description": "Grants permission to list requester gateways with optional filtering and pagination",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listrespondergateways": {
+    "name": "ListResponderGateways",
+    "description": "Grants permission to list responder gateways with optional filtering and pagination",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list tags for a resource",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "rejectlink": {
+    "name": "RejectLink",
+    "description": "Grants permission to reject a link request between RTB applications",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Link",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to assign one or more tags (key-value pairs) to the specified resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove a tag or tags from a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updatelink": {
+    "name": "UpdateLink",
+    "description": "Grants permission to update configuration settings for an existing link",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Link",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatelinkmoduleflow": {
+    "name": "UpdateLinkModuleFlow",
+    "description": "Grants permission to update a link module flow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Link",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updaterequestergateway": {
+    "name": "UpdateRequesterGateway",
+    "description": "Grants permission to update a requester gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "RequesterGateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updaterespondergateway": {
+    "name": "UpdateResponderGateway",
+    "description": "Grants permission to update a responder gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ResponderGateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

iamdata-0.1.202510251/iamdata/data/conditionKeys/rtbfabric.json

@@ -0,0 +1,47 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair that is allowed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair of a resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by a list of tag keys that are allowed in the request",
+    "type": "ArrayOfString"
+  },
+  "rtbfabric:inboundexternallinkgatewayid": {
+    "key": "rtbfabric:InboundExternalLinkGatewayId",
+    "description": "Filters access by gateway identifier supporting rtb-gw-* formats",
+    "type": "String"
+  },
+  "rtbfabric:inboundexternallinklinkid": {
+    "key": "rtbfabric:InboundExternalLinkLinkId",
+    "description": "Filters access by InboundExternalLink resource linkId identifier",
+    "type": "String"
+  },
+  "rtbfabric:linklinkid": {
+    "key": "rtbfabric:LinkLinkId",
+    "description": "Filters access by Link resource linkId identifier",
+    "type": "String"
+  },
+  "rtbfabric:outboundexternallinklinkid": {
+    "key": "rtbfabric:OutboundExternalLinkLinkId",
+    "description": "Filters access by OutboundExternalLink resource linkId identifier",
+    "type": "String"
+  },
+  "rtbfabric:requestergatewaygatewayid": {
+    "key": "rtbfabric:RequesterGatewayGatewayId",
+    "description": "Filters access by gateway identifier supporting rtb-gw-* formats",
+    "type": "String"
+  },
+  "rtbfabric:respondergatewaygatewayid": {
+    "key": "rtbfabric:ResponderGatewayGatewayId",
+    "description": "Filters access by gateway identifier supporting rtb-gw-* formats",
+    "type": "String"
+  }
+}

{iamdata-0.1.202510231 → iamdata-0.1.202510251}/iamdata/data/conditionKeys/sso.json

@@ -14,6 +14,16 @@
     "description": "Filters access by the tag keys that are passed in the request",
     "type": "ArrayOfString"
   },
+  "identitycenter:applicationarn": {
+    "key": "identitycenter:ApplicationArn",
+    "description": "Filters access by the ARN of the IAM Identity Center application",
+    "type": "ARN"
+  },
+  "identitycenter:instancearn": {
+    "key": "identitycenter:InstanceArn",
+    "description": "Filters access by the ARN of the IAM Identity Center instance",
+    "type": "ARN"
+  },
   "sso:applicationaccount": {
     "key": "sso:ApplicationAccount",
     "description": "Filters access by the account which creates the application. This condition key is not supported for customer managed SAML applications",

iamdata-0.1.202510251/iamdata/data/metadata.json

@@ -0,0 +1,4 @@
+{
+  "version": "0.1.202510251",
+  "updatedAt": "2025-10-25T04:45:29.538Z"
+}

{iamdata-0.1.202510231 → iamdata-0.1.202510251}/iamdata/data/resourceTypes/observabilityadmin.json

@@ -1,21 +1,21 @@
 {
   "telemetry-rule": {
     "key": "telemetry-rule",
-    "arn": "arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-rule:${TelemetryRuleName}",
+    "arn": "arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-rule/${TelemetryRuleName}",
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
   },
   "organization-telemetry-rule": {
     "key": "organization-telemetry-rule",
-    "arn": "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-telemetry-rule:${TelemetryRuleName}",
+    "arn": "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-telemetry-rule/${TelemetryRuleName}",
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
   },
   "organization-centralization-rule": {
     "key": "organization-centralization-rule",
-    "arn": "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-centralization-rule:${CentralizationRuleName}",
+    "arn": "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-centralization-rule/${CentralizationRuleName}",
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]

iamdata-0.1.202510251/iamdata/data/resourceTypes/rtbfabric.json

@@ -0,0 +1,41 @@
+{
+  "inboundexternallink": {
+    "key": "InboundExternalLink",
+    "arn": "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/${GatewayId}/link/${LinkId}",
+    "conditionKeys": [
+      "rtbfabric:InboundExternalLinkLinkId",
+      "rtbfabric:ResponderGatewayGatewayId"
+    ]
+  },
+  "link": {
+    "key": "Link",
+    "arn": "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/${GatewayId}/link/${LinkId}",
+    "conditionKeys": [
+      "rtbfabric:LinkLinkId",
+      "rtbfabric:RequesterGatewayGatewayId",
+      "rtbfabric:ResponderGatewayGatewayId"
+    ]
+  },
+  "outboundexternallink": {
+    "key": "OutboundExternalLink",
+    "arn": "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/${GatewayId}/link/${LinkId}",
+    "conditionKeys": [
+      "rtbfabric:OutboundExternalLinkLinkId",
+      "rtbfabric:RequesterGatewayGatewayId"
+    ]
+  },
+  "requestergateway": {
+    "key": "RequesterGateway",
+    "arn": "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/${GatewayId}",
+    "conditionKeys": [
+      "rtbfabric:RequesterGatewayGatewayId"
+    ]
+  },
+  "respondergateway": {
+    "key": "ResponderGateway",
+    "arn": "arn:${Partition}:rtbfabric:${Region}:${Account}:gateway/${GatewayId}",
+    "conditionKeys": [
+      "rtbfabric:ResponderGatewayGatewayId"
+    ]
+  }
+}

{iamdata-0.1.202510231 → iamdata-0.1.202510251}/iamdata/data/serviceNames.json

@@ -332,6 +332,7 @@
   "route53domains": "Amazon Route 53 Domains",
   "route53profiles": "Amazon Route 53 Profiles",
   "route53resolver": "Amazon Route 53 Resolver",
+  "rtbfabric": "AWS RTB Fabric",
   "rum": "AWS CloudWatch RUM",
   "s3": "Amazon S3",
   "s3-object-lambda": "Amazon S3 Object Lambda",

{iamdata-0.1.202510231 → iamdata-0.1.202510251}/iamdata/data/services.json

@@ -332,6 +332,7 @@
   "route53domains",
   "route53profiles",
   "route53resolver",
+  "rtbfabric",
   "rum",
   "s3",
   "s3-object-lambda",

{iamdata-0.1.202510231 → iamdata-0.1.202510251}/iamdata/data/unassociatedConditions.json

@@ -1,4 +1,7 @@
 {
+  "identitycenter": [
+    "sso"
+  ],
   "catalog": [
     "aws-marketplace"
   ],