iamdata 0.1.202511181__py3-none-any.whl → 0.1.202512121__py3-none-any.whl

iamdata/data/actions/iam.json

@@ -1,4 +1,19 @@
 {
+  "acceptdelegationrequest": {
+    "name": "AcceptDelegationRequest",
+    "description": "Accepts a delegation request resource, granting the requested temporary access",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "delegation-request",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "addclientidtoopenidconnectprovider": {
     "name": "AddClientIDToOpenIDConnectProvider",
     "description": "Grants permission to add a new client ID (audience) to the list of registered IDs for the specified IAM OpenID Connect (OIDC) provider resource",
@@ -46,6 +61,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "associatedelegationrequest": {
+    "name": "AssociateDelegationRequest",
+    "description": "Associates a delegation request resource with the calling identity",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "delegation-request",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "attachgrouppolicy": {
     "name": "AttachGroupPolicy",
     "description": "Grants permission to attach a managed policy to the specified IAM group",
@@ -137,6 +167,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createdelegationrequest": {
+    "name": "CreateDelegationRequest",
+    "description": "Creates an IAM delegation request resource for temporary access delegation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "delegation-request",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "iam:DelegationDuration",
+      "iam:NotificationChannel",
+      "iam:TemplateArn"
+    ],
+    "dependentActions": []
+  },
   "creategroup": {
     "name": "CreateGroup",
     "description": "Grants permission to create a new group",
@@ -516,7 +565,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "iam:PermissionsBoundary"
+    ],
     "dependentActions": []
   },
   "deleterolepermissionsboundary": {
@@ -784,6 +835,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disableoutboundwebidentityfederation": {
+    "name": "DisableOutboundWebIdentityFederation",
+    "description": "Disables the outbound identity federation feature for the callers account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "enablemfadevice": {
     "name": "EnableMFADevice",
     "description": "Grants permission to enable an MFA device and associate it with the specified IAM user",
@@ -820,6 +879,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "enableoutboundwebidentityfederation": {
+    "name": "EnableOutboundWebIdentityFederation",
+    "description": "Enables the outbound identity federation feature for the callers account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "generatecredentialreport": {
     "name": "GenerateCredentialReport",
     "description": "Grants permission to generate a credential report for the AWS account",
@@ -991,6 +1058,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdelegationrequest": {
+    "name": "GetDelegationRequest",
+    "description": "Retrieves information about a specific delegation request",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "delegation-request",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getgroup": {
     "name": "GetGroup",
     "description": "Grants permission to retrieve a list of IAM users in the specified IAM group",
@@ -1021,6 +1103,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gethumanreadablesummary": {
+    "name": "GetHumanReadableSummary",
+    "description": "Retrieves a human readable summary for a given entity. At this time, only delegation request are supported",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "delegation-request",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getinstanceprofile": {
     "name": "GetInstanceProfile",
     "description": "Grants permission to retrieve information about the specified instance profile, including the instance profile's path, GUID, ARN, and role",
@@ -1089,6 +1186,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getoutboundwebidentityfederationinfo": {
+    "name": "GetOutboundWebIdentityFederationInfo",
+    "description": "Retrieves the configuration information for the outbound identity federation feature for the callers account",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getpolicy": {
     "name": "GetPolicy",
     "description": "Grants permission to retrieve information about the specified managed policy, including the policy's default version and the total number of identities to which the policy is attached",
@@ -1131,7 +1236,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "iam:PermissionsBoundary"
+    ],
     "dependentActions": []
   },
   "getrolepolicy": {
@@ -1331,6 +1438,16 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdelegationrequests": {
+    "name": "ListDelegationRequests",
+    "description": "Lists delegation requests based on the specified criteria",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "iam:DelegationRequestOwner"
+    ],
+    "dependentActions": []
+  },
   "listentitiesforpolicy": {
     "name": "ListEntitiesForPolicy",
     "description": "Grants permission to list all IAM identities to which the specified managed policy is attached",
@@ -1833,6 +1950,21 @@
     ],
     "dependentActions": []
   },
+  "rejectdelegationrequest": {
+    "name": "RejectDelegationRequest",
+    "description": "Rejects a delegation request, denying the requested temporary access",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "delegation-request",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "removeclientidfromopenidconnectprovider": {
     "name": "RemoveClientIDFromOpenIDConnectProvider",
     "description": "Grants permission to remove the client ID (audience) from the list of client IDs in the specified IAM OpenID Connect (OIDC) provider resource",
@@ -1910,6 +2042,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "senddelegationtoken": {
+    "name": "SendDelegationToken",
+    "description": "Sends the exchange token for an accepted delegation request",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "delegation-request",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "setdefaultpolicyversion": {
     "name": "SetDefaultPolicyVersion",
     "description": "Grants permission to set the version of the specified policy as the policy's default version",
@@ -2307,7 +2454,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "iam:PermissionsBoundary"
+    ],
     "dependentActions": []
   },
   "updatecloudfrontpublickey": {
@@ -2375,7 +2524,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "iam:PermissionsBoundary"
+    ],
     "dependentActions": []
   },
   "updateroledescription": {
@@ -2390,7 +2541,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "iam:PermissionsBoundary"
+    ],
     "dependentActions": []
   },
   "updatesamlprovider": {

iamdata/data/actions/identitystore.json

@@ -8,13 +8,16 @@
         "name": "Identitystore",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
-    "conditionKeys": [],
-    "dependentActions": [
-      "kms:Decrypt"
-    ]
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:GroupExternalIdIssuers"
+    ],
+    "dependentActions": []
   },
   "creategroupmembership": {
     "name": "CreateGroupMembership",
@@ -42,7 +45,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
     "dependentActions": []
   },
   "createidentitystore": {
@@ -67,13 +72,17 @@
         "name": "Identitystore",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
       }
     ],
-    "conditionKeys": [],
-    "dependentActions": [
-      "kms:Decrypt"
-    ]
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:UserExternalIdIssuers",
+      "identitystore:ReservedUserId"
+    ],
+    "dependentActions": []
   },
   "deletegroup": {
     "name": "DeleteGroup",
@@ -95,7 +104,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:GroupExternalIdIssuers"
+    ],
     "dependentActions": []
   },
   "deletegroupmembership": {
@@ -130,7 +142,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
     "dependentActions": []
   },
   "deleteidentitystore": {
@@ -161,7 +175,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:UserExternalIdIssuers"
+    ],
     "dependentActions": []
   },
   "describegroup": {
@@ -184,7 +201,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:GroupExternalIdIssuers"
+    ],
     "dependentActions": []
   },
   "describegroupmembership": {
@@ -219,7 +239,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
     "dependentActions": []
   },
   "describeuser": {
@@ -242,7 +264,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:UserExternalIdIssuers"
+    ],
     "dependentActions": []
   },
   "getgroupid": {
@@ -265,7 +290,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
     "dependentActions": []
   },
   "getgroupmembershipid": {
@@ -300,7 +327,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
     "dependentActions": []
   },
   "getuserid": {
@@ -323,7 +352,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
     "dependentActions": []
   },
   "ismemberingroups": {
@@ -358,7 +389,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
     "dependentActions": []
   },
   "listgroupmemberships": {
@@ -387,7 +420,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
     "dependentActions": []
   },
   "listgroupmembershipsformember": {
@@ -416,7 +451,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
     "dependentActions": []
   },
   "listgroups": {
@@ -439,7 +476,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:GroupExternalIdIssuers"
+    ],
     "dependentActions": []
   },
   "listusers": {
@@ -462,7 +502,29 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:UserExternalIdIssuers"
+    ],
+    "dependentActions": []
+  },
+  "reserveuser": {
+    "name": "ReserveUser",
+    "description": "Grants permission to reserve a user by getting a userId",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Identitystore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
     "dependentActions": []
   },
   "updategroup": {
@@ -485,7 +547,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:GroupExternalIdIssuers"
+    ],
     "dependentActions": []
   },
   "updateidentitystore": {
@@ -521,7 +586,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion",
+      "identitystore:UserExternalIdIssuers"
+    ],
     "dependentActions": []
   }
 }

iamdata/data/actions/imagebuilder.json

@@ -405,6 +405,31 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "distributeimage": {
+    "name": "DistributeImage",
+    "description": "Grants permission to distribute an image",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "image",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "ec2:DescribeImages",
+          "iam:PassRole",
+          "imagebuilder:GetDistributionConfiguration",
+          "imagebuilder:GetImage",
+          "imagebuilder:TagResource",
+          "ssm:GetParameter"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "getcomponent": {
     "name": "GetComponent",
     "description": "Grants permission to view details about a component",
@@ -1130,6 +1155,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "retryimage": {
+    "name": "RetryImage",
+    "description": "Grants permission to retry an image creation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "image",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "sendworkflowstepaction": {
     "name": "SendWorkflowStepAction",
     "description": "Grants permission to send an action to a workflow step",

iamdata/data/actions/invoicing.json

@@ -18,6 +18,16 @@
     ],
     "dependentActions": []
   },
+  "createprocurementportalpreference": {
+    "name": "CreateProcurementPortalPreference",
+    "description": "Grants permission to create a procurement portal preference",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deleteinvoiceunit": {
     "name": "DeleteInvoiceUnit",
     "description": "Grants permission to update an invoice unit for your organization",
@@ -35,6 +45,16 @@
     ],
     "dependentActions": []
   },
+  "deleteprocurementportalpreference": {
+    "name": "DeleteProcurementPortalPreference",
+    "description": "Grants permission to delete a procurement portal preference",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "getinvoicecorrection": {
     "name": "GetInvoiceCorrection",
     "isPermissionOnly": true,
@@ -76,6 +96,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getprocurementportalpreference": {
+    "name": "GetProcurementPortalPreference",
+    "description": "Grants permission to get a procurement portal preference",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listinvoicecorrections": {
     "name": "ListInvoiceCorrections",
     "isPermissionOnly": true,
@@ -101,6 +129,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listprocurementportalpreferences": {
+    "name": "ListProcurementPortalPreferences",
+    "description": "Grants permission to list procurement portal preferences for an account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list tags for a resource",
@@ -127,6 +163,16 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putprocurementportalpreference": {
+    "name": "PutProcurementPortalPreference",
+    "description": "Grants permission to update a procurement portal preference",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "startinvoicecorrection": {
     "name": "StartInvoiceCorrection",
     "isPermissionOnly": true,
@@ -189,5 +235,15 @@
       "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
+  },
+  "updateprocurementportalpreferencestatus": {
+    "name": "UpdateProcurementPortalPreferenceStatus",
+    "description": "Grants permission to update the status for a procurement portal preference",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
   }
 }