iamdata 0.1.202511181__py3-none-any.whl → 0.1.202512121__py3-none-any.whl

iamdata/data/actions/transform-custom.json

@@ -0,0 +1,274 @@
+{
+  "completetransformationpackageupload": {
+    "name": "CompleteTransformationPackageUpload",
+    "description": "Grants permission to invoke CompleteTransformationPackageUpload on AWS Transform Custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "package",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "conversestream": {
+    "name": "ConverseStream",
+    "description": "Grants permission to invoke ConverseStream on AWS Transform Custom",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createcampaign": {
+    "name": "CreateCampaign",
+    "description": "Grants permission to invoke CreateCampaign on AWS Transform Custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "campaign",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createtransformationpackageurl": {
+    "name": "CreateTransformationPackageUrl",
+    "description": "Grants permission to invoke CompleteTransformationPackageUrl on AWS Transform Custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "package",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletecampaign": {
+    "name": "DeleteCampaign",
+    "description": "Grants permission to invoke DeleteCampaign on AWS Transform Custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "campaign",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteknowledgeitem": {
+    "name": "DeleteKnowledgeItem",
+    "description": "Grants permission to invoke DeleteKnowledgeItem on AWS Transform Custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "knowledge-item",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletetransformationpackage": {
+    "name": "DeleteTransformationPackage",
+    "description": "Grants permission to invoke DeleteTransformationPackage on AWS Transform Custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "package",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "executetransformation": {
+    "name": "ExecuteTransformation",
+    "description": "Grants permission to invoke ExecuteTransformation on AWS Transform Custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "package",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getcampaign": {
+    "name": "GetCampaign",
+    "description": "Grants permission to invoke GetCampaign on AWS Transform Custom",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "campaign",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getknowledgeitem": {
+    "name": "GetKnowledgeItem",
+    "description": "Grants permission to invoke GetKnowledgeItem on AWS Transform Custom",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "knowledge-item",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gettransformationpackageurl": {
+    "name": "GetTransformationPackageUrl",
+    "description": "Grants permission to invoke GetTransformationPackageUrl on AWS Transform Custom",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "package",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcampaignrepositories": {
+    "name": "ListCampaignRepositories",
+    "description": "Grants permission to invoke ListCampaignRepositories on AWS Transform Custom",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcampaigns": {
+    "name": "ListCampaigns",
+    "description": "Grants permission to invoke ListCampaign on AWS Transform Custom",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listknowledgeitems": {
+    "name": "ListKnowledgeItems",
+    "description": "Grants permission to invoke ListKnowledgeItems on AWS Transform Custom",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to invoke ListTagsForResource on AWS Transform Custom",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtransformationpackagemetadata": {
+    "name": "ListTransformationPackageMetadata",
+    "description": "Grants permission to invoke ListTransformationPackageMetadata on AWS Transform Custom",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to invoke TagResource on AWS Transform Custom",
+    "accessLevel": "Tagging",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to invoke UntagResource on AWS Transform Custom",
+    "accessLevel": "Tagging",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updatecampaign": {
+    "name": "UpdateCampaign",
+    "description": "Grants permission to invoke UpdateCampaign on AWS Transform Custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "campaign",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatecampaignrepositorystatus": {
+    "name": "UpdateCampaignRepositoryStatus",
+    "description": "Grants permission to invoke UpdateCampaignRepositories on AWS Transform Custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "campaign",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateknowledgeitemconfiguration": {
+    "name": "UpdateKnowledgeItemConfiguration",
+    "description": "Grants permission to invoke UpdateKnowledgeItemConfiguration on AWS Transform Custom",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateknowledgeitemstatus": {
+    "name": "UpdateKnowledgeItemStatus",
+    "description": "Grants permission to invoke UpdateKnowledgeItemStatus on AWS Transform Custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "knowledge-item",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

iamdata/data/actions/transform.json

@@ -31,6 +31,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteagentruntimeconfiguration": {
+    "name": "DeleteAgentRuntimeConfiguration",
+    "isPermissionOnly": true,
+    "description": "Grants permission to invoke DeleteAgentRuntimeConfiguration on AWS Transform",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteconnector": {
     "name": "DeleteConnector",
     "isPermissionOnly": true,
@@ -63,6 +72,33 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getaccountsettings": {
+    "name": "GetAccountSettings",
+    "isPermissionOnly": true,
+    "description": "Grants permission to invoke GetAccountSettings on AWS Transform",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getagent": {
+    "name": "GetAgent",
+    "isPermissionOnly": true,
+    "description": "Grants permission to invoke GetAgent on AWS Transform",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getagentruntimeconfiguration": {
+    "name": "GetAgentRuntimeConfiguration",
+    "isPermissionOnly": true,
+    "description": "Grants permission to invoke GetAgentRuntimeConfiguration on AWS Transform",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getconnector": {
     "name": "GetConnector",
     "isPermissionOnly": true,
@@ -79,6 +115,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listagents": {
+    "name": "ListAgents",
+    "isPermissionOnly": true,
+    "description": "Grants permission to invoke ListAgents on AWS Transform",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listconnectors": {
     "name": "ListConnectors",
     "isPermissionOnly": true,
@@ -113,6 +158,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putagentruntimeconfiguration": {
+    "name": "PutAgentRuntimeConfiguration",
+    "isPermissionOnly": true,
+    "description": "Grants permission to invoke PutAgentRuntimeConfiguration on AWS Transform",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "rejectconnector": {
     "name": "RejectConnector",
     "isPermissionOnly": true,
@@ -166,6 +220,24 @@
     ],
     "dependentActions": []
   },
+  "updateaccountsettings": {
+    "name": "UpdateAccountSettings",
+    "isPermissionOnly": true,
+    "description": "Grants permission to invoke UpdateAccountSettings on AWS Transform",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateagentaccess": {
+    "name": "UpdateAgentAccess",
+    "isPermissionOnly": true,
+    "description": "Grants permission to invoke UpdateAgentAccess on AWS Transform",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateprofile": {
     "name": "UpdateProfile",
     "isPermissionOnly": true,

iamdata/data/actions/vpce.json

@@ -4,7 +4,20 @@
     "isPermissionOnly": true,
     "description": "Grants permission to manage multi-region VPC endpoints and VPC endpoint service configurations",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "vpc-endpoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "vpc-endpoint-service",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   }

iamdata/data/conditionKeys/aco-automation.json

@@ -0,0 +1,17 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

iamdata/data/conditionKeys/aidevops.json

@@ -0,0 +1,22 @@
+{
+  "aidevops:agentspaceresourceagentspaceid": {
+    "key": "aidevops:AgentSpaceResourceAgentSpaceId",
+    "description": "Filters access by unique identifier for an AgentSpace",
+    "type": "String"
+  },
+  "aidevops:associationresourceagentspaceid": {
+    "key": "aidevops:AssociationResourceAgentSpaceId",
+    "description": "Filters access by unique identifier for an AgentSpace",
+    "type": "String"
+  },
+  "aidevops:associationresourceassociationid": {
+    "key": "aidevops:AssociationResourceAssociationId",
+    "description": "Filters access by unique identifier for a service association within an AgentSpace",
+    "type": "String"
+  },
+  "aidevops:serviceresourceserviceid": {
+    "key": "aidevops:ServiceResourceServiceId",
+    "description": "Filters access by unique identifier for a registered service",
+    "type": "String"
+  }
+}

iamdata/data/conditionKeys/aws-mcp.json

@@ -0,0 +1 @@
+{}

iamdata/data/conditionKeys/bedrock-mantle.json

@@ -0,0 +1,17 @@
+{
+  "bedrock-mantle:bearertokentype": {
+    "key": "bedrock-mantle:BearerTokenType",
+    "description": "Filters access by the Short-term or Long-term bearer tokens",
+    "type": "String"
+  },
+  "bedrock-mantle:model": {
+    "key": "bedrock-mantle:Model",
+    "description": "Filters access by the specified Model",
+    "type": "String"
+  },
+  "bedrock-mantle:servicetier": {
+    "key": "bedrock-mantle:ServiceTier",
+    "description": "Filters access by the specified ServiceTier",
+    "type": "String"
+  }
+}

iamdata/data/conditionKeys/bedrock.json

@@ -39,6 +39,11 @@
     "description": "Filters access by the specified prompt router",
     "type": "ARN"
   },
+  "bedrock:servicetier": {
+    "key": "bedrock:ServiceTier",
+    "description": "Filters access by the specified ServiceTier",
+    "type": "String"
+  },
   "bedrock:thirdpartyknowledgebasecredentialssecretarn": {
     "key": "bedrock:ThirdPartyKnowledgeBaseCredentialsSecretArn",
     "description": "Filters access by the secretArn containing the credentials of the third party platform",

iamdata/data/conditionKeys/connect.json

@@ -39,6 +39,11 @@
     "description": "Filters access by restricting access to create contacts based on the initiation method of the contact",
     "type": "String"
   },
+  "connect:expressionvalue": {
+    "key": "connect:ExpressionValue",
+    "description": "Filters access by restricting data table operations based on expression type",
+    "type": "String"
+  },
   "connect:flowtype": {
     "key": "connect:FlowType",
     "description": "Filters access by Flow type",
@@ -69,6 +74,11 @@
     "description": "Filters access by PreferredUserArn",
     "type": "ARN"
   },
+  "connect:primaryattribute/${primaryattribute}": {
+    "key": "connect:PrimaryAttribute/${PrimaryAttribute}",
+    "description": "Filters access by restricting which primary attributes the user can manage",
+    "type": "String"
+  },
   "connect:searchcontactsbycontactanalysis": {
     "key": "connect:SearchContactsByContactAnalysis",
     "description": "Filters access by restricting searches using analysis outputs from Amazon Connect Contact Lens",

iamdata/data/conditionKeys/dynamodb.json

@@ -24,6 +24,16 @@
     "description": "Filters access by blocking Transactions APIs calls and allow the non-Transaction APIs calls and vice-versa",
     "type": "String"
   },
+  "dynamodb:firstpartitionkeyvalues": {
+    "key": "dynamodb:FirstPartitionKeyValues",
+    "description": "Filters access by the first partition key of the table",
+    "type": "ArrayOfString"
+  },
+  "dynamodb:fourthpartitionkeyvalues": {
+    "key": "dynamodb:FourthPartitionKeyValues",
+    "description": "Filters access by the forth partition key of the table",
+    "type": "ArrayOfString"
+  },
   "dynamodb:fulltablescan": {
     "key": "dynamodb:FullTableScan",
     "description": "Filters access by blocking full table scan",
@@ -31,7 +41,7 @@
   },
   "dynamodb:leadingkeys": {
     "key": "dynamodb:LeadingKeys",
-    "description": "Filters access by the partition key of the table",
+    "description": "Filters access by the first partition key of the table",
     "type": "ArrayOfString"
   },
   "dynamodb:returnconsumedcapacity": {
@@ -44,9 +54,19 @@
     "description": "Filters access by the ReturnValues parameter of request. Contains one of the following: \"ALL_OLD\", \"UPDATED_OLD\",\"ALL_NEW\",\"UPDATED_NEW\", or \"NONE\"",
     "type": "String"
   },
+  "dynamodb:secondpartitionkeyvalues": {
+    "key": "dynamodb:SecondPartitionKeyValues",
+    "description": "Filters access by the second partition key of the table",
+    "type": "ArrayOfString"
+  },
   "dynamodb:select": {
     "key": "dynamodb:Select",
     "description": "Filters access by the Select parameter of a Query or Scan request",
     "type": "String"
+  },
+  "dynamodb:thirdpartitionkeyvalues": {
+    "key": "dynamodb:ThirdPartitionKeyValues",
+    "description": "Filters access by the third partition key of the table",
+    "type": "ArrayOfString"
   }
 }

iamdata/data/conditionKeys/glue.json

@@ -26,7 +26,7 @@
   },
   "glue:federatedauthorizationsource": {
     "key": "glue:FederatedAuthorizationSource",
-    "description": "Filters access by whether the resource belongs to federarted authorization",
+    "description": "Filters access by whether the resource belongs to federated authorization",
     "type": "String"
   },
   "glue:lakeformationpermissions": {

iamdata/data/conditionKeys/iam.json

@@ -24,6 +24,16 @@
     "description": "Filters access by the resource that the role will be used on behalf of",
     "type": "ARN"
   },
+  "iam:delegationduration": {
+    "key": "iam:DelegationDuration",
+    "description": "Filters access based on the requested delegation duration",
+    "type": "String"
+  },
+  "iam:delegationrequestowner": {
+    "key": "iam:DelegationRequestOwner",
+    "description": "Filters access based on the delegation request owner",
+    "type": "ARN"
+  },
   "iam:fido-fips-140-2-certification": {
     "key": "iam:FIDO-FIPS-140-2-certification",
     "description": "Filters access by the MFA device FIPS-140-2 validation certification level at the time of registration of a FIDO security key",
@@ -39,6 +49,11 @@
     "description": "Filters access by the MFA device FIDO certification level at the time of registration of a FIDO security key",
     "type": "String"
   },
+  "iam:notificationchannel": {
+    "key": "iam:NotificationChannel",
+    "description": "Filters access based on the requested notification channel",
+    "type": "String"
+  },
   "iam:organizationspolicyid": {
     "key": "iam:OrganizationsPolicyId",
     "description": "Filters access by the ID of an AWS Organizations policy",
@@ -78,5 +93,10 @@
     "key": "iam:ServiceSpecificCredentialServiceName",
     "description": "Filters access by the service associated with the credential",
     "type": "String"
+  },
+  "iam:templatearn": {
+    "key": "iam:TemplateArn",
+    "description": "Filters access based on the requested template ARN",
+    "type": "ARN"
   }
 }

iamdata/data/conditionKeys/identitystore.json

@@ -1,7 +1,32 @@
 {
+  "identitystore:groupexternalidissuers": {
+    "key": "identitystore:GroupExternalIdIssuers",
+    "description": "Filters access by Issuer present in ExternalIds for Group resources",
+    "type": "ArrayOfARN"
+  },
+  "identitystore:identitystorearn": {
+    "key": "identitystore:IdentityStoreArn",
+    "description": "Filters access by Identity Store ARN",
+    "type": "ARN"
+  },
+  "identitystore:primaryregion": {
+    "key": "identitystore:PrimaryRegion",
+    "description": "Filters access by Primary Region of Identity Store",
+    "type": "String"
+  },
+  "identitystore:reserveduserid": {
+    "key": "identitystore:ReservedUserId",
+    "description": "Filters access by a previously reserved User ID for CreateUser operation",
+    "type": "String"
+  },
+  "identitystore:userexternalidissuers": {
+    "key": "identitystore:UserExternalIdIssuers",
+    "description": "Filters access by Issuer present in ExternalIds for User resources",
+    "type": "ArrayOfARN"
+  },
   "identitystore:userid": {
     "key": "identitystore:UserId",
-    "description": "Filters access by IAM Identity Center User ID",
+    "description": "Filters access by Identity Store User ID",
     "type": "String"
   }
 }

iamdata/data/conditionKeys/nova-act.json

@@ -0,0 +1 @@
+{}

iamdata/data/conditionKeys/observabilityadmin.json

@@ -28,5 +28,10 @@
     "key": "observabilityadmin:CentralizationSourceRegions",
     "description": "Filters access by the source regions that are passed in the request",
     "type": "ArrayOfString"
+  },
+  "observabilityadmin:sourcetype": {
+    "key": "observabilityadmin:SourceType",
+    "description": "Filters access by the source type that is passed in the request",
+    "type": "String"
   }
 }

iamdata/data/conditionKeys/organizations.json

@@ -23,5 +23,15 @@
     "key": "organizations:ServicePrincipal",
     "description": "Filters access by the specified service principal names",
     "type": "String"
+  },
+  "organizations:transferdirection": {
+    "key": "organizations:TransferDirection",
+    "description": "Filters access by the specified responsibility transfer by the direction",
+    "type": "String"
+  },
+  "organizations:transfertype": {
+    "key": "organizations:TransferType",
+    "description": "Filters access by the specified responsibility transfer type names",
+    "type": "String"
   }
 }