fix: update IAM service definitions

TastefulElk · Apr 24, 2023 · 17f470c · 17f470c
1 parent 73d7bf9
commit 17f470c
Show file tree

Hide file tree

Showing 9 changed files with 927 additions and 10 deletions.
diff --git a/src/data/iam-services/amazon-codewhisperer.json b/src/data/iam-services/amazon-codewhisperer.json
@@ -5,18 +5,34 @@
   "actions": [
     {
       "name": "CreateProfile",
-      "documentationUrl": "https://docs.aws.amazon.com/codewhisperer/latest/dg/API_CreateProfile.html",
+      "documentationUrl": "https://docs.aws.amazon.com/codewhisperer/latest/userguide/security_iam_service-with-iam.html",
       "description": "Grants permission to invoke CreateProfile on CodeWhisperer",
       "accessLevel": "Write",
       "resourceTypes": [
         "profile*"
       ],
-      "conditionKeys": [],
+      "conditionKeys": [
+        "aws:TagKeys",
+        "aws:RequestTag/${TagKey}"
+      ],
+      "dependentActions": []
+    },
+    {
+      "name": "DeleteProfile",
+      "documentationUrl": "https://docs.aws.amazon.com/codewhisperer/latest/userguide/security_iam_service-with-iam.html",
+      "description": "Grants permission to invoke DeleteProfile on CodeWhisperer",
+      "accessLevel": "Write",
+      "resourceTypes": [
+        "profile*"
+      ],
+      "conditionKeys": [
+        "aws:ResourceTag/${TagKey}"
+      ],
       "dependentActions": []
     },
     {
       "name": "GenerateRecommendations",
-      "documentationUrl": "https://docs.aws.amazon.com/codewhisperer/latest/dg/API_GenerateRecommendations.html",
+      "documentationUrl": "https://docs.aws.amazon.com/codewhisperer/latest/userguide/security_iam_service-with-iam.html",
       "description": "Grants permission to invoke GenerateRecommendations on CodeWhisperer",
       "accessLevel": "Read",
       "resourceTypes": [],
@@ -25,22 +41,67 @@
     },
     {
       "name": "ListProfiles",
-      "documentationUrl": "https://docs.aws.amazon.com/codewhisperer/latest/dg/API_ListProfiles.html",
+      "documentationUrl": "https://docs.aws.amazon.com/codewhisperer/latest/userguide/security_iam_service-with-iam.html",
       "description": "Grants permission to invoke ListProfiles on CodeWhisperer",
       "accessLevel": "List",
       "resourceTypes": [],
       "conditionKeys": [],
       "dependentActions": []
     },
+    {
+      "name": "ListTagsForResource",
+      "documentationUrl": "https://docs.aws.amazon.com/codewhisperer/latest/userguide/security_iam_service-with-iam.html",
+      "description": "Grants permission to invoke ListTagsForResource on CodeWhisperer",
+      "accessLevel": "List",
+      "resourceTypes": [
+        "profile*"
+      ],
+      "conditionKeys": [
+        "aws:ResourceTag/${TagKey}"
+      ],
+      "dependentActions": []
+    },
+    {
+      "name": "TagResource",
+      "documentationUrl": "https://docs.aws.amazon.com/codewhisperer/latest/userguide/security_iam_service-with-iam.html",
+      "description": "Grants permission to invoke TagResource on CodeWhisperer",
+      "accessLevel": "Tagging",
+      "resourceTypes": [
+        "profile*"
+      ],
+      "conditionKeys": [
+        "aws:ResourceTag/${TagKey}",
+        "aws:TagKeys",
+        "aws:RequestTag/${TagKey}"
+      ],
+      "dependentActions": []
+    },
+    {
+      "name": "UntagResource",
+      "documentationUrl": "https://docs.aws.amazon.com/codewhisperer/latest/userguide/security_iam_service-with-iam.html",
+      "description": "Grants permission to invoke UntagResource on CodeWhisperer",
+      "accessLevel": "Tagging",
+      "resourceTypes": [
+        "profile*"
+      ],
+      "conditionKeys": [
+        "aws:ResourceTag/${TagKey}",
+        "aws:TagKeys",
+        "aws:RequestTag/${TagKey}"
+      ],
+      "dependentActions": []
+    },
     {
       "name": "UpdateProfile",
-      "documentationUrl": "https://docs.aws.amazon.com/codewhisperer/latest/dg/API_UpdateProfile.html",
+      "documentationUrl": "https://docs.aws.amazon.com/codewhisperer/latest/userguide/security_iam_service-with-iam.html",
       "description": "Grants permission to invoke UpdateProfile on CodeWhisperer",
       "accessLevel": "Write",
       "resourceTypes": [
         "profile*"
       ],
-      "conditionKeys": [],
+      "conditionKeys": [
+        "aws:ResourceTag/${TagKey}"
+      ],
       "dependentActions": []
     }
   ]

diff --git a/src/data/iam-services/amazon-connect.json b/src/data/iam-services/amazon-connect.json
@@ -2481,7 +2481,7 @@
       "description": "Grants permission to update a rule for an existing Amazon Connect instance",
       "accessLevel": "Write",
       "resourceTypes": [
-        "instance*"
+        "rule*"
       ],
       "conditionKeys": [
         "connect:InstanceId"

diff --git a/src/data/iam-services/amazon-ec2-instance-connect.json b/src/data/iam-services/amazon-ec2-instance-connect.json
@@ -6,7 +6,7 @@
     {
       "name": "SendSSHPublicKey",
       "documentationUrl": "https://docs.aws.amazon.com/ec2-instance-connect/latest/APIReference/API_SendSSHPublicKey.html",
-      "description": "Grants access to push an SSH public key to the specified EC2 instance to be used for standard SSH",
+      "description": "Grants permission to push an SSH public key to the specified EC2 instance to be used for standard SSH",
       "accessLevel": "Write",
       "resourceTypes": [
         "instance*"
@@ -19,7 +19,7 @@
     {
       "name": "SendSerialConsoleSSHPublicKey",
       "documentationUrl": "https://docs.aws.amazon.com/ec2-instance-connect/latest/APIReference/API_SendSerialConsoleSSHPublicKey.html",
-      "description": "Grants access to push an SSH public key to the specified EC2 instance to be used for serial console SSH",
+      "description": "Grants permission to push an SSH public key to the specified EC2 instance to be used for serial console SSH",
       "accessLevel": "Write",
       "resourceTypes": [
         "instance*"

diff --git a/src/data/iam-services/aws-elastic-disaster-recovery.json b/src/data/iam-services/aws-elastic-disaster-recovery.json
@@ -64,6 +64,18 @@
         "drs:GetReplicationConfiguration"
       ]
     },
+    {
+      "name": "CreateLaunchConfigurationTemplate",
+      "documentationUrl": "https://docs.aws.amazon.com/drs/latest/APIReference/API_CreateLaunchConfigurationTemplate.html",
+      "description": "Grants permission to create launch configuration template",
+      "accessLevel": "Write",
+      "resourceTypes": [],
+      "conditionKeys": [
+        "aws:RequestTag/${TagKey}",
+        "aws:TagKeys"
+      ],
+      "dependentActions": []
+    },
     {
       "name": "CreateRecoveryInstanceForDrs",
       "documentationUrl": "https://docs.aws.amazon.com/drs/latest/userguide/drs-apis.html",
@@ -121,6 +133,17 @@
       "conditionKeys": [],
       "dependentActions": []
     },
+    {
+      "name": "DeleteLaunchConfigurationTemplate",
+      "documentationUrl": "https://docs.aws.amazon.com/drs/latest/APIReference/API_DeleteLaunchConfigurationTemplate.html",
+      "description": "Grants permission to delete launch configuration template",
+      "accessLevel": "Write",
+      "resourceTypes": [
+        "LaunchConfigurationTemplateResource*"
+      ],
+      "conditionKeys": [],
+      "dependentActions": []
+    },
     {
       "name": "DeleteRecoveryInstance",
       "documentationUrl": "https://docs.aws.amazon.com/drs/latest/APIReference/API_DeleteRecoveryInstance.html",
@@ -174,6 +197,15 @@
       "conditionKeys": [],
       "dependentActions": []
     },
+    {
+      "name": "DescribeLaunchConfigurationTemplates",
+      "documentationUrl": "https://docs.aws.amazon.com/drs/latest/APIReference/API_DescribeLaunchConfigurationTemplates.html",
+      "description": "Grants permission to describe launch configuration template",
+      "accessLevel": "Read",
+      "resourceTypes": [],
+      "conditionKeys": [],
+      "dependentActions": []
+    },
     {
       "name": "DescribeRecoveryInstances",
       "documentationUrl": "https://docs.aws.amazon.com/drs/latest/APIReference/API_DescribeRecoveryInstances.html",
@@ -730,6 +762,7 @@
       "accessLevel": "Tagging",
       "resourceTypes": [
         "JobResource",
+        "LaunchConfigurationTemplateResource",
         "RecoveryInstanceResource",
         "ReplicationConfigurationTemplateResource",
         "SourceServerResource"
@@ -768,6 +801,7 @@
       "accessLevel": "Tagging",
       "resourceTypes": [
         "JobResource",
+        "LaunchConfigurationTemplateResource",
         "RecoveryInstanceResource",
         "ReplicationConfigurationTemplateResource",
         "SourceServerResource"
@@ -881,6 +915,17 @@
       "conditionKeys": [],
       "dependentActions": []
     },
+    {
+      "name": "UpdateLaunchConfigurationTemplate",
+      "documentationUrl": "https://docs.aws.amazon.com/drs/latest/APIReference/API_UpdateLaunchConfigurationTemplate.html",
+      "description": "Grants permission to update launch configuration",
+      "accessLevel": "Write",
+      "resourceTypes": [
+        "LaunchConfigurationTemplateResource*"
+      ],
+      "conditionKeys": [],
+      "dependentActions": []
+    },
     {
       "name": "UpdateReplicationCertificateForDrs",
       "documentationUrl": "https://docs.aws.amazon.com/drs/latest/userguide/drs-apis.html",

diff --git a/src/data/iam-services/aws-iot-roborunner.json b/src/data/iam-services/aws-iot-roborunner.json
@@ -140,7 +140,9 @@
       "documentationUrl": "https://docs.aws.amazon.com/iotroborunner/latest/api/API_ListDestinations.html",
       "description": "Grants permission to list destinations",
       "accessLevel": "Read",
-      "resourceTypes": [],
+      "resourceTypes": [
+        "SiteResource*"
+      ],
       "conditionKeys": [],
       "dependentActions": []
     },

diff --git a/src/data/iam-services/aws-management-console-mobile-app.json b/src/data/iam-services/aws-management-console-mobile-app.json
@@ -0,0 +1,27 @@
+{
+  "serviceName": "AWS Management Console Mobile App",
+  "servicePrefix": "consoleapp",
+  "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/./list_awsconsolemobileapp.html",
+  "actions": [
+    {
+      "name": "GetDeviceIdentity",
+      "documentationUrl": "https://docs.aws.amazon.com/consolemobileapp/latest/userguide/permissions-policies.html",
+      "description": "Grants permission to retrieve the device identity for a Console Mobile App device",
+      "accessLevel": "Read",
+      "resourceTypes": [
+        "DeviceIdentity*"
+      ],
+      "conditionKeys": [],
+      "dependentActions": []
+    },
+    {
+      "name": "ListDeviceIdentities",
+      "documentationUrl": "https://docs.aws.amazon.com/consolemobileapp/latest/userguide/permissions-policies.html",
+      "description": "Grants permission to retrieve a list of device identities",
+      "accessLevel": "List",
+      "resourceTypes": [],
+      "conditionKeys": [],
+      "dependentActions": []
+    }
+  ]
+}