Updates database

.safety-policy.yml

@@ -2,3 +2,5 @@ security:
   ignore-vulnerabilities:
     67599:
       reason: pip won't fix it, because it is an intended behaviour
+    71064:
+      reason: the updated requests version is ony available for Python 3.8+

examples/yml/crud-with-exclude-actions-empty-sid.yml

@@ -3,3 +3,4 @@ write:
 - arn:aws:s3:::test
 exclude-actions:
 - "iam:Pass*"
+- "s3:GetReplicationConfiguration"

policy_sentry/shared/awsdocs.py

@@ -153,6 +153,11 @@ def no_white_space(string: str) -> str:
     return "".join(str(string).split())
 
 
+def sanitize_service_name(action: str) -> str:
+    service, action_name = action.split(":")
+    return f"{service.lower()}:{action_name}"
+
+
 def create_database(
     destination_directory: str, access_level_overrides_file: str
 ) -> None:
@@ -334,7 +339,10 @@ def create_database(
                                 for (
                                     action_element
                                 ) in dependent_actions_element.find_all("p"):
-                                    dependent_actions.append(chomp(action_element.text))
+                                    chomped_action = chomp(action_element.text)
+                                    dependent_actions.append(
+                                        sanitize_service_name(chomped_action)
+                                    )
                             if "*" in resource_type:
                                 required = True
                                 resource_type = resource_type.strip("*")

policy_sentry/shared/data/docs/list_amazonbedrock.html

@@ -333,6 +333,31 @@ <h6>
                 </th>
                </tr>
               </thead>
+              <tr>
+               <td id="amazonbedrock-AllowVendedLogDeliveryForResource" tabindex="-1">
+                <a href="https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html">
+                 AllowVendedLogDeliveryForResource
+                </a>
+                [permission only]
+               </td>
+               <td tabindex="-1">
+                Grants permission to configure vended log delivery for a knowledge base
+               </td>
+               <td tabindex="-1">
+                Permissions management
+               </td>
+               <td tabindex="-1">
+                <p>
+                 <a href="#amazonbedrock-knowledge-base">
+                  knowledge-base
+                 </a>
+                </p>
+               </td>
+               <td tabindex="-1">
+               </td>
+               <td tabindex="-1">
+               </td>
+              </tr>
               <tr>
                <td id="amazonbedrock-ApplyGuardrail" tabindex="-1">
                 <a href="https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html">

policy_sentry/shared/data/docs/list_amazoncloudwatchapplicationsignals.html

@@ -187,7 +187,7 @@ <h1 class="topictitle" id="list_amazoncloudwatchapplicationsignals">
              <li class="listitem">
               <p>
                Learn how to
-               <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/">
+               <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Monitoring-Sections.html">
                 configure this service
                </a>
                .
@@ -196,7 +196,7 @@ <h1 class="topictitle" id="list_amazoncloudwatchapplicationsignals">
              <li class="listitem">
               <p>
                View a list of the
-               <a href="https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/">
+               <a href="https://docs.aws.amazon.com/applicationsignals/latest/APIReference/">
                 API operations available for this          service
                </a>
                .
@@ -205,7 +205,7 @@ <h1 class="topictitle" id="list_amazoncloudwatchapplicationsignals">
              <li class="listitem">
               <p>
                Learn how to secure this service and its resources by
-               <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Application_Signals_Permissions.html">
+               <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/auth-and-access-control-cw.html">
                 using          IAM
                </a>
                permission policies.
@@ -335,7 +335,7 @@ <h6>
               </thead>
               <tr>
                <td id="amazoncloudwatchapplicationsignals-BatchGetServiceLevelObjectiveBudgetReport" tabindex="-1">
-                <a href="https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_BatchGetServiceLevelObjectiveBudgetReport.html">
+                <a href="https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_BatchGetServiceLevelObjectiveBudgetReport.html">
                  BatchGetServiceLevelObjectiveBudgetReport
                 </a>
                </td>
@@ -359,7 +359,7 @@ <h6>
               </tr>
               <tr>
                <td id="amazoncloudwatchapplicationsignals-CreateServiceLevelObjective" tabindex="-1">
-                <a href="https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_CreateServiceLevelObjective.html">
+                <a href="https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_CreateServiceLevelObjective.html">
                  CreateServiceLevelObjective
                 </a>
                </td>
@@ -388,7 +388,7 @@ <h6>
               </tr>
               <tr>
                <td id="amazoncloudwatchapplicationsignals-DeleteServiceLevelObjective" tabindex="-1">
-                <a href="https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_DeleteServiceLevelObjective.html">
+                <a href="https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_DeleteServiceLevelObjective.html">
                  DeleteServiceLevelObjective
                 </a>
                </td>
@@ -412,7 +412,7 @@ <h6>
               </tr>
               <tr>
                <td id="amazoncloudwatchapplicationsignals-GetService" tabindex="-1">
-                <a href="https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_GetService.html">
+                <a href="https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_GetService.html">
                  GetService
                 </a>
                </td>
@@ -431,7 +431,7 @@ <h6>
               </tr>
               <tr>
                <td id="amazoncloudwatchapplicationsignals-GetServiceLevelObjective" tabindex="-1">
-                <a href="https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_GetServiceLevelObjective.html">
+                <a href="https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_GetServiceLevelObjective.html">
                  GetServiceLevelObjective
                 </a>
                </td>
@@ -455,7 +455,7 @@ <h6>
               </tr>
               <tr>
                <td id="amazoncloudwatchapplicationsignals-ListServiceDependencies" tabindex="-1">
-                <a href="https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_ListServiceDependencies.html">
+                <a href="https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListServiceDependencies.html">
                  ListServiceDependencies
                 </a>
                </td>
@@ -474,7 +474,7 @@ <h6>
               </tr>
               <tr>
                <td id="amazoncloudwatchapplicationsignals-ListServiceDependents" tabindex="-1">
-                <a href="https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_ListServiceDependents.html">
+                <a href="https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListServiceDependents.html">
                  ListServiceDependents
                 </a>
                </td>
@@ -493,7 +493,7 @@ <h6>
               </tr>
               <tr>
                <td id="amazoncloudwatchapplicationsignals-ListServiceLevelObjectives" tabindex="-1">
-                <a href="https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_ListServiceLevelObjectives.html">
+                <a href="https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListServiceLevelObjectives.html">
                  ListServiceLevelObjectives
                 </a>
                </td>
@@ -512,7 +512,7 @@ <h6>
               </tr>
               <tr>
                <td id="amazoncloudwatchapplicationsignals-ListServiceOperations" tabindex="-1">
-                <a href="https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_ListServiceOperations.html">
+                <a href="https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListServiceOperations.html">
                  ListServiceOperations
                 </a>
                </td>
@@ -531,7 +531,7 @@ <h6>
               </tr>
               <tr>
                <td id="amazoncloudwatchapplicationsignals-ListServices" tabindex="-1">
-                <a href="https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_ListServices.html">
+                <a href="https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListServices.html">
                  ListServices
                 </a>
                </td>
@@ -550,7 +550,7 @@ <h6>
               </tr>
               <tr>
                <td id="amazoncloudwatchapplicationsignals-ListTagsForResource" tabindex="-1">
-                <a href="https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_ListTagsForResource.html">
+                <a href="https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListTagsForResource.html">
                  ListTagsForResource
                 </a>
                </td>
@@ -574,7 +574,7 @@ <h6>
               </tr>
               <tr>
                <td id="amazoncloudwatchapplicationsignals-StartDiscovery" tabindex="-1">
-                <a href="https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_StartDiscovery.html">
+                <a href="https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_StartDiscovery.html">
                  StartDiscovery
                 </a>
                </td>
@@ -593,7 +593,7 @@ <h6>
               </tr>
               <tr>
                <td id="amazoncloudwatchapplicationsignals-TagResource" rowspan="2" tabindex="-1">
-                <a href="https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_TagResource.html">
+                <a href="https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_TagResource.html">
                  TagResource
                 </a>
                </td>
@@ -635,7 +635,7 @@ <h6>
               </tr>
               <tr>
                <td id="amazoncloudwatchapplicationsignals-UntagResource" rowspan="2" tabindex="-1">
-                <a href="https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_UntagResource.html">
+                <a href="https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_UntagResource.html">
                  UntagResource
                 </a>
                </td>
@@ -672,7 +672,7 @@ <h6>
               </tr>
               <tr>
                <td id="amazoncloudwatchapplicationsignals-UpdateServiceLevelObjective" tabindex="-1">
-                <a href="https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_UpdateServiceLevelObjective.html">
+                <a href="https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_UpdateServiceLevelObjective.html">
                  UpdateServiceLevelObjective
                 </a>
                </td>