chore: update documentation

Author: some-ci

iam/aws/FixCollect.json

@@ -14,6 +14,7 @@
         "athena:ListTagsForResource",
         "athena:ListWorkGroups",
         "autoscaling:DescribeAutoScalingGroups",
+        "backup:GetBackupVaultAccessPolicy",
         "backup:ListBackupJobs",
         "backup:ListBackupPlans",
         "backup:ListBackupVaults",
@@ -26,6 +27,27 @@
         "backup:ListRestoreJobs",
         "backup:ListRestoreTestingPlans",
         "backup:ListTags",
+        "bedrock-agent:GetAgent",
+        "bedrock-agent:GetFlow",
+        "bedrock-agent:GetFlowVersion",
+        "bedrock-agent:GetKnowledgeBase",
+        "bedrock-agent:GetPrompt",
+        "bedrock-agent:ListAgents",
+        "bedrock-agent:ListFlows",
+        "bedrock-agent:ListKnowledgeBases",
+        "bedrock-agent:ListPrompts",
+        "bedrock-agent:ListTagsForResource",
+        "bedrock:GetCustomModel",
+        "bedrock:GetEvaluationJob",
+        "bedrock:GetGuardrail",
+        "bedrock:GetModelCustomizationJob",
+        "bedrock:ListCustomModels",
+        "bedrock:ListEvaluationJobs",
+        "bedrock:ListFoundationModels",
+        "bedrock:ListGuardrails",
+        "bedrock:ListModelCustomizationJobs",
+        "bedrock:ListProvisionedModelThroughputs",
+        "bedrock:ListTagsForResource",
         "cloudformation:DescribeStacks",
         "cloudformation:ListStackInstances",
         "cloudformation:ListStackResources",
@@ -51,6 +73,7 @@
         "cloudtrail:ListTags",
         "cloudtrail:ListTrails",
         "cloudwatch:DescribeAlarms",
+        "cloudwatch:DescribeResourcePolicies",
         "cloudwatch:GetMetricData",
         "cognito-idp:ListGroups",
         "cognito-idp:ListTagsForResource",
@@ -61,6 +84,7 @@
         "dynamodb:DescribeContinuousBackups",
         "dynamodb:DescribeGlobalTable",
         "dynamodb:DescribeTable",
+        "dynamodb:GetResourcePolicy",
         "dynamodb:ListGlobalTables",
         "dynamodb:ListTables",
         "dynamodb:ListTagsOfResource",
@@ -89,6 +113,7 @@
         "ecr-public:DescribeRepositories",
         "ecr:DescribeRepositories",
         "ecr:GetLifecyclePolicy",
+        "ecr:GetRepositoryPolicy",
         "ecs:DescribeCapacityProviders",
         "ecs:DescribeClusters",
         "ecs:DescribeContainerInstances",
@@ -134,7 +159,9 @@
         "iam:ListAccountAliases",
         "iam:ListInstanceProfiles",
         "iam:ListServerCertificates",
+        "inspector2:ListFindings",
         "kinesis:DescribeStream",
+        "kinesis:GetResourcePolicy",
         "kinesis:ListStreams",
         "kinesis:ListTagsForStream",
         "kms:DescribeKey",
@@ -152,6 +179,20 @@
         "opensearch:ListDomainNames",
         "organizations:ListAccounts",
         "pricing:GetProducts",
+        "qapps:ListLibraryItems",
+        "qapps:ListQApps",
+        "qapps:ListTagsForResource",
+        "qbusiness:ListApplications",
+        "qbusiness:ListConversations",
+        "qbusiness:ListDataSourceSyncJobs",
+        "qbusiness:ListDataSources",
+        "qbusiness:ListDocuments",
+        "qbusiness:ListIndices",
+        "qbusiness:ListMessages",
+        "qbusiness:ListPlugins",
+        "qbusiness:ListRetrievers",
+        "qbusiness:ListTagsForResource",
+        "qbusiness:ListWebExperiences",
         "rds:DescribeDbClusterSnapshots",
         "rds:DescribeDbClusters",
         "rds:DescribeDbInstances",
@@ -164,6 +205,7 @@
         "route53:ListTagsForResource",
         "s3:GetAccountPublicAccessBlock",
         "s3:GetBucketAcl",
+        "s3:GetBucketLifecycleConfiguration",
         "s3:GetBucketLocation",
         "s3:GetBucketLogging",
         "s3:GetBucketPolicy",
@@ -213,6 +255,7 @@
         "sagemaker:ListTrials",
         "sagemaker:ListUserProfiles",
         "sagemaker:ListWorkteams",
+        "secretsmanager:GetResourcePolicy",
         "secretsmanager:ListSecrets",
         "servicequotas:ListServiceQuotas",
         "sns:GetPlatformApplicationAttributes",
@@ -229,6 +272,7 @@
         "ssm:DescribeDocument",
         "ssm:DescribeInstanceInformation",
         "ssm:GetDocument",
+        "ssm:ListComplianceItems",
         "ssm:ListDocuments",
         "ssm:ListResourceComplianceSummaries",
         "wafv2:GetLoggingConfiguration",

iam/gcp/fix_access.json

@@ -3,6 +3,23 @@
   "description": "Permissions required to collect resources.",
   "stage": "GA",
   "includedPermissions": [
+    "aiplatform.projects.locations.batchPredictionJobs.list",
+    "aiplatform.projects.locations.customJobs.list",
+    "aiplatform.projects.locations.datasets.list",
+    "aiplatform.projects.locations.endpoints.list",
+    "aiplatform.projects.locations.featureGroups.list",
+    "aiplatform.projects.locations.featurestores.list",
+    "aiplatform.projects.locations.hyperparameterTuningJobs.list",
+    "aiplatform.projects.locations.indexEndpoints.list",
+    "aiplatform.projects.locations.indexes.list",
+    "aiplatform.projects.locations.modelDeploymentMonitoringJobs.list",
+    "aiplatform.projects.locations.models.list",
+    "aiplatform.projects.locations.pipelineJobs.list",
+    "aiplatform.projects.locations.schedules.list",
+    "aiplatform.projects.locations.tensorboards.list",
+    "aiplatform.projects.locations.trainingPipelines.list",
+    "aiplatform.projects.locations.tuningJobs.list",
+    "cloudfunctions.projects.locations.functions.list",
     "cloudsql.backupRuns.list",
     "cloudsql.databases.list",
     "cloudsql.instances.get",
@@ -68,6 +85,15 @@
     "compute.vpnTunnels.list",
     "container.clusters.list",
     "container.operations.list",
+    "file.projects.locations.backups.list",
+    "file.projects.locations.instances.list",
+    "file.projects.locations.instances.snapshots.list",
+    "firestore.projects.databases.documents.list",
+    "firestore.projects.databases.list",
+    "firestore.projects.locations.backups.list",
+    "pubsub.projects.snapshots.list",
+    "pubsub.projects.subscriptions.list",
+    "pubsub.projects.topics.list",
     "storage.buckets.list"
   ]
 }