Merge pull request #1855 from udondan/iam-updates

Author: udondan

CHANGELOG/v0.745.0.md

@@ -0,0 +1,8 @@
+**New actions:**
+
+- ec2:InjectVolumeIOLatency
+
+**New condition keys:**
+
+- dynamodb:FisActionId
+- dynamodb:FisTargetArns

README.md

@@ -16,9 +16,9 @@
 Support for:
 
 - 441 Services
-- 20269 Actions
+- 20270 Actions
 - 2144 Resource Types
-- 2267 Condition keys
+- 2269 Condition keys
 <!-- /stats -->
 
 ![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**

VERSION

@@ -1 +1 @@
-0.744.0
+0.745.0

docs/source/conf.py

@@ -24,7 +24,7 @@
 author = 'Daniel Schroeder'
 
 # The full version, including alpha/beta/rc tags
-release = '0.744.0'
+release = '0.745.0'
 
 # -- General configuration ---------------------------------------------------
 

docs/source/index.rst

@@ -31,9 +31,9 @@ AWS IAM policy statement generator with fluent interface.
 Support for:
 
 - 441 Services
-- 20269 Actions
+- 20270 Actions
 - 2144 Resource Types
-- 2267 Condition keys
+- 2269 Condition keys
 
 ..
    /stats

lib/generated/policy-statements/dynamodb.ts

@@ -498,6 +498,10 @@ export class Dynamodb extends PolicyStatement {
    *
    * Access Level: Write
    *
+   * Possible conditions:
+   * - .ifFisActionId()
+   * - .ifFisTargetArns()
+   *
    * https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/V2gt_IAM.html
    */
   public toInjectError() {
@@ -1298,6 +1302,32 @@ export class Dynamodb extends PolicyStatement {
     return this.if(`FirstPartitionKeyValues`, value, operator ?? 'StringLike');
   }
 
+  /**
+   * Filters access by the ID of an AWS FIS action
+   *
+   * Applies to actions:
+   * - .toInjectError()
+   *
+   * @param value The value(s) to check
+   * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+   */
+  public ifFisActionId(value: string | string[], operator?: Operator | string) {
+    return this.if(`FisActionId`, value, operator ?? 'StringLike');
+  }
+
+  /**
+   * Filters access by the ARN of an AWS FIS target
+   *
+   * Applies to actions:
+   * - .toInjectError()
+   *
+   * @param value The value(s) to check
+   * @param operator Works with [arn operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_ARN). **Default:** `ArnLike`
+   */
+  public ifFisTargetArns(value: string | string[], operator?: Operator | string) {
+    return this.if(`FisTargetArns`, value, operator ?? 'ArnLike');
+  }
+
   /**
    * Filters access by the forth partition key of the table
    *

lib/generated/policy-statements/ec2.ts

@@ -8888,6 +8888,20 @@ export class Ec2 extends PolicyStatement {
     return this.to('InjectApiError');
   }
 
+  /**
+   * Grants permission to temporarily inject latency to I/O operations for a target Amazon EBS volume
+   *
+   * Access Level: Write
+   *
+   * Possible conditions:
+   * - .ifRegion()
+   *
+   * https://docs.aws.amazon.com/fis/latest/userguide/fis-actions-reference.html#ebs-actions-reference
+   */
+  public toInjectVolumeIOLatency() {
+    return this.to('InjectVolumeIOLatency');
+  }
+
   /**
    * Grants permission to list Amazon Machine Images (AMIs) that are currently in the Recycle Bin
    *
@@ -11538,6 +11552,7 @@ export class Ec2 extends PolicyStatement {
       'ImportSnapshot',
       'ImportVolume',
       'InjectApiError',
+      'InjectVolumeIOLatency',
       'LockSnapshot',
       'ModifyAddressAttribute',
       'ModifyAvailabilityZoneGroup',
@@ -15048,6 +15063,7 @@ export class Ec2 extends PolicyStatement {
    * - .toImportImage()
    * - .toImportInstance()
    * - .toImportVolume()
+   * - .toInjectVolumeIOLatency()
    * - .toLockSnapshot()
    * - .toModifyAddressAttribute()
    * - .toModifyCapacityReservation()
@@ -16049,6 +16065,7 @@ export class Ec2 extends PolicyStatement {
    * - .toGetReservedInstancesExchangeQuote()
    * - .toImportInstance()
    * - .toImportVolume()
+   * - .toInjectVolumeIOLatency()
    * - .toModifyFleet()
    * - .toModifyInstanceAttribute()
    * - .toModifyInstanceCapacityReservationAttributes()
@@ -16174,6 +16191,7 @@ export class Ec2 extends PolicyStatement {
    * - .toGetLaunchTemplateData()
    * - .toGetPasswordData()
    * - .toImportVolume()
+   * - .toInjectVolumeIOLatency()
    * - .toModifyFleet()
    * - .toModifyInstanceAttribute()
    * - .toModifyInstanceCapacityReservationAttributes()
@@ -16739,6 +16757,7 @@ export class Ec2 extends PolicyStatement {
    * - .toEnableVolumeIO()
    * - .toImportInstance()
    * - .toImportVolume()
+   * - .toInjectVolumeIOLatency()
    * - .toLockSnapshot()
    * - .toModifyInstanceAttribute()
    * - .toModifySnapshotTier()
@@ -18416,6 +18435,7 @@ export class Ec2 extends PolicyStatement {
    * - .toEnableVolumeIO()
    * - .toImportInstance()
    * - .toImportVolume()
+   * - .toInjectVolumeIOLatency()
    * - .toModifyInstanceAttribute()
    * - .toModifyVolume()
    * - .toModifyVolumeAttribute()
@@ -19558,6 +19578,7 @@ export class Ec2 extends PolicyStatement {
    * - .toImportSnapshot()
    * - .toImportVolume()
    * - .toInjectApiError()
+   * - .toInjectVolumeIOLatency()
    * - .toListImagesInRecycleBin()
    * - .toListSnapshotsInRecycleBin()
    * - .toListVolumesInRecycleBin()
@@ -20323,6 +20344,7 @@ export class Ec2 extends PolicyStatement {
    * - .toImportImage()
    * - .toImportInstance()
    * - .toImportVolume()
+   * - .toInjectVolumeIOLatency()
    * - .toLockSnapshot()
    * - .toModifyAddressAttribute()
    * - .toModifyCapacityReservationFleet()
@@ -21304,6 +21326,7 @@ export class Ec2 extends PolicyStatement {
    * - .toEnableVolumeIO()
    * - .toImportInstance()
    * - .toImportVolume()
+   * - .toInjectVolumeIOLatency()
    * - .toModifyInstanceAttribute()
    * - .toModifyVolume()
    * - .toModifyVolumeAttribute()
@@ -21372,6 +21395,7 @@ export class Ec2 extends PolicyStatement {
    * - .toEnableVolumeIO()
    * - .toImportInstance()
    * - .toImportVolume()
+   * - .toInjectVolumeIOLatency()
    * - .toModifyInstanceAttribute()
    * - .toModifyVolume()
    * - .toModifyVolumeAttribute()
@@ -21417,6 +21441,7 @@ export class Ec2 extends PolicyStatement {
    * - .toImportInstance()
    * - .toImportSnapshot()
    * - .toImportVolume()
+   * - .toInjectVolumeIOLatency()
    * - .toLockSnapshot()
    * - .toModifyInstanceAttribute()
    * - .toModifySnapshotAttribute()
@@ -21464,6 +21489,7 @@ export class Ec2 extends PolicyStatement {
    * - .toEnableVolumeIO()
    * - .toImportInstance()
    * - .toImportVolume()
+   * - .toInjectVolumeIOLatency()
    * - .toModifyInstanceAttribute()
    * - .toModifyVolume()
    * - .toModifyVolumeAttribute()
@@ -21500,6 +21526,7 @@ export class Ec2 extends PolicyStatement {
    * - .toEnableVolumeIO()
    * - .toImportInstance()
    * - .toImportVolume()
+   * - .toInjectVolumeIOLatency()
    * - .toModifyInstanceAttribute()
    * - .toModifyVolume()
    * - .toModifyVolumeAttribute()

stats/actions/ec2

@@ -605,6 +605,7 @@ ec2:ImportKeyPair;Write
 ec2:ImportSnapshot;Write
 ec2:ImportVolume;Write
 ec2:InjectApiError;Write
+ec2:InjectVolumeIOLatency;Write
 ec2:ListImagesInRecycleBin;List
 ec2:ListSnapshotsInRecycleBin;List
 ec2:ListVolumesInRecycleBin;List

stats/conditions/dynamodb

@@ -1,6 +1,8 @@
 dynamodb:Attributes
 dynamodb:EnclosingOperation
 dynamodb:FirstPartitionKeyValues
+dynamodb:FisActionId
+dynamodb:FisTargetArns
 dynamodb:FourthPartitionKeyValues
 dynamodb:FullTableScan
 dynamodb:LeadingKeys