iamdata 0.1.202511181__py3-none-any.whl → 0.1.202512281__py3-none-any.whl

iamdata/data/actions/sagemaker.json

@@ -241,6 +241,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "mlflow-app",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "mlflow-tracking-server",
         "required": false,
@@ -547,6 +553,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "callmlflowappapi": {
+    "name": "CallMlflowAppApi",
+    "description": "Grants permission to invoke MLflow APIs",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "callpartnerappapi": {
     "name": "CallPartnerAppApi",
     "description": "Grants permission for Partner App SDK to access the Partner App for reading or writing data use cases",
@@ -623,7 +644,8 @@
       "sagemaker:ImageArns",
       "sagemaker:ImageVersionArns",
       "sagemaker:OwnerUserProfileArn",
-      "sagemaker:SpaceSharingType"
+      "sagemaker:SpaceSharingType",
+      "sagemaker:StudioLifecycleConfigArns"
     ],
     "dependentActions": []
   },
@@ -962,7 +984,8 @@
       "sagemaker:DomainSharingOutputKmsKey",
       "sagemaker:VolumeKmsKey",
       "sagemaker:ImageArns",
-      "sagemaker:ImageVersionArns"
+      "sagemaker:ImageVersionArns",
+      "sagemaker:StudioLifecycleConfigArns"
     ],
     "dependentActions": []
   },
@@ -1413,6 +1436,30 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createmlflowapp": {
+    "name": "CreateMlflowApp",
+    "description": "Grants permission to create an MLflow app",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-app",
+        "required": true,
+        "conditionKeys": [
+          "sagemaker:ResourceTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": [
+          "iam:PassRole",
+          "sagemaker:AddTags"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createmlflowtrackingserver": {
     "name": "CreateMlflowTrackingServer",
     "description": "Grants permission to create an MLflow tracking server",
@@ -1421,7 +1468,10 @@
       {
         "name": "mlflow-tracking-server",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "sagemaker:ResourceTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": [
           "iam:PassRole",
           "sagemaker:AddTags"
@@ -1742,7 +1792,10 @@
       {
         "name": "partner-app",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "sagemaker:ResourceTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": [
           "sagemaker:AddTags"
         ]
@@ -1766,7 +1819,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "createpipeline": {
@@ -1805,6 +1861,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createpresignedmlflowappurl": {
+    "name": "CreatePresignedMlflowAppUrl",
+    "description": "Grants permission to return a URL that you can use from your browser to connect to the MLflow app",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "createpresignedmlflowtrackingserverurl": {
     "name": "CreatePresignedMlflowTrackingServerUrl",
     "description": "Grants permission to return a URL that you can use from your browser to connect to the MLflow tracking server",
@@ -1817,7 +1891,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "createpresignednotebookinstanceurl": {
@@ -1943,7 +2020,8 @@
       "sagemaker:ImageVersionArns",
       "sagemaker:OwnerUserProfileArn",
       "sagemaker:RemoteAccess",
-      "sagemaker:SpaceSharingType"
+      "sagemaker:SpaceSharingType",
+      "sagemaker:StudioLifecycleConfigArns"
     ],
     "dependentActions": []
   },
@@ -2128,7 +2206,8 @@
       "sagemaker:InstanceTypes",
       "sagemaker:DomainSharingOutputKmsKey",
       "sagemaker:ImageArns",
-      "sagemaker:ImageVersionArns"
+      "sagemaker:ImageVersionArns",
+      "sagemaker:StudioLifecycleConfigArns"
     ],
     "dependentActions": []
   },
@@ -2703,6 +2782,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletemlflowapp": {
+    "name": "DeleteMlflowApp",
+    "description": "Grants permission to delete an MLflow app",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deletemlflowtrackingserver": {
     "name": "DeleteMlflowTrackingServer",
     "description": "Grants permission to delete an MLflow tracking server",
@@ -2715,7 +2812,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deletemodel": {
@@ -2914,7 +3014,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deletepipeline": {
@@ -4072,6 +4175,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describemlflowapp": {
+    "name": "DescribeMlflowApp",
+    "description": "Grants permission to get information about an MLflow app",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "mlflow-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "describemlflowtrackingserver": {
     "name": "DescribeMlflowTrackingServer",
     "description": "Grants permission to get information about an MLflow tracking server",
@@ -4084,7 +4205,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "describemodel": {
@@ -4283,7 +4407,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "describepipeline": {
@@ -5234,6 +5361,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listmlflowapps": {
+    "name": "ListMlflowApps",
+    "description": "Grants permission to list SageMaker MLflow Apps in your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listmlflowtrackingservers": {
     "name": "ListMlflowTrackingServers",
     "description": "Grants permission to list MLflow tracking servers",
@@ -6254,7 +6389,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "startmonitoringschedule": {
@@ -6466,7 +6604,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "stopmonitoringschedule": {
@@ -6836,7 +6977,8 @@
       "sagemaker:ImageArns",
       "sagemaker:ImageVersionArns",
       "sagemaker:AppNetworkAccessType",
-      "sagemaker:VpcSubnets"
+      "sagemaker:VpcSubnets",
+      "sagemaker:StudioLifecycleConfigArns"
     ],
     "dependentActions": []
   },
@@ -7055,6 +7197,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatemlflowapp": {
+    "name": "UpdateMlflowApp",
+    "description": "Grants permission to update an MLflow app",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "updatemlflowtrackingserver": {
     "name": "UpdateMlflowTrackingServer",
     "description": "Grants permission to update an MLflow tracking server",
@@ -7067,7 +7227,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "updatemodelcard": {
@@ -7206,7 +7369,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "updatepipeline": {
@@ -7310,7 +7476,8 @@
       "sagemaker:ImageVersionArns",
       "sagemaker:OwnerUserProfileArn",
       "sagemaker:RemoteAccess",
-      "sagemaker:SpaceSharingType"
+      "sagemaker:SpaceSharingType",
+      "sagemaker:StudioLifecycleConfigArns"
     ],
     "dependentActions": []
   },
@@ -7381,7 +7548,8 @@
       "sagemaker:InstanceTypes",
       "sagemaker:DomainSharingOutputKmsKey",
       "sagemaker:ImageArns",
-      "sagemaker:ImageVersionArns"
+      "sagemaker:ImageVersionArns",
+      "sagemaker:StudioLifecycleConfigArns"
     ],
     "dependentActions": []
   },

iamdata/data/actions/secretsmanager.json

@@ -24,7 +24,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -50,7 +51,8 @@
       "aws:TagKeys",
       "secretsmanager:ResourceTag/tag-key",
       "secretsmanager:AddReplicaRegions",
-      "secretsmanager:ForceOverwriteReplicaSecret"
+      "secretsmanager:ForceOverwriteReplicaSecret",
+      "secretsmanager:Type"
     ],
     "dependentActions": []
   },
@@ -71,7 +73,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -94,7 +97,8 @@
       "secretsmanager:ForceDeleteWithoutRecovery",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -115,7 +119,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -144,7 +149,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -167,7 +173,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -188,7 +195,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -218,7 +226,8 @@
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
       "secretsmanager:BlockPublicPolicy",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -239,7 +248,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -260,7 +270,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -283,7 +294,8 @@
       "aws:ResourceTag/${TagKey}",
       "secretsmanager:SecretPrimaryRegion",
       "secretsmanager:AddReplicaRegions",
-      "secretsmanager:ForceOverwriteReplicaSecret"
+      "secretsmanager:ForceOverwriteReplicaSecret",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -304,7 +316,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -328,7 +341,9 @@
       "aws:ResourceTag/${TagKey}",
       "secretsmanager:SecretPrimaryRegion",
       "secretsmanager:ModifyRotationRules",
-      "secretsmanager:RotateImmediately"
+      "secretsmanager:RotateImmediately",
+      "secretsmanager:resource/Type",
+      "secretsmanager:ExternalSecretRotationRoleArn"
     ],
     "dependentActions": []
   },
@@ -349,7 +364,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -372,7 +388,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -394,7 +411,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -418,7 +436,9 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:Type",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -440,7 +460,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   },
@@ -461,7 +482,8 @@
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",
       "aws:ResourceTag/${TagKey}",
-      "secretsmanager:SecretPrimaryRegion"
+      "secretsmanager:SecretPrimaryRegion",
+      "secretsmanager:resource/Type"
     ],
     "dependentActions": []
   }

iamdata/data/actions/security-ir.json

@@ -89,6 +89,7 @@
         "dependentActions": [
           "iam:CreateServiceLinkedRole",
           "organizations:DescribeOrganization",
+          "organizations:ListAWSServiceAccessForOrganization",
           "organizations:ListDelegatedAdministrators"
         ]
       }
@@ -197,6 +198,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listinvestigations": {
+    "name": "ListInvestigations",
+    "description": "Grants permission to list investigations for a case",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "case",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listmemberships": {
     "name": "ListMemberships",
     "description": "Grants permission to list memberships",
@@ -229,6 +245,21 @@
     ],
     "dependentActions": []
   },
+  "sendfeedback": {
+    "name": "SendFeedback",
+    "description": "Grants permission to send feedback for investigation results",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "case",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to the specified resource",