iamdata 0.1.202601121__tar.gz → 0.1.202601181__tar.gz

{iamdata-0.1.202601121 → iamdata-0.1.202601181}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iamdata
-Version: 0.1.202601121
+Version: 0.1.202601181
 Summary: IAM data for AWS actions, resources, and conditions based on IAM policy documents. Checked for updates daily.
 Project-URL: Homepage, https://github.com/cloud-copilot/iam-data-python
 Project-URL: Issues, https://github.com/cloud-copilot/iam-data-python/issues

{iamdata-0.1.202601121 → iamdata-0.1.202601181}/iamdata/data/actions/aoss.json

@@ -17,6 +17,23 @@
     ],
     "dependentActions": []
   },
+  "addcollectiontocollectiongroup": {
+    "name": "AddCollectionToCollectionGroup",
+    "description": "Grants permission to add a serverless collection to a specified collection group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "CollectionGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aoss:collection-group"
+    ],
+    "dependentActions": []
+  },
   "batchgetcollection": {
     "name": "BatchGetCollection",
     "description": "Grants permission to get attributes for one or more collections",
@@ -27,6 +44,16 @@
     ],
     "dependentActions": []
   },
+  "batchgetcollectiongroup": {
+    "name": "BatchGetCollectionGroup",
+    "description": "Grants permission to get attributes for one or more collection groups",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aoss:collection-group"
+    ],
+    "dependentActions": []
+  },
   "batchgeteffectivelifecyclepolicy": {
     "name": "BatchGetEffectiveLifecyclePolicy",
     "description": "Grants permission to get the information about a lifecycle policy applied to one or more AOSS resources",
@@ -74,6 +101,17 @@
     ],
     "dependentActions": []
   },
+  "createcollectiongroup": {
+    "name": "CreateCollectionGroup",
+    "description": "Grants permission to create a serverless collection group",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createindex": {
     "name": "CreateIndex",
     "description": "Grants permission to create an opensearch index",
@@ -162,6 +200,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletecollectiongroup": {
+    "name": "DeleteCollectionGroup",
+    "description": "Grants permission to delete a serverless collection group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "CollectionGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteindex": {
     "name": "DeleteIndex",
     "description": "Grants permission to delete an opensearch index",
@@ -267,6 +320,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcollectiongroups": {
+    "name": "ListCollectionGroups",
+    "description": "Grants permission to list collection groups",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcollections": {
     "name": "ListCollections",
     "description": "Grants permission to list collections",
@@ -371,6 +432,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatecollectiongroup": {
+    "name": "UpdateCollectionGroup",
+    "description": "Grants permission to update a collection group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "CollectionGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateindex": {
     "name": "UpdateIndex",
     "description": "Grants permission to update an opensearch index",

{iamdata-0.1.202601121 → iamdata-0.1.202601181}/iamdata/data/actions/appsync.json

@@ -44,6 +44,28 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "associatewebacl": {
+    "name": "AssociateWebACL",
+    "isPermissionOnly": true,
+    "description": "Grants permission to associate a web ACL and a resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "api",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "graphqlapi",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createapi": {
     "name": "CreateApi",
     "description": "Grants permission to create an API",
@@ -321,6 +343,28 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disassociatewebacl": {
+    "name": "DisassociateWebACL",
+    "isPermissionOnly": true,
+    "description": "Grants permission to disassociate a web ACL and a resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "api",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "graphqlapi",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "evaluatecode": {
     "name": "EvaluateCode",
     "description": "Grants permission to evaluate code with a runtime and context",
@@ -569,6 +613,28 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getwebaclforresource": {
+    "name": "GetWebACLForResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get associated web ACLs for a resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "api",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "graphqlapi",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "graphql": {
     "name": "GraphQL",
     "isPermissionOnly": true,
@@ -676,6 +742,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listresourcesforwebacl": {
+    "name": "ListResourcesForWebACL",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get associated resources for a web ACL",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listsourceapiassociations": {
     "name": "ListSourceApiAssociations",
     "description": "Grants permission to list source APIs associated to a given merged API",

{iamdata-0.1.202601121 → iamdata-0.1.202601181}/iamdata/data/actions/deadline.json

@@ -216,13 +216,17 @@
         "name": "budget",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "deadline:TagResource",
+          "identitystore:ListGroupMembershipsForMember"
+        ]
       }
     ],
-    "conditionKeys": [],
-    "dependentActions": [
-      "identitystore:ListGroupMembershipsForMember"
-    ]
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
   },
   "createfarm": {
     "name": "CreateFarm",
@@ -1629,6 +1633,12 @@
     "description": "Grants permission to list all tags on specified Deadline Cloud resources",
     "accessLevel": "List",
     "resourceTypes": [
+      {
+        "name": "budget",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "farm",
         "required": false,
@@ -1828,6 +1838,12 @@
     "description": "Grants permission to add or overwrite one or more tags for the specified Deadline Cloud resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "budget",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "farm",
         "required": false,
@@ -1877,6 +1893,12 @@
     "description": "Grants permission to disassociate one or more tags from the specified Deadline Cloud resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "budget",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "farm",
         "required": false,

{iamdata-0.1.202601121 → iamdata-0.1.202601181}/iamdata/data/actions/mgn.json

@@ -469,6 +469,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getaccountsettings": {
+    "name": "GetAccountSettings",
+    "description": "Grants permission to get account settings",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getagentcommandformgn": {
     "name": "GetAgentCommandForMgn",
     "isPermissionOnly": true,
@@ -2012,6 +2020,14 @@
     ],
     "dependentActions": []
   },
+  "updateaccountsettings": {
+    "name": "UpdateAccountSettings",
+    "description": "Grants permission to update account settings",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateagentbacklogformgn": {
     "name": "UpdateAgentBacklogForMgn",
     "isPermissionOnly": true,

{iamdata-0.1.202601121 → iamdata-0.1.202601181}/iamdata/data/actions/network-firewall.json

@@ -47,7 +47,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "associatesubnets": {

{iamdata-0.1.202601121 → iamdata-0.1.202601181}/iamdata/data/actions/networkmanager.json

@@ -1196,6 +1196,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listattachmentroutingpolicyassociations": {
+    "name": "ListAttachmentRoutingPolicyAssociations",
+    "description": "Grants permission to list all routing policies associated to core network attachments",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listattachments": {
     "name": "ListAttachments",
     "description": "Grants permission to describe attachments",

{iamdata-0.1.202601121 → iamdata-0.1.202601181}/iamdata/data/actions/partnercentral.json

@@ -65,7 +65,9 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "partnercentral:Catalog"
+      "partnercentral:Catalog",
+      "partnercentral:FulfillmentTypes",
+      "partnercentral:Programs"
     ],
     "dependentActions": []
   },
@@ -130,7 +132,9 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "partnercentral:Catalog"
+      "partnercentral:Catalog",
+      "partnercentral:FulfillmentTypes",
+      "partnercentral:Programs"
     ],
     "dependentActions": []
   },
@@ -166,7 +170,9 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "partnercentral:Catalog"
+      "partnercentral:Catalog",
+      "partnercentral:FulfillmentTypes",
+      "partnercentral:Programs"
     ],
     "dependentActions": []
   },
@@ -251,7 +257,8 @@
       "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "partnercentral:Catalog",
-      "partnercentral:FulfillmentTypes"
+      "partnercentral:FulfillmentTypes",
+      "partnercentral:Programs"
     ],
     "dependentActions": []
   },
@@ -568,7 +575,9 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "partnercentral:Catalog"
+      "partnercentral:Catalog",
+      "partnercentral:FulfillmentTypes",
+      "partnercentral:Programs"
     ],
     "dependentActions": []
   },
@@ -648,7 +657,9 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "partnercentral:Catalog"
+      "partnercentral:Catalog",
+      "partnercentral:FulfillmentTypes",
+      "partnercentral:Programs"
     ],
     "dependentActions": []
   },
@@ -666,7 +677,8 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "partnercentral:Catalog"
+      "partnercentral:Catalog",
+      "partnercentral:FulfillmentTypes"
     ],
     "dependentActions": []
   },
@@ -684,7 +696,9 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "partnercentral:Catalog"
+      "partnercentral:Catalog",
+      "partnercentral:FulfillmentTypes",
+      "partnercentral:Programs"
     ],
     "dependentActions": []
   },
@@ -1269,7 +1283,9 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
-      "partnercentral:Catalog"
+      "partnercentral:Catalog",
+      "partnercentral:FulfillmentTypes",
+      "partnercentral:Programs"
     ],
     "dependentActions": []
   },
@@ -1340,7 +1356,9 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "partnercentral:Catalog"
+      "partnercentral:Catalog",
+      "partnercentral:FulfillmentTypes",
+      "partnercentral:Programs"
     ],
     "dependentActions": []
   },
@@ -1573,7 +1591,9 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "partnercentral:Catalog"
+      "partnercentral:Catalog",
+      "partnercentral:FulfillmentTypes",
+      "partnercentral:Programs"
     ],
     "dependentActions": []
   },
@@ -1646,7 +1666,9 @@
       "aws:RequestTag/${TagKey}",
       "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
-      "partnercentral:Catalog"
+      "partnercentral:Catalog",
+      "partnercentral:FulfillmentTypes",
+      "partnercentral:Programs"
     ],
     "dependentActions": []
   },
@@ -1701,7 +1723,9 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
-      "partnercentral:Catalog"
+      "partnercentral:Catalog",
+      "partnercentral:FulfillmentTypes",
+      "partnercentral:Programs"
     ],
     "dependentActions": []
   },
@@ -1719,7 +1743,9 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "partnercentral:Catalog"
+      "partnercentral:Catalog",
+      "partnercentral:FulfillmentTypes",
+      "partnercentral:Programs"
     ],
     "dependentActions": []
   },

{iamdata-0.1.202601121 → iamdata-0.1.202601181}/iamdata/data/actions/s3tables.json

@@ -124,6 +124,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletetablebucketmetricsconfiguration": {
+    "name": "DeleteTableBucketMetricsConfiguration",
+    "description": "Grants permission to delete a metrics configuration on a table bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "TableBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletetablebucketpolicy": {
     "name": "DeleteTableBucketPolicy",
     "description": "Grants permission to delete a policy on a table bucket",
@@ -270,6 +285,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettablebucketmetricsconfiguration": {
+    "name": "GetTableBucketMetricsConfiguration",
+    "description": "Grants permission to retrieve a metrics configuration on a bucket",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "TableBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "gettablebucketpolicy": {
     "name": "GetTableBucketPolicy",
     "description": "Grants permission to retrieve a policy on a table bucket",
@@ -611,6 +641,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "puttablebucketmetricsconfiguration": {
+    "name": "PutTableBucketMetricsConfiguration",
+    "description": "Grants permission to create or overwrite a metrics configuration on a table bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "TableBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "puttablebucketpolicy": {
     "name": "PutTableBucketPolicy",
     "description": "Grants permission to create or overwrite a policy on a table bucket",

{iamdata-0.1.202601121 → iamdata-0.1.202601181}/iamdata/data/actions/wafv2.json

@@ -15,6 +15,7 @@
           "appsync:SetWebACL",
           "cognito-idp:AssociateWebACL",
           "ec2:AssociateVerifiedAccessInstanceWebAcl",
+          "elasticloadbalancing:CreateWebACLAssociation",
           "elasticloadbalancing:SetWebAcl",
           "wafv2:GetPermissionPolicy",
           "wafv2:PutPermissionPolicy"
@@ -369,6 +370,7 @@
           "appsync:SetWebACL",
           "cognito-idp:DisassociateWebACL",
           "ec2:DisassociateVerifiedAccessInstanceWebAcl",
+          "elasticloadbalancing:DeleteWebACLAssociation",
           "elasticloadbalancing:SetWebAcl",
           "wafv2:PutPermissionPolicy"
         ]
@@ -599,6 +601,7 @@
           "apprunner:DescribeWebAclForService",
           "cognito-idp:GetWebACLForResource",
           "ec2:GetVerifiedAccessInstanceWebAcl",
+          "elasticloadbalancing:GetLoadBalancerWebACL",
           "wafv2:GetWebACL"
         ]
       },
@@ -727,7 +730,8 @@
           "amplify:ListResourcesForWebACL",
           "apprunner:ListAssociatedServicesForWebAcl",
           "cognito-idp:ListResourcesForWebACL",
-          "ec2:DescribeVerifiedAccessInstanceWebAclAssociations"
+          "ec2:DescribeVerifiedAccessInstanceWebAclAssociations",
+          "elasticloadbalancing:DescribeWebACLAssociation"
         ]
       },
       {

{iamdata-0.1.202601121 → iamdata-0.1.202601181}/iamdata/data/conditionKeys/aoss.json

@@ -9,6 +9,11 @@
     "description": "Filters access by the collection name",
     "type": "String"
   },
+  "aoss:collection-group": {
+    "key": "aoss:collection-group",
+    "description": "Filters access by the collection group name",
+    "type": "String"
+  },
   "aoss:index": {
     "key": "aoss:index",
     "description": "Filters access by the index",

{iamdata-0.1.202601121 → iamdata-0.1.202601181}/iamdata/data/conditionKeys/sts.json

@@ -226,8 +226,8 @@
   },
   "sts:durationseconds": {
     "key": "sts:DurationSeconds",
-    "description": "Filters access by the duration in seconds when getting a bearer token",
-    "type": "String"
+    "description": "Filters access by the duration in seconds when getting a bearer token or a JSON Web Token (JWT) from the GetWebIdentityToken API",
+    "type": "Numeric"
   },
   "sts:externalid": {
     "key": "sts:ExternalId",

iamdata-0.1.202601181/iamdata/data/metadata.json

@@ -0,0 +1,4 @@
+{
+  "version": "0.1.202601181",
+  "updatedAt": "2026-01-18T05:01:28.837Z"
+}

{iamdata-0.1.202601121 → iamdata-0.1.202601181}/iamdata/data/resourceTypes/aoss.json

@@ -6,6 +6,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "collectiongroup": {
+    "key": "CollectionGroup",
+    "arn": "arn:${Partition}:aoss:${Region}:${Account}:collection-group/${CollectionGroupId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "dashboards": {
     "key": "Dashboards",
     "arn": "arn:${Partition}:aoss:${Region}:${Account}:dashboards/default"

{iamdata-0.1.202601121 → iamdata-0.1.202601181}/iamdata/data/resourceTypes/deadline.json

@@ -3,6 +3,7 @@
     "key": "budget",
     "arn": "arn:${Partition}:deadline:${Region}:${Account}:farm/${FarmId}/budget/${BudgetId}",
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "deadline:FarmMembershipLevels"
     ]
   },

{iamdata-0.1.202601121 → iamdata-0.1.202601181}/iamdata/data/serviceNames.json

@@ -122,7 +122,6 @@
   "dax": "Amazon DynamoDB Accelerator (DAX)",
   "dbqms": "Database Query Metadata Service",
   "deadline": "AWS Deadline Cloud",
-  "deepracer": "AWS DeepRacer",
   "detective": "Amazon Detective",
   "devicefarm": "AWS Device Farm",
   "devops-guru": "Amazon DevOps Guru",

{iamdata-0.1.202601121 → iamdata-0.1.202601181}/iamdata/data/services.json

@@ -122,7 +122,6 @@
   "dax",
   "dbqms",
   "deadline",
-  "deepracer",
   "detective",
   "devicefarm",
   "devops-guru",

{iamdata-0.1.202601121 → iamdata-0.1.202601181}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "iamdata"
-version = "0.1.202601121"
+version = "0.1.202601181"
 authors = [
   { name="David Kerber", email="dave@cloudcopilot.io" },
 ]