Merge pull request #1873 from udondan/iam-updates

Author: udondan

CHANGELOG/v0.748.0.md

@@ -0,0 +1,5 @@
+**New actions:**
+
+- kafka:CreateTopic
+- kafka:DeleteTopic
+- kafka:UpdateTopic

README.md

@@ -16,7 +16,7 @@
 Support for:
 
 - 441 Services
-- 20277 Actions
+- 20280 Actions
 - 2146 Resource Types
 - 2270 Condition keys
 <!-- /stats -->

VERSION

@@ -1 +1 @@
-0.747.0
+0.748.0

docs/source/conf.py

@@ -24,7 +24,7 @@
 author = 'Daniel Schroeder'
 
 # The full version, including alpha/beta/rc tags
-release = '0.747.0'
+release = '0.748.0'
 
 # -- General configuration ---------------------------------------------------
 

docs/source/index.rst

@@ -31,7 +31,7 @@ AWS IAM policy statement generator with fluent interface.
 Support for:
 
 - 441 Services
-- 20277 Actions
+- 20280 Actions
 - 2146 Resource Types
 - 2270 Condition keys
 

lib/generated/policy-statements/managedstreamingforapachekafka.ts

@@ -139,6 +139,21 @@ export class Kafka extends PolicyStatement {
     return this.to('CreateReplicator');
   }
 
+  /**
+   * Grants permission to create a Kafka topic in an MSK cluster
+   *
+   * Access Level: Write
+   *
+   * Dependent actions:
+   * - kafka-cluster:Connect
+   * - kafka-cluster:CreateTopic
+   *
+   * https://docs.aws.amazon.com/msk/1.0/apireference/clusters-clusterarn-topics.html
+   */
+  public toCreateTopic() {
+    return this.to('CreateTopic');
+  }
+
   /**
    * Grants permission to create a MSK VPC connection
    *
@@ -215,6 +230,22 @@ export class Kafka extends PolicyStatement {
     return this.to('DeleteReplicator');
   }
 
+  /**
+   * Grants permission to delete a Kafka topic from an MSK cluster
+   *
+   * Access Level: Write
+   *
+   * Dependent actions:
+   * - kafka-cluster:Connect
+   * - kafka-cluster:DeleteTopic
+   * - kafka-cluster:DescribeTopic
+   *
+   * https://docs.aws.amazon.com/msk/1.0/apireference/clusters-clusterarn-topics-topicname.html
+   */
+  public toDeleteTopic() {
+    return this.to('DeleteTopic');
+  }
+
   /**
    * Grants permission to delete a MSK VPC connection
    *
@@ -745,6 +776,23 @@ export class Kafka extends PolicyStatement {
     return this.to('UpdateStorage');
   }
 
+  /**
+   * Grants permission to update the configuration of a Kafka topic in an MSK cluster
+   *
+   * Access Level: Write
+   *
+   * Dependent actions:
+   * - kafka-cluster:AlterTopic
+   * - kafka-cluster:AlterTopicDynamicConfiguration
+   * - kafka-cluster:Connect
+   * - kafka-cluster:DescribeTopic
+   *
+   * https://docs.aws.amazon.com/msk/1.0/apireference/clusters-clusterarn-topics-topicname.html
+   */
+  public toUpdateTopic() {
+    return this.to('UpdateTopic');
+  }
+
   protected accessLevelList: AccessLevelList = {
     Write: [
       'BatchAssociateScramSecret',
@@ -753,11 +801,13 @@ export class Kafka extends PolicyStatement {
       'CreateClusterV2',
       'CreateConfiguration',
       'CreateReplicator',
+      'CreateTopic',
       'CreateVpcConnection',
       'DeleteCluster',
       'DeleteClusterPolicy',
       'DeleteConfiguration',
       'DeleteReplicator',
+      'DeleteTopic',
       'DeleteVpcConnection',
       'PutClusterPolicy',
       'RebootBroker',
@@ -773,7 +823,8 @@ export class Kafka extends PolicyStatement {
       'UpdateRebalancing',
       'UpdateReplicationInfo',
       'UpdateSecurity',
-      'UpdateStorage'
+      'UpdateStorage',
+      'UpdateTopic'
     ],
     Read: [
       'DescribeCluster',

stats/actions/kafka

@@ -4,11 +4,13 @@ kafka:CreateCluster;Write
 kafka:CreateClusterV2;Write
 kafka:CreateConfiguration;Write
 kafka:CreateReplicator;Write
+kafka:CreateTopic;Write
 kafka:CreateVpcConnection;Write
 kafka:DeleteCluster;Write
 kafka:DeleteClusterPolicy;Write
 kafka:DeleteConfiguration;Write
 kafka:DeleteReplicator;Write
+kafka:DeleteTopic;Write
 kafka:DeleteVpcConnection;Write
 kafka:DescribeCluster;Read
 kafka:DescribeClusterOperation;Read
@@ -54,3 +56,4 @@ kafka:UpdateRebalancing;Write
 kafka:UpdateReplicationInfo;Write
 kafka:UpdateSecurity;Write
 kafka:UpdateStorage;Write
+kafka:UpdateTopic;Write