Merge pull request #2145 from udondan/iam-updates

Author: udondan

CHANGELOG/v0.812.0.md

@@ -0,0 +1,13 @@
+**New actions:**
+
+- aidevops:UpdateApprovalAction
+- user-subscriptions:CreateClaimAddOn
+- user-subscriptions:DeleteAutoTopUpRule
+- user-subscriptions:GetAutoTopUpRule
+- user-subscriptions:GetEffectiveUsageLimit
+- user-subscriptions:GetUsageLimitHistory
+- user-subscriptions:ListClaimAddOns
+- user-subscriptions:ListEntitlements
+- user-subscriptions:ListUsageLimits
+- user-subscriptions:SetAutoTopUpRule
+- user-subscriptions:SetUsageLimit

README.md

@@ -16,7 +16,7 @@
 Support for:
 
 - 451 Services
-- 21296 Actions
+- 21307 Actions
 - 2252 Resource Types
 - 2374 Condition keys
 <!-- /stats -->

VERSION

@@ -1 +1 @@
-0.811.0
+0.812.0

docs/source/conf.py

@@ -24,7 +24,7 @@
 author = 'Daniel Schroeder'
 
 # The full version, including alpha/beta/rc tags
-release = '0.811.0'
+release = '0.812.0'
 
 # -- General configuration ---------------------------------------------------
 

docs/source/index.rst

@@ -31,7 +31,7 @@ AWS IAM policy statement generator with fluent interface.
 Support for:
 
 - 451 Services
-- 21296 Actions
+- 21307 Actions
 - 2252 Resource Types
 - 2374 Condition keys
 

lib/generated/policy-statements/devopsagentservice.ts

@@ -836,6 +836,17 @@ export class Aidevops extends PolicyStatement {
     return this.to('UpdateAgentSpace');
   }
 
+  /**
+   * Grants permission to update an approval action (approve or reject) for an agent tool invocation
+   *
+   * Access Level: Write
+   *
+   * https://docs.aws.amazon.com/devopsagent/latest/APIReference/API_UpdateApprovalAction.html
+   */
+  public toUpdateApprovalAction() {
+    return this.to('UpdateApprovalAction');
+  }
+
   /**
    * Grants permission to update an asset
    *
@@ -995,6 +1006,7 @@ export class Aidevops extends PolicyStatement {
       'RotateAccessToken',
       'SendMessage',
       'UpdateAgentSpace',
+      'UpdateApprovalAction',
       'UpdateAsset',
       'UpdateAssetFile',
       'UpdateAssociation',

lib/generated/policy-statements/usersubscriptions.ts

@@ -32,6 +32,28 @@ export class UserSubscriptions extends PolicyStatement {
     return this.to('CreateClaim');
   }
 
+  /**
+   * Grants permission to create a User subscription Claim add-on
+   *
+   * Access Level: Write
+   *
+   * https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_permissions.html
+   */
+  public toCreateClaimAddOn() {
+    return this.to('CreateClaimAddOn');
+  }
+
+  /**
+   * Grants permission to delete a User subscription auto-top-up rule
+   *
+   * Access Level: Write
+   *
+   * https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_permissions.html
+   */
+  public toDeleteAutoTopUpRule() {
+    return this.to('DeleteAutoTopUpRule');
+  }
+
   /**
    * Grants permission to delete a User subscription Claim
    *
@@ -43,6 +65,39 @@ export class UserSubscriptions extends PolicyStatement {
     return this.to('DeleteClaim');
   }
 
+  /**
+   * Grants permission to get a User subscription auto-top-up rule
+   *
+   * Access Level: Read
+   *
+   * https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_permissions.html
+   */
+  public toGetAutoTopUpRule() {
+    return this.to('GetAutoTopUpRule');
+  }
+
+  /**
+   * Grants permission to get a User subscription effective usage limit
+   *
+   * Access Level: Read
+   *
+   * https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_permissions.html
+   */
+  public toGetEffectiveUsageLimit() {
+    return this.to('GetEffectiveUsageLimit');
+  }
+
+  /**
+   * Grants permission to get User subscription usage limit history
+   *
+   * Access Level: Read
+   *
+   * https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_permissions.html
+   */
+  public toGetUsageLimitHistory() {
+    return this.to('GetUsageLimitHistory');
+  }
+
   /**
    * Grants permission to list all User subscription Claims for Application
    *
@@ -54,6 +109,17 @@ export class UserSubscriptions extends PolicyStatement {
     return this.to('ListApplicationClaims');
   }
 
+  /**
+   * Grants permission to list all User subscription Claim add-ons
+   *
+   * Access Level: List
+   *
+   * https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_permissions.html
+   */
+  public toListClaimAddOns() {
+    return this.to('ListClaimAddOns');
+  }
+
   /**
    * Grants permission to list all User subscription Claims
    *
@@ -65,6 +131,28 @@ export class UserSubscriptions extends PolicyStatement {
     return this.to('ListClaims');
   }
 
+  /**
+   * Grants permission to list all User subscription entitlements
+   *
+   * Access Level: List
+   *
+   * https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_permissions.html
+   */
+  public toListEntitlements() {
+    return this.to('ListEntitlements');
+  }
+
+  /**
+   * Grants permission to list all User subscription usage limits
+   *
+   * Access Level: List
+   *
+   * https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_permissions.html
+   */
+  public toListUsageLimits() {
+    return this.to('ListUsageLimits');
+  }
+
   /**
    * Grants permission to list all User subscriptions
    *
@@ -76,6 +164,17 @@ export class UserSubscriptions extends PolicyStatement {
     return this.to('ListUserSubscriptions');
   }
 
+  /**
+   * Grants permission to set a User subscription auto-top-up rule
+   *
+   * Access Level: Write
+   *
+   * https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_permissions.html
+   */
+  public toSetAutoTopUpRule() {
+    return this.to('SetAutoTopUpRule');
+  }
+
   /**
    * Grants permission to set a User subscription overage configuration
    *
@@ -87,6 +186,17 @@ export class UserSubscriptions extends PolicyStatement {
     return this.to('SetOverageConfig');
   }
 
+  /**
+   * Grants permission to set a User subscription usage limit
+   *
+   * Access Level: Write
+   *
+   * https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/security_iam_permissions.html
+   */
+  public toSetUsageLimit() {
+    return this.to('SetUsageLimit');
+  }
+
   /**
    * Grants permission to update a User subscription Claim
    *
@@ -101,13 +211,25 @@ export class UserSubscriptions extends PolicyStatement {
   protected accessLevelList: AccessLevelList = {
     Write: [
       'CreateClaim',
+      'CreateClaimAddOn',
+      'DeleteAutoTopUpRule',
       'DeleteClaim',
+      'SetAutoTopUpRule',
       'SetOverageConfig',
+      'SetUsageLimit',
       'UpdateClaim'
     ],
+    Read: [
+      'GetAutoTopUpRule',
+      'GetEffectiveUsageLimit',
+      'GetUsageLimitHistory'
+    ],
     List: [
       'ListApplicationClaims',
+      'ListClaimAddOns',
       'ListClaims',
+      'ListEntitlements',
+      'ListUsageLimits',
       'ListUserSubscriptions'
     ]
   };

stats/actions/aidevops

@@ -68,6 +68,7 @@ aidevops:SendMessage;Write
 aidevops:TagResource;Tagging
 aidevops:UntagResource;Tagging
 aidevops:UpdateAgentSpace;Write
+aidevops:UpdateApprovalAction;Write
 aidevops:UpdateAsset;Write
 aidevops:UpdateAssetFile;Write
 aidevops:UpdateAssociation;Write

stats/actions/user-subscriptions

@@ -1,7 +1,17 @@
 user-subscriptions:CreateClaim;Write
+user-subscriptions:CreateClaimAddOn;Write
+user-subscriptions:DeleteAutoTopUpRule;Write
 user-subscriptions:DeleteClaim;Write
+user-subscriptions:GetAutoTopUpRule;Read
+user-subscriptions:GetEffectiveUsageLimit;Read
+user-subscriptions:GetUsageLimitHistory;Read
 user-subscriptions:ListApplicationClaims;List
+user-subscriptions:ListClaimAddOns;List
 user-subscriptions:ListClaims;List
+user-subscriptions:ListEntitlements;List
+user-subscriptions:ListUsageLimits;List
 user-subscriptions:ListUserSubscriptions;List
+user-subscriptions:SetAutoTopUpRule;Write
 user-subscriptions:SetOverageConfig;Write
+user-subscriptions:SetUsageLimit;Write
 user-subscriptions:UpdateClaim;Write