iamdata 0.1.202511071__tar.gz → 0.1.202512181__tar.gz

iamdata-0.1.202512181/PKG-INFO

@@ -0,0 +1,67 @@
+Metadata-Version: 2.4
+Name: iamdata
+Version: 0.1.202512181
+Summary: IAM data for AWS actions, resources, and conditions based on IAM policy documents. Checked for updates daily.
+Project-URL: Homepage, https://github.com/cloud-copilot/iam-data-python
+Project-URL: Issues, https://github.com/cloud-copilot/iam-data-python/issues
+Author-email: David Kerber <dave@cloudcopilot.io>
+License-File: LICENSE.txt
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Requires-Python: >=3.7
+Description-Content-Type: text/markdown
+
+# IAM Data In Python Package
+
+This is a simple package for utilizing AWS IAM data for Services, Actions, Resources, and Condition Keys. Data is embedded in the python package.
+
+New data is checked against the AWS IAM documentation and updated daily if there are changes.
+
+## Installation
+```bash
+pip install iam-data
+```
+
+## Usage
+```python
+from iamdata import IAMData
+
+iam_data = IAMData()
+print(f"Data Version {iam_data.data_version()} updated at {iam_data.data_updated_at()}")
+for service_key in iam_data.services.get_service_keys():
+    service_name = iam_data.services.get_service_name(service_key)
+    print(f"Getting Actions for {service_name}")
+    for action in iam_data.actions.get_actions_for_service(service_key):
+        action_details = iam_data.actions.get_action_details(service_key, action)
+        print(f"{service_key}:{action} => {action_details}")
+```
+
+## API
+### Services
+* `services.get_service_keys()` - Returns a list of all service keys such as 's3', 'ec2', etc.
+* `services.get_service_name(service_key)` - Returns the service name for a given service key.
+* `services.service_exists(service_key)` - Returns True if the service key exists.
+
+### Actions
+* `actions.get_actions_for_service(service_key)` - Returns an array of all actions for a given service key.
+* `actions.get_action_details(service_key, action_key)` - Returns an object with the action details such as `description`, `resourceTypes`, and `conditionKeys`.
+* `actions.action_exists(service_key, action_key)` - Returns true if the action exists.
+
+### Resources
+* `resources.get_resource_types_for_service(service_key)` - Returns an array of all resource types for a given service key.
+* `resources.get_resource_type_details(service_key, resource_type_key)` - Returns an object with the resource type details such as `description`, `arnFormat`, and `conditionKeys`.
+* `resources.resource_type_exists(service_key, resource_type_key)` - Returns true if the resource type exists.
+
+### Conditions Keys
+* `conditions.get_condition_keys_for_service(service_key)` - Returns an array of all condition keys for a given service key.
+* `conditions.get_condition_key_details(service_key, condition_key)` - Returns an object with the condition key details such as `description`, `conditionValueTypes`, and `conditionOperators`.
+* `conditions.condition_key_exists(service_key, condition_key)` - Returns true if the condition key exists.
+
+### Version Info
+The version is number is formatted as `major.minor.updatedAt`. The updatedAt is the date the data was last updated in the format `YYYYMMDDX` where `X` is a counter to enable publishing more than once per day if necessary. For example version `0.1.202408291` has data updated on August 29th, 2024.
+
+The version can be accessed using the `data_version()` method.
+
+There is also `date_updated_at()` which returns the date the data was last updated.
+

iamdata-0.1.202512181/iamdata/data/actions/account.json

@@ -0,0 +1,331 @@
+{
+  "acceptprimaryemailupdate": {
+    "name": "AcceptPrimaryEmailUpdate",
+    "description": "Grants permission to accept the process to update the primary email address of an account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "accountInOrganization",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "account:EmailTargetDomain"
+    ],
+    "dependentActions": []
+  },
+  "closeaccount": {
+    "name": "CloseAccount",
+    "isPermissionOnly": true,
+    "description": "Grants permission to close an account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "account",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletealternatecontact": {
+    "name": "DeleteAlternateContact",
+    "description": "Grants permission to delete the alternate contacts for an account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "account",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "accountInOrganization",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "account:AlternateContactTypes"
+    ],
+    "dependentActions": []
+  },
+  "disableregion": {
+    "name": "DisableRegion",
+    "description": "Grants permission to disable use of a Region",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "account",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "accountInOrganization",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "account:TargetRegion"
+    ],
+    "dependentActions": []
+  },
+  "enableregion": {
+    "name": "EnableRegion",
+    "description": "Grants permission to enable use of a Region",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "account",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "accountInOrganization",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "account:TargetRegion"
+    ],
+    "dependentActions": []
+  },
+  "getaccountinformation": {
+    "name": "GetAccountInformation",
+    "description": "Grants permission to retrieve the account information for an account",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "account",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "accountInOrganization",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getalternatecontact": {
+    "name": "GetAlternateContact",
+    "description": "Grants permission to retrieve the alternate contacts for an account",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "account",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "accountInOrganization",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "account:AlternateContactTypes"
+    ],
+    "dependentActions": []
+  },
+  "getcontactinformation": {
+    "name": "GetContactInformation",
+    "description": "Grants permission to retrieve the primary contact information for an account",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "account",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "accountInOrganization",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getgovcloudaccountinformation": {
+    "name": "GetGovCloudAccountInformation",
+    "description": "Grants permission to retrieve the linked GovCloud account information for an account",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "account",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "accountInOrganization",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getprimaryemail": {
+    "name": "GetPrimaryEmail",
+    "description": "Grants permission to retrieve the primary email address of an account",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "accountInOrganization",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getregionoptstatus": {
+    "name": "GetRegionOptStatus",
+    "description": "Grants permission to get the opt-in status of a Region",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "account",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "accountInOrganization",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "account:TargetRegion"
+    ],
+    "dependentActions": []
+  },
+  "listregions": {
+    "name": "ListRegions",
+    "description": "Grants permission to list the available Regions",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "account",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "accountInOrganization",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putaccountname": {
+    "name": "PutAccountName",
+    "description": "Grants permission to update the name for an account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "account",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "accountInOrganization",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putalternatecontact": {
+    "name": "PutAlternateContact",
+    "description": "Grants permission to modify the alternate contacts for an account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "account",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "accountInOrganization",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "account:AlternateContactTypes"
+    ],
+    "dependentActions": []
+  },
+  "putcontactinformation": {
+    "name": "PutContactInformation",
+    "description": "Grants permission to update the primary contact information for an account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "account",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "accountInOrganization",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startprimaryemailupdate": {
+    "name": "StartPrimaryEmailUpdate",
+    "description": "Grants permission to start the process to update the primary email address of an account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "accountInOrganization",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "account:EmailTargetDomain"
+    ],
+    "dependentActions": []
+  }
+}

iamdata-0.1.202512181/iamdata/data/actions/aco-automation.json

@@ -0,0 +1,252 @@
+{
+  "associateaccounts": {
+    "name": "AssociateAccounts",
+    "description": "Grants permission to associate member accounts with the management account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createautomationrule": {
+    "name": "CreateAutomationRule",
+    "description": "Grants permission to create automation rule",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deleteautomationrule": {
+    "name": "DeleteAutomationRule",
+    "description": "Grants permission to delete automation rule",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AutomationRule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "disassociateaccounts": {
+    "name": "DisassociateAccounts",
+    "description": "Grants permission to disassociate member accounts from the management account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getautomationevent": {
+    "name": "GetAutomationEvent",
+    "description": "Grants permission to get automation event details",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getautomationrule": {
+    "name": "GetAutomationRule",
+    "description": "Grants permission to get automation rule",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "AutomationRule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "getenrollmentconfiguration": {
+    "name": "GetEnrollmentConfiguration",
+    "description": "Grants permission to get enrollment configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listaccounts": {
+    "name": "ListAccounts",
+    "description": "Grants permission to list the accounts in your organization that are enrolled in Compute Optimizer and whether they have enabled the Automation feature",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautomationeventsteps": {
+    "name": "ListAutomationEventSteps",
+    "description": "Grants permission to list automation event steps",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautomationeventsummaries": {
+    "name": "ListAutomationEventSummaries",
+    "description": "Grants permission to list automation event summaries",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautomationevents": {
+    "name": "ListAutomationEvents",
+    "description": "Grants permission to list automation events",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautomationrulepreview": {
+    "name": "ListAutomationRulePreview",
+    "description": "Grants permission to list automation rule preview results",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:DescribeVolumes"
+    ]
+  },
+  "listautomationrulepreviewsummaries": {
+    "name": "ListAutomationRulePreviewSummaries",
+    "description": "Grants permission to list automation rule preview summaries",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautomationrules": {
+    "name": "ListAutomationRules",
+    "description": "Grants permission to list automation rules",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listrecommendedactionsummaries": {
+    "name": "ListRecommendedActionSummaries",
+    "description": "Grants permission to list recommended action summaries",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listrecommendedactions": {
+    "name": "ListRecommendedActions",
+    "description": "Grants permission to list recommended actions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:DescribeVolumes"
+    ]
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list tags for automation rule",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "AutomationRule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "rollbackautomationevent": {
+    "name": "RollbackAutomationEvent",
+    "description": "Grants permission to initiate a rollback for an automation event",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startautomationevent": {
+    "name": "StartAutomationEvent",
+    "description": "Grants permission to initiate an on-demand automation for a recommended action",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to add tags to automation rule",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "AutomationRule",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove tags from automation rule",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "AutomationRule",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updateautomationrule": {
+    "name": "UpdateAutomationRule",
+    "description": "Grants permission to update automation rule",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AutomationRule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "updateenrollmentconfiguration": {
+    "name": "UpdateEnrollmentConfiguration",
+    "description": "Grants permission to update enrollment configuration for the Compute Optimizer automation feature",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}