iamdata 0.1.202601061__tar.gz → 0.1.202601111__tar.gz

{iamdata-0.1.202601061 → iamdata-0.1.202601111}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iamdata
-Version: 0.1.202601061
+Version: 0.1.202601111
 Summary: IAM data for AWS actions, resources, and conditions based on IAM policy documents. Checked for updates daily.
 Project-URL: Homepage, https://github.com/cloud-copilot/iam-data-python
 Project-URL: Issues, https://github.com/cloud-copilot/iam-data-python/issues

iamdata-0.1.202601111/iamdata/data/actions/ecs-mcp.json

@@ -0,0 +1,18 @@
+{
+  "invokereadonlytools": {
+    "name": "InvokeReadOnlyTools",
+    "description": "Grants permission to call read-only tools in MCP service",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "usemcp": {
+    "name": "UseMcp",
+    "description": "Grants permission to use MCP service",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

{iamdata-0.1.202601061 → iamdata-0.1.202601111}/iamdata/data/actions/elasticloadbalancing.json

@@ -205,6 +205,15 @@
     ],
     "dependentActions": []
   },
+  "createwebaclassociation": {
+    "name": "CreateWebACLAssociation",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create WebAcl association to WAF",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletelistener": {
     "name": "DeleteListener",
     "description": "Grants permission to delete the specified listener",
@@ -331,6 +340,15 @@
     ],
     "dependentActions": []
   },
+  "deletewebaclassociation": {
+    "name": "DeleteWebACLAssociation",
+    "isPermissionOnly": true,
+    "description": "Grants permission to delete WebAcl association to WAF",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deregistertargets": {
     "name": "DeregisterTargets",
     "description": "Grants permission to deregister the specified targets from the specified target group",
@@ -477,6 +495,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describewebaclassociation": {
+    "name": "DescribeWebACLAssociation",
+    "isPermissionOnly": true,
+    "description": "Grants permission to describe WebAcl association to WAF",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getloadbalancerwebacl": {
+    "name": "GetLoadBalancerWebACL",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get Load Balancer WebAcl to WAF",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getresourcepolicy": {
     "name": "GetResourcePolicy",
     "description": "Grants permission to retrieve the resource policy associated with the resource",

{iamdata-0.1.202601061 → iamdata-0.1.202601111}/iamdata/data/actions/execute-api.json

@@ -1,7 +1,7 @@
 {
   "invalidatecache": {
     "name": "InvalidateCache",
-    "description": "Used to invalidate API cache upon a client request",
+    "description": "Grants permission to invalidate API cache upon a client request",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -16,7 +16,7 @@
   },
   "invoke": {
     "name": "Invoke",
-    "description": "Used to invoke an API upon a client request",
+    "description": "Grants permission to invoke an API upon a client request",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -37,7 +37,7 @@
   },
   "manageconnections": {
     "name": "ManageConnections",
-    "description": "ManageConnections controls access to the @connections API",
+    "description": "Grants permission to access the Websocket @connections Route",
     "accessLevel": "Write",
     "resourceTypes": [
       {

{iamdata-0.1.202601061 → iamdata-0.1.202601111}/iamdata/data/actions/networkmanager.json

@@ -211,6 +211,21 @@
     ],
     "dependentActions": []
   },
+  "createcorenetworkprefixlistassociation": {
+    "name": "CreateCoreNetworkPrefixListAssociation",
+    "description": "Grants permission to create a prefix list core network association",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createdevice": {
     "name": "CreateDevice",
     "description": "Grants permission to create a new device",
@@ -490,6 +505,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletecorenetworkprefixlistassociation": {
+    "name": "DeleteCoreNetworkPrefixListAssociation",
+    "description": "Grants permission to delete a prefix list core network association",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletedevice": {
     "name": "DeleteDevice",
     "description": "Grants permission to delete a device",
@@ -1211,6 +1241,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcorenetworkprefixlistassociations": {
+    "name": "ListCoreNetworkPrefixListAssociations",
+    "description": "Grants permission to list core network prefix list associaitons",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcorenetworkroutinginformation": {
+    "name": "ListCoreNetworkRoutingInformation",
+    "description": "Grants permission to list core network routing information",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcorenetworks": {
     "name": "ListCoreNetworks",
     "description": "Grants permission to list core networks",
@@ -1300,6 +1360,27 @@
     ],
     "dependentActions": []
   },
+  "putattachmentroutingpolicylabel": {
+    "name": "PutAttachmentRoutingPolicyLabel",
+    "description": "Grants permission to put an attachment routing policy label",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "attachment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putcorenetworkpolicy": {
     "name": "PutCoreNetworkPolicy",
     "description": "Grants permission to create a core network policy",
@@ -1364,6 +1445,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "removeattachmentroutingpolicylabel": {
+    "name": "RemoveAttachmentRoutingPolicyLabel",
+    "description": "Grants permission to remove an attachment routing policy label",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "attachment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "restorecorenetworkpolicyversion": {
     "name": "RestoreCoreNetworkPolicyVersion",
     "description": "Grants permission to restore the core network policy to a previous version",

{iamdata-0.1.202601061 → iamdata-0.1.202601111}/iamdata/data/actions/organizations.json

@@ -481,7 +481,8 @@
       }
     ],
     "conditionKeys": [
-      "organizations:TransferType"
+      "organizations:TransferType",
+      "organizations:TransferDirection"
     ],
     "dependentActions": []
   },
@@ -770,7 +771,10 @@
       {
         "name": "responsibilitytransfer",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "organizations:TransferType",
+          "organizations:TransferDirection"
+        ],
         "dependentActions": []
       },
       {

{iamdata-0.1.202601061 → iamdata-0.1.202601111}/iamdata/data/actions/payment-cryptography.json

@@ -17,7 +17,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "createalias": {
@@ -48,7 +50,10 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "payment-cryptography:KeyClass",
+      "payment-cryptography:KeyUsage",
+      "payment-cryptography:KeyAlgorithm"
     ],
     "dependentActions": [
       "payment-cryptography:TagResource"
@@ -72,7 +77,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "deletealias": {
@@ -105,7 +112,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "disabledefaultkeyreplicationregions": {
@@ -142,7 +151,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "exportkey": {
@@ -157,7 +168,11 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias",
+      "payment-cryptography:CertificateAuthorityPublicKeyIdentifier",
+      "payment-cryptography:WrappingKeyIdentifier"
+    ],
     "dependentActions": []
   },
   "generatecardvalidationdata": {
@@ -178,7 +193,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "generatemac": {
@@ -199,7 +216,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "generatemacemvpinchange": {
@@ -220,7 +239,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "generatepindata": {
@@ -241,7 +262,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "getalias": {
@@ -286,7 +309,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "getdefaultkeyreplicationregions": {
@@ -309,7 +334,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "getparametersforexport": {
@@ -340,7 +367,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "importkey": {
@@ -350,7 +379,10 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "payment-cryptography:ImportKeyMaterial",
+      "payment-cryptography:CertificateAuthorityPublicKeyIdentifier",
+      "payment-cryptography:WrappingKeyIdentifier"
     ],
     "dependentActions": [
       "payment-cryptography:TagResource"
@@ -405,7 +437,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "removekeyreplicationregions": {
@@ -426,7 +460,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "restorekey": {
@@ -441,7 +477,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "startkeyusage": {
@@ -456,7 +494,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "stopkeyusage": {
@@ -471,7 +511,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "tagresource": {
@@ -510,7 +552,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "translatepindata": {
@@ -531,7 +575,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "untagresource": {
@@ -593,7 +639,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "verifycardvalidationdata": {
@@ -614,7 +662,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "verifymac": {
@@ -635,7 +685,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "verifypindata": {
@@ -656,7 +708,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   }
 }

{iamdata-0.1.202601061 → iamdata-0.1.202601111}/iamdata/data/actions/route53resolver.json

@@ -177,7 +177,14 @@
     "name": "CreateResolverQueryLogConfig",
     "description": "Grants permission to create a Resolver query logging configuration, which defines where you want Resolver to save DNS query logs that originate in your VPCs",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "resolver-query-log-config",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"

{iamdata-0.1.202601061 → iamdata-0.1.202601111}/iamdata/data/conditionKeys/apigateway.json

@@ -151,7 +151,7 @@
   },
   "apigateway:resource/authorizeruri": {
     "key": "apigateway:Resource/AuthorizerUri",
-    "description": "Filters access by URI of a Lambda authorizer function. Available during UpdateAuthorizer and DeleteAuthorizer operations. Also available during reimport as an ArrayOfString",
+    "description": "Filters access by the URI of the current Lambda authorizer associated with the current API. Available during UpdateAuthorizer and DeleteAuthorizer. Also available as a collection during reimport",
     "type": "ArrayOfString"
   },
   "apigateway:resource/cognitouserpoolarn": {
@@ -269,19 +269,9 @@
     "description": "Filters access by access association source. Available during the CreateDomainNameAccessAssociation operation",
     "type": "String"
   },
-  "apigateway:request/cognitouserpoolproviderarn": {
-    "key": "apigateway:Request/CognitoUserPoolProviderArn",
-    "description": "Filters access by Cognito user pool provider ARN. Available during CreateAuthorizer and UpdateAuthorizer",
-    "type": "ARN"
-  },
   "apigateway:request/domainnamearn": {
     "key": "apigateway:Request/DomainNameArn",
     "description": "Filters access by domain name ARN. Available during the CreateDomainNameAccessAssociation operation",
     "type": "ARN"
-  },
-  "apigateway:resource/cognitouserpoolproviderarn": {
-    "key": "apigateway:Resource/CognitoUserPoolProviderArn",
-    "description": "Filters access by Cognito user pool provider ARN. Available during CreateAuthorizer and UpdateAuthorizer",
-    "type": "ARN"
   }
 }

iamdata-0.1.202601111/iamdata/data/conditionKeys/execute-api.json

@@ -0,0 +1,7 @@
+{
+  "execute-api:viadomainarn": {
+    "key": "execute-api:viaDomainArn",
+    "description": "Filters access by the DomainName ARN the API is called from",
+    "type": "ARN"
+  }
+}

iamdata-0.1.202601111/iamdata/data/metadata.json

@@ -0,0 +1,4 @@
+{
+  "version": "0.1.202601111",
+  "updatedAt": "2026-01-11T05:04:52.627Z"
+}

{iamdata-0.1.202601061 → iamdata-0.1.202601111}/iamdata/data/resourceTypes/apigateway.json

@@ -60,11 +60,7 @@
     "arn": "arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/authorizers/${AuthorizerId}",
     "conditionKeys": [
       "apigateway:Request/AuthorizerType",
-      "apigateway:Request/AuthorizerUri",
-      "apigateway:Request/CognitoUserPoolProviderArn",
       "apigateway:Resource/AuthorizerType",
-      "apigateway:Resource/AuthorizerUri",
-      "apigateway:Resource/CognitoUserPoolProviderArn",
       "aws:ResourceTag/${TagKey}"
     ]
   },
@@ -73,8 +69,6 @@
     "arn": "arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/authorizers",
     "conditionKeys": [
       "apigateway:Request/AuthorizerType",
-      "apigateway:Request/AuthorizerUri",
-      "apigateway:Request/CognitoUserPoolProviderArn",
       "aws:ResourceTag/${TagKey}"
     ]
   },
@@ -498,7 +492,6 @@
       "apigateway:Request/ApiKeyRequired",
       "apigateway:Request/ApiName",
       "apigateway:Request/AuthorizerType",
-      "apigateway:Request/AuthorizerUri",
       "apigateway:Request/DisableExecuteApiEndpoint",
       "apigateway:Request/EndpointType",
       "apigateway:Request/RouteAuthorizationType",
@@ -506,7 +499,6 @@
       "apigateway:Resource/ApiKeyRequired",
       "apigateway:Resource/ApiName",
       "apigateway:Resource/AuthorizerType",
-      "apigateway:Resource/AuthorizerUri",
       "apigateway:Resource/DisableExecuteApiEndpoint",
       "apigateway:Resource/EndpointType",
       "apigateway:Resource/RouteAuthorizationType",
@@ -521,7 +513,6 @@
       "apigateway:Request/ApiKeyRequired",
       "apigateway:Request/ApiName",
       "apigateway:Request/AuthorizerType",
-      "apigateway:Request/AuthorizerUri",
       "apigateway:Request/DisableExecuteApiEndpoint",
       "apigateway:Request/EndpointType",
       "apigateway:Request/RouteAuthorizationType",

iamdata-0.1.202601111/iamdata/data/resourceTypes/verified-access.json

@@ -0,0 +1 @@
+{}

iamdata-0.1.202601111/iamdata/data/resourceTypes/wam.json

@@ -0,0 +1 @@
+{}

{iamdata-0.1.202601061 → iamdata-0.1.202601111}/iamdata/data/serviceNames.json

@@ -143,6 +143,7 @@
   "ecr": "Amazon Elastic Container Registry",
   "ecr-public": "Amazon Elastic Container Registry Public",
   "ecs": "Amazon Elastic Container Service",
+  "ecs-mcp": "Amazon ECS MCP Service",
   "eks": "Amazon Elastic Kubernetes Service",
   "eks-auth": "Amazon EKS Auth",
   "eks-mcp": "Amazon EKS MCP Server",

{iamdata-0.1.202601061 → iamdata-0.1.202601111}/iamdata/data/services.json

@@ -143,6 +143,7 @@
   "ecr",
   "ecr-public",
   "ecs",
+  "ecs-mcp",
   "eks",
   "eks-auth",
   "eks-mcp",

{iamdata-0.1.202601061 → iamdata-0.1.202601111}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "iamdata"
-version = "0.1.202601061"
+version = "0.1.202601111"
 authors = [
   { name="David Kerber", email="dave@cloudcopilot.io" },
 ]