Skip to content

Commit 47844a2

Browse files
authored
Merge pull request #1607 from udondan/iam-updates
2 parents 5ee11d1 + b131c39 commit 47844a2

15 files changed

Lines changed: 924 additions & 101 deletions

File tree

CHANGELOG/v0.721.0.md

Lines changed: 59 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,59 @@
1+
**New actions:**
2+
3+
- aiops:CreateReport
4+
- aiops:GenerateReport
5+
- aiops:GetFact
6+
- aiops:GetFactVersions
7+
- aiops:GetReport
8+
- aiops:ListFacts
9+
- aiops:ListReports
10+
- aiops:PutFact
11+
- aiops:UpdateReport
12+
- bedrock-agentcore:BatchCreateMemoryRecords
13+
- bedrock-agentcore:BatchDeleteMemoryRecords
14+
- bedrock-agentcore:BatchUpdateMemoryRecords
15+
- bedrock-agentcore:GetAgentCard
16+
- bedrock-agentcore:InvokeAgentRuntimeForUser
17+
- bedrock-agentcore:InvokeGateway
18+
- bedrock-agentcore:StopRuntimeSession
19+
- quicksight:CreateActionConnector
20+
- quicksight:CreateExtensionAccess
21+
- quicksight:DeleteActionConnector
22+
- quicksight:DeleteExtensionAccess
23+
- quicksight:DescribeActionConnector
24+
- quicksight:DescribeActionConnectorPermissions
25+
- quicksight:DescribeAgent
26+
- quicksight:DescribeAgentPermissions
27+
- quicksight:DescribeChatConfiguration
28+
- quicksight:DescribeExtensionAccess
29+
- quicksight:DescribeQuickIndexCapacity
30+
- quicksight:GetCustomPermissionsSummary
31+
- quicksight:GetFlowMetadata
32+
- quicksight:GetFlowPermissions
33+
- quicksight:ListActionConnectors
34+
- quicksight:ListAgents
35+
- quicksight:ListExtensionAccesses
36+
- quicksight:ListFlows
37+
- quicksight:QuickSuiteUsageMetrics
38+
- quicksight:SearchActionConnectors
39+
- quicksight:SearchAgents
40+
- quicksight:SearchFlows
41+
- quicksight:UnpublishFlow
42+
- quicksight:UpdateActionConnector
43+
- quicksight:UpdateActionConnectorPermissions
44+
- quicksight:UpdateAgentPermissions
45+
- quicksight:UpdateChatConfiguration
46+
- quicksight:UpdateExtensionAccess
47+
- quicksight:UpdateFlowPermissions
48+
- quicksight:UpdateQuickIndexCapacity
49+
50+
**New resource types:**
51+
52+
- quicksight:actionconnector
53+
- quicksight:agent
54+
- quicksight:extensionaccess
55+
- quicksight:flow
56+
57+
**New condition keys:**
58+
59+
- bedrock-agentcore:GatewayAuthorizerType

README.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,9 +17,9 @@
1717
Support for:
1818

1919
- 428 Services
20-
- 19206 Actions
21-
- 2053 Resource Types
22-
- 2147 Condition keys
20+
- 19252 Actions
21+
- 2057 Resource Types
22+
- 2148 Condition keys
2323
<!-- /stats -->
2424

2525
![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**

VERSION

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
0.720.0
1+
0.721.0

docs/source/conf.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@
2424
author = 'Daniel Schroeder'
2525

2626
# The full version, including alpha/beta/rc tags
27-
release = '0.720.0'
27+
release = '0.721.0'
2828

2929
# -- General configuration ---------------------------------------------------
3030

docs/source/index.rst

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -31,9 +31,9 @@ AWS IAM policy statement generator with fluent interface.
3131
Support for:
3232

3333
- 428 Services
34-
- 19206 Actions
35-
- 2053 Resource Types
36-
- 2147 Condition keys
34+
- 19252 Actions
35+
- 2057 Resource Types
36+
- 2148 Condition keys
3737

3838
..
3939
/stats

lib/generated/policy-statements/aioperations.ts

Lines changed: 141 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -105,6 +105,22 @@ export class Aiops extends PolicyStatement {
105105
return this.to('CreateInvestigationResource');
106106
}
107107

108+
/**
109+
* Grants permission to create a new report in the specified investigation
110+
*
111+
* Access Level: Write
112+
*
113+
* Dependent actions:
114+
* - kms:Decrypt
115+
* - kms:GenerateDataKey
116+
* - sts:SetContext
117+
*
118+
* https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_CreateReport.html
119+
*/
120+
public toCreateReport() {
121+
return this.to('CreateReport');
122+
}
123+
108124
/**
109125
* Grants permission to delete an investigation in the specified investigation group
110126
*
@@ -144,6 +160,22 @@ export class Aiops extends PolicyStatement {
144160
return this.to('DeleteInvestigationGroupPolicy');
145161
}
146162

163+
/**
164+
* Grants permission to generate a report in the specified investigation report
165+
*
166+
* Access Level: Write
167+
*
168+
* Dependent actions:
169+
* - kms:Decrypt
170+
* - kms:GenerateDataKey
171+
* - sts:SetContext
172+
*
173+
* https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_GenerateReport.html
174+
*/
175+
public toGenerateReport() {
176+
return this.to('GenerateReport');
177+
}
178+
147179
/**
148180
* Grants permission to run and retrieve ephemeral investigation results
149181
*
@@ -155,6 +187,34 @@ export class Aiops extends PolicyStatement {
155187
return this.to('GetEphemeralInvestigationResults');
156188
}
157189

190+
/**
191+
* Grants permission to retrieve a fact in the specified investigation report
192+
*
193+
* Access Level: Read
194+
*
195+
* Dependent actions:
196+
* - kms:Decrypt
197+
*
198+
* https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_GetFact.html
199+
*/
200+
public toGetFact() {
201+
return this.to('GetFact');
202+
}
203+
204+
/**
205+
* Grants permission to retrieve all versions of a fact token in the specified investigation report
206+
*
207+
* Access Level: Read
208+
*
209+
* Dependent actions:
210+
* - kms:Decrypt
211+
*
212+
* https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_GetFactVersions.html
213+
*/
214+
public toGetFactVersions() {
215+
return this.to('GetFactVersions');
216+
}
217+
158218
/**
159219
* Grants permission to retrieve an investigation in the specified investigation group
160220
*
@@ -216,6 +276,34 @@ export class Aiops extends PolicyStatement {
216276
return this.to('GetInvestigationResource');
217277
}
218278

279+
/**
280+
* Grants permission to retrieve a report in the specified investigation
281+
*
282+
* Access Level: Read
283+
*
284+
* Dependent actions:
285+
* - kms:Decrypt
286+
*
287+
* https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_GetReport.html
288+
*/
289+
public toGetReport() {
290+
return this.to('GetReport');
291+
}
292+
293+
/**
294+
* Grants permission to list all facts in the specified investigation report
295+
*
296+
* Access Level: List
297+
*
298+
* Dependent actions:
299+
* - kms:Decrypt
300+
*
301+
* https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_ListFacts.html
302+
*/
303+
public toListFacts() {
304+
return this.to('ListFacts');
305+
}
306+
219307
/**
220308
* Grants permission to list all investigation events in the specified investigation group
221309
*
@@ -249,6 +337,17 @@ export class Aiops extends PolicyStatement {
249337
return this.to('ListInvestigations');
250338
}
251339

340+
/**
341+
* Grants permission to list all reports in the specified investigation
342+
*
343+
* Access Level: List
344+
*
345+
* https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_ListReports.html
346+
*/
347+
public toListReports() {
348+
return this.to('ListReports');
349+
}
350+
252351
/**
253352
* Grants permission to list the tags for the specified resource
254353
*
@@ -260,6 +359,22 @@ export class Aiops extends PolicyStatement {
260359
return this.to('ListTagsForResource');
261360
}
262361

362+
/**
363+
* Grants permission to create or update a new fact in the specified investigation report
364+
*
365+
* Access Level: Write
366+
*
367+
* Dependent actions:
368+
* - kms:Decrypt
369+
* - kms:GenerateDataKey
370+
* - sts:SetContext
371+
*
372+
* https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_PutFact.html
373+
*/
374+
public toPutFact() {
375+
return this.to('PutFact');
376+
}
377+
263378
/**
264379
* Grants permission to create/update the investigation group policy attached to an investigation group
265380
*
@@ -357,6 +472,22 @@ export class Aiops extends PolicyStatement {
357472
return this.to('UpdateInvestigationGroup');
358473
}
359474

475+
/**
476+
* Grants permission to update a report in the specified investigation
477+
*
478+
* Access Level: Write
479+
*
480+
* Dependent actions:
481+
* - kms:Decrypt
482+
* - kms:GenerateDataKey
483+
* - sts:SetContext
484+
*
485+
* https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_UpdateReport.html
486+
*/
487+
public toUpdateReport() {
488+
return this.to('UpdateReport');
489+
}
490+
360491
/**
361492
* Grants permission to validate the specified investigation group
362493
*
@@ -374,27 +505,36 @@ export class Aiops extends PolicyStatement {
374505
'CreateInvestigationEvent',
375506
'CreateInvestigationGroup',
376507
'CreateInvestigationResource',
508+
'CreateReport',
377509
'DeleteInvestigation',
378510
'DeleteInvestigationGroup',
379511
'DeleteInvestigationGroupPolicy',
512+
'GenerateReport',
513+
'PutFact',
380514
'PutInvestigationGroupPolicy',
381515
'UpdateInvestigation',
382516
'UpdateInvestigationEvent',
383-
'UpdateInvestigationGroup'
517+
'UpdateInvestigationGroup',
518+
'UpdateReport'
384519
],
385520
List: [
386521
'GetEphemeralInvestigationResults',
522+
'ListFacts',
387523
'ListInvestigationEvents',
388524
'ListInvestigationGroups',
389525
'ListInvestigations',
526+
'ListReports',
390527
'ListTagsForResource'
391528
],
392529
Read: [
530+
'GetFact',
531+
'GetFactVersions',
393532
'GetInvestigation',
394533
'GetInvestigationEvent',
395534
'GetInvestigationGroup',
396535
'GetInvestigationGroupPolicy',
397536
'GetInvestigationResource',
537+
'GetReport',
398538
'ValidateInvestigationGroup'
399539
],
400540
Tagging: [

0 commit comments

Comments
 (0)