iamdata 0.1.202512231__tar.gz → 0.1.202601181__tar.gz

{iamdata-0.1.202512231 → iamdata-0.1.202601181}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iamdata
-Version: 0.1.202512231
+Version: 0.1.202601181
 Summary: IAM data for AWS actions, resources, and conditions based on IAM policy documents. Checked for updates daily.
 Project-URL: Homepage, https://github.com/cloud-copilot/iam-data-python
 Project-URL: Issues, https://github.com/cloud-copilot/iam-data-python/issues

{iamdata-0.1.202512231 → iamdata-0.1.202601181}/iamdata/data/actions/aoss.json

@@ -17,6 +17,23 @@
     ],
     "dependentActions": []
   },
+  "addcollectiontocollectiongroup": {
+    "name": "AddCollectionToCollectionGroup",
+    "description": "Grants permission to add a serverless collection to a specified collection group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "CollectionGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aoss:collection-group"
+    ],
+    "dependentActions": []
+  },
   "batchgetcollection": {
     "name": "BatchGetCollection",
     "description": "Grants permission to get attributes for one or more collections",
@@ -27,6 +44,16 @@
     ],
     "dependentActions": []
   },
+  "batchgetcollectiongroup": {
+    "name": "BatchGetCollectionGroup",
+    "description": "Grants permission to get attributes for one or more collection groups",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aoss:collection-group"
+    ],
+    "dependentActions": []
+  },
   "batchgeteffectivelifecyclepolicy": {
     "name": "BatchGetEffectiveLifecyclePolicy",
     "description": "Grants permission to get the information about a lifecycle policy applied to one or more AOSS resources",
@@ -74,6 +101,17 @@
     ],
     "dependentActions": []
   },
+  "createcollectiongroup": {
+    "name": "CreateCollectionGroup",
+    "description": "Grants permission to create a serverless collection group",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createindex": {
     "name": "CreateIndex",
     "description": "Grants permission to create an opensearch index",
@@ -162,6 +200,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletecollectiongroup": {
+    "name": "DeleteCollectionGroup",
+    "description": "Grants permission to delete a serverless collection group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "CollectionGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteindex": {
     "name": "DeleteIndex",
     "description": "Grants permission to delete an opensearch index",
@@ -267,6 +320,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcollectiongroups": {
+    "name": "ListCollectionGroups",
+    "description": "Grants permission to list collection groups",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcollections": {
     "name": "ListCollections",
     "description": "Grants permission to list collections",
@@ -371,6 +432,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatecollectiongroup": {
+    "name": "UpdateCollectionGroup",
+    "description": "Grants permission to update a collection group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "CollectionGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateindex": {
     "name": "UpdateIndex",
     "description": "Grants permission to update an opensearch index",

{iamdata-0.1.202512231 → iamdata-0.1.202601181}/iamdata/data/actions/appsync.json

@@ -44,6 +44,28 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "associatewebacl": {
+    "name": "AssociateWebACL",
+    "isPermissionOnly": true,
+    "description": "Grants permission to associate a web ACL and a resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "api",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "graphqlapi",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createapi": {
     "name": "CreateApi",
     "description": "Grants permission to create an API",
@@ -321,6 +343,28 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disassociatewebacl": {
+    "name": "DisassociateWebACL",
+    "isPermissionOnly": true,
+    "description": "Grants permission to disassociate a web ACL and a resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "api",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "graphqlapi",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "evaluatecode": {
     "name": "EvaluateCode",
     "description": "Grants permission to evaluate code with a runtime and context",
@@ -569,6 +613,28 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getwebaclforresource": {
+    "name": "GetWebACLForResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get associated web ACLs for a resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "api",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "graphqlapi",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "graphql": {
     "name": "GraphQL",
     "isPermissionOnly": true,
@@ -676,6 +742,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listresourcesforwebacl": {
+    "name": "ListResourcesForWebACL",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get associated resources for a web ACL",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listsourceapiassociations": {
     "name": "ListSourceApiAssociations",
     "description": "Grants permission to list source APIs associated to a given merged API",

{iamdata-0.1.202512231 → iamdata-0.1.202601181}/iamdata/data/actions/bedrock.json

@@ -3130,7 +3130,7 @@
   },
   "putfoundationmodelentitlement": {
     "name": "PutFoundationModelEntitlement",
-    "description": "Grants permission to put entitlement to access a foundation model",
+    "description": "Grants permission to put entitlement to access a serverless foundation model. Do not use to restrict model access",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],

{iamdata-0.1.202512231 → iamdata-0.1.202601181}/iamdata/data/actions/deadline.json

@@ -216,13 +216,17 @@
         "name": "budget",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "deadline:TagResource",
+          "identitystore:ListGroupMembershipsForMember"
+        ]
       }
     ],
-    "conditionKeys": [],
-    "dependentActions": [
-      "identitystore:ListGroupMembershipsForMember"
-    ]
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
   },
   "createfarm": {
     "name": "CreateFarm",
@@ -1629,6 +1633,12 @@
     "description": "Grants permission to list all tags on specified Deadline Cloud resources",
     "accessLevel": "List",
     "resourceTypes": [
+      {
+        "name": "budget",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "farm",
         "required": false,
@@ -1828,6 +1838,12 @@
     "description": "Grants permission to add or overwrite one or more tags for the specified Deadline Cloud resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "budget",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "farm",
         "required": false,
@@ -1877,6 +1893,12 @@
     "description": "Grants permission to disassociate one or more tags from the specified Deadline Cloud resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "budget",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "farm",
         "required": false,

iamdata-0.1.202601181/iamdata/data/actions/ecs-mcp.json

@@ -0,0 +1,18 @@
+{
+  "invokereadonlytools": {
+    "name": "InvokeReadOnlyTools",
+    "description": "Grants permission to call read-only tools in MCP service",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "usemcp": {
+    "name": "UseMcp",
+    "description": "Grants permission to use MCP service",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

{iamdata-0.1.202512231 → iamdata-0.1.202601181}/iamdata/data/actions/elasticloadbalancing.json

@@ -205,6 +205,15 @@
     ],
     "dependentActions": []
   },
+  "createwebaclassociation": {
+    "name": "CreateWebACLAssociation",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create WebAcl association to WAF",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletelistener": {
     "name": "DeleteListener",
     "description": "Grants permission to delete the specified listener",
@@ -331,6 +340,15 @@
     ],
     "dependentActions": []
   },
+  "deletewebaclassociation": {
+    "name": "DeleteWebACLAssociation",
+    "isPermissionOnly": true,
+    "description": "Grants permission to delete WebAcl association to WAF",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deregistertargets": {
     "name": "DeregisterTargets",
     "description": "Grants permission to deregister the specified targets from the specified target group",
@@ -477,6 +495,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describewebaclassociation": {
+    "name": "DescribeWebACLAssociation",
+    "isPermissionOnly": true,
+    "description": "Grants permission to describe WebAcl association to WAF",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getloadbalancerwebacl": {
+    "name": "GetLoadBalancerWebACL",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get Load Balancer WebAcl to WAF",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getresourcepolicy": {
     "name": "GetResourcePolicy",
     "description": "Grants permission to retrieve the resource policy associated with the resource",

{iamdata-0.1.202512231 → iamdata-0.1.202601181}/iamdata/data/actions/execute-api.json

@@ -1,7 +1,7 @@
 {
   "invalidatecache": {
     "name": "InvalidateCache",
-    "description": "Used to invalidate API cache upon a client request",
+    "description": "Grants permission to invalidate API cache upon a client request",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -16,7 +16,7 @@
   },
   "invoke": {
     "name": "Invoke",
-    "description": "Used to invoke an API upon a client request",
+    "description": "Grants permission to invoke an API upon a client request",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -37,7 +37,7 @@
   },
   "manageconnections": {
     "name": "ManageConnections",
-    "description": "ManageConnections controls access to the @connections API",
+    "description": "Grants permission to access the Websocket @connections Route",
     "accessLevel": "Write",
     "resourceTypes": [
       {

{iamdata-0.1.202512231 → iamdata-0.1.202601181}/iamdata/data/actions/iotwireless.json

@@ -244,7 +244,26 @@
     "name": "CreateWirelessDevice",
     "description": "Grants permission to create a WirelessDevice resource with given Destination",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "Destination",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "DeviceProfile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ServiceProfile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -1432,7 +1451,14 @@
     "name": "StartSingleWirelessDeviceImportTask",
     "description": "Grants permission to start the single wireless device import task",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "Destination",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -1449,6 +1475,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "Destination",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1823,6 +1855,24 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "Destination",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "DeviceProfile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ServiceProfile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],

{iamdata-0.1.202512231 → iamdata-0.1.202601181}/iamdata/data/actions/mgn.json

@@ -469,6 +469,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getaccountsettings": {
+    "name": "GetAccountSettings",
+    "description": "Grants permission to get account settings",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getagentcommandformgn": {
     "name": "GetAgentCommandForMgn",
     "isPermissionOnly": true,
@@ -2012,6 +2020,14 @@
     ],
     "dependentActions": []
   },
+  "updateaccountsettings": {
+    "name": "UpdateAccountSettings",
+    "description": "Grants permission to update account settings",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateagentbacklogformgn": {
     "name": "UpdateAgentBacklogForMgn",
     "isPermissionOnly": true,

{iamdata-0.1.202512231 → iamdata-0.1.202601181}/iamdata/data/actions/network-firewall.json

@@ -47,7 +47,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "associatesubnets": {

{iamdata-0.1.202512231 → iamdata-0.1.202601181}/iamdata/data/actions/networkmanager.json

@@ -211,6 +211,21 @@
     ],
     "dependentActions": []
   },
+  "createcorenetworkprefixlistassociation": {
+    "name": "CreateCoreNetworkPrefixListAssociation",
+    "description": "Grants permission to create a prefix list core network association",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createdevice": {
     "name": "CreateDevice",
     "description": "Grants permission to create a new device",
@@ -490,6 +505,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletecorenetworkprefixlistassociation": {
+    "name": "DeleteCoreNetworkPrefixListAssociation",
+    "description": "Grants permission to delete a prefix list core network association",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletedevice": {
     "name": "DeleteDevice",
     "description": "Grants permission to delete a device",
@@ -1166,6 +1196,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listattachmentroutingpolicyassociations": {
+    "name": "ListAttachmentRoutingPolicyAssociations",
+    "description": "Grants permission to list all routing policies associated to core network attachments",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listattachments": {
     "name": "ListAttachments",
     "description": "Grants permission to describe attachments",
@@ -1211,6 +1256,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcorenetworkprefixlistassociations": {
+    "name": "ListCoreNetworkPrefixListAssociations",
+    "description": "Grants permission to list core network prefix list associaitons",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcorenetworkroutinginformation": {
+    "name": "ListCoreNetworkRoutingInformation",
+    "description": "Grants permission to list core network routing information",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcorenetworks": {
     "name": "ListCoreNetworks",
     "description": "Grants permission to list core networks",
@@ -1300,6 +1375,27 @@
     ],
     "dependentActions": []
   },
+  "putattachmentroutingpolicylabel": {
+    "name": "PutAttachmentRoutingPolicyLabel",
+    "description": "Grants permission to put an attachment routing policy label",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "attachment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putcorenetworkpolicy": {
     "name": "PutCoreNetworkPolicy",
     "description": "Grants permission to create a core network policy",
@@ -1364,6 +1460,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "removeattachmentroutingpolicylabel": {
+    "name": "RemoveAttachmentRoutingPolicyLabel",
+    "description": "Grants permission to remove an attachment routing policy label",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "attachment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "restorecorenetworkpolicyversion": {
     "name": "RestoreCoreNetworkPolicyVersion",
     "description": "Grants permission to restore the core network policy to a previous version",