Updating PolicyUniverse SDFs (#97)

Co-authored-by: scriptsrc <scriptsrc@users.noreply.github.com>
Netflix-Skunkworks · Feb 16, 2021 · 37eccbc · 37eccbc
1 parent f5169f6
commit 37eccbc
Show file tree

Hide file tree

Showing 2 changed files with 72 additions and 9 deletions.
diff --git a/policyuniverse/data.json b/policyuniverse/data.json
@@ -83563,7 +83563,10 @@
           "ReadWrite"
         ],
         "calculated_action_group": "Write",
-        "condition_keys": [],
+        "condition_keys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "description": "Grants permission to create a new anomaly detection model",
         "docs": {
           "api_doc": "",
@@ -83602,7 +83605,9 @@
           "ReadWrite"
         ],
         "calculated_action_group": "Write",
-        "condition_keys": [],
+        "condition_keys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "description": "Grants permission to delete a model and all associated assets",
         "docs": {
           "api_doc": "",
@@ -83643,7 +83648,9 @@
           "ReadWrite"
         ],
         "calculated_action_group": "Read",
-        "condition_keys": [],
+        "condition_keys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "description": "Grants permission to show detailed information about a model",
         "docs": {
           "api_doc": "",
@@ -83685,7 +83692,9 @@
           "ReadWrite"
         ],
         "calculated_action_group": "Read",
-        "condition_keys": [],
+        "condition_keys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "description": "Grants permission to invoke detection of anomalies",
         "docs": {
           "api_doc": "",
@@ -83696,10 +83705,9 @@
       "ListDatasetEntries": {
         "aws_action_groups": [
           "ReadOnly",
-          "ListOnly",
           "ReadWrite"
         ],
-        "calculated_action_group": "List",
+        "calculated_action_group": "Read",
         "condition_keys": [],
         "description": "Grants permission to list the contents of dataset manifest",
         "docs": {
@@ -83738,6 +83746,22 @@
           "doc_page_rel": "https://docs.aws.amazon.com/lookout-for-vision/latest/APIReference/API_ListProjects.html"
         }
       },
+      "ListTagsForResource": {
+        "aws_action_groups": [
+          "ReadOnly",
+          "ReadWrite"
+        ],
+        "calculated_action_group": "Read",
+        "condition_keys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "description": "Grant permission to list tags for a resource",
+        "docs": {
+          "api_doc": "",
+          "doc_page": "",
+          "doc_page_rel": "https://docs.aws.amazon.com/lookout-for-vision/latest/APIReference/API_ListTagsForResource.html"
+        }
+      },
       "ListTrialDetections": {
         "aws_action_groups": [
           "ReadOnly",
@@ -83758,7 +83782,9 @@
           "ReadWrite"
         ],
         "calculated_action_group": "Write",
-        "condition_keys": [],
+        "condition_keys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "description": "Grants permission to start anomaly detection model",
         "docs": {
           "api_doc": "",
@@ -83784,14 +83810,51 @@
           "ReadWrite"
         ],
         "calculated_action_group": "Write",
-        "condition_keys": [],
+        "condition_keys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "description": "Grants permission to stop anomaly detection model",
         "docs": {
           "api_doc": "",
           "doc_page": "",
           "doc_page_rel": "https://docs.aws.amazon.com/lookout-for-vision/latest/APIReference/API_StopModel.html"
         }
       },
+      "TagResource": {
+        "aws_action_groups": [
+          "ReadWrite",
+          "Tagging"
+        ],
+        "calculated_action_group": "Tagging",
+        "condition_keys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "description": "Grant permission to tag a resource with given key value pairs",
+        "docs": {
+          "api_doc": "",
+          "doc_page": "",
+          "doc_page_rel": "https://docs.aws.amazon.com/lookout-for-vision/latest/APIReference/API_TagResource.html"
+        }
+      },
+      "UntagResource": {
+        "aws_action_groups": [
+          "ReadWrite",
+          "Tagging"
+        ],
+        "calculated_action_group": "Tagging",
+        "condition_keys": [
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "description": "Grant permission to remove the tag with the given key from a resource",
+        "docs": {
+          "api_doc": "",
+          "doc_page": "",
+          "doc_page_rel": "https://docs.aws.amazon.com/lookout-for-vision/latest/APIReference/API_UntagResource.html"
+        }
+      },
       "UpdateDatasetEntries": {
         "aws_action_groups": [
           "ReadWrite"

diff --git a/setup.py b/setup.py
@@ -11,7 +11,7 @@
 
 setup(
     name="policyuniverse",
-    version="1.3.3.20210205",
+    version="1.3.3.20210209",
     description="Parse and Process AWS IAM Policies, Statements, ARNs, and wildcards.",
     long_description=open(os.path.join(ROOT, "README.md")).read(),
     long_description_content_type="text/markdown",