@actsecurity/iam-data 0.21.202609231 → 0.21.202609251

package/data/actions/aws-external-anthropic.json

@@ -365,6 +365,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
+      "aws-external-anthropic:KeyArn",
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
@@ -506,6 +507,16 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disablekey": {
+    "name": "DisableKey",
+    "description": "Grants permission to disable an external encryption key",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws-external-anthropic:KeyArn"
+    ],
+    "dependentActions": []
+  },
   "getaccountstatus": {
     "name": "GetAccountStatus",
     "description": "Grants permission to retrieve the status of account setup and AWS Marketplace registration",
@@ -582,6 +593,16 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getkey": {
+    "name": "GetKey",
+    "description": "Grants permission to get an external encryption key",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws-external-anthropic:KeyArn"
+    ],
+    "dependentActions": []
+  },
   "getmemorystore": {
     "name": "GetMemoryStore",
     "description": "Grants permission to retrieve details of a memory store, its memories, or its memory versions",
@@ -786,6 +807,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listkeys": {
+    "name": "ListKeys",
+    "description": "Grants permission to list external encryption keys",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listmemorystores": {
     "name": "ListMemoryStores",
     "description": "Grants permission to list managed agent memory stores in a workspace",
@@ -947,6 +976,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "registerkey": {
+    "name": "RegisterKey",
+    "description": "Grants permission to register an external encryption key",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "rotatewebhooksecret": {
     "name": "RotateWebhookSecret",
     "description": "Grants permission to rotate the signing secret of a webhook",
@@ -1035,6 +1072,16 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatekey": {
+    "name": "UpdateKey",
+    "description": "Grants permission to update an external encryption key",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws-external-anthropic:KeyArn"
+    ],
+    "dependentActions": []
+  },
   "updatememorystore": {
     "name": "UpdateMemoryStore",
     "description": "Grants permission to update a memory store, mutate its memories, or redact a memory version",
@@ -1151,7 +1198,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-external-anthropic:KeyArn"
+    ],
     "dependentActions": []
   }
 }

package/data/actions/billing.json

@@ -281,6 +281,14 @@
     ],
     "dependentActions": []
   },
+  "listbillingviewsegments": {
+    "name": "ListBillingViewSegments",
+    "description": "Grants permission to get the list of billing view segments for a specified billing view",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listbillingviews": {
     "name": "ListBillingViews",
     "description": "Grants permission to get a list of all your available billing views",

package/data/actions/datazone.json

@@ -371,6 +371,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createdataapp": {
+    "name": "CreateDataApp",
+    "description": "Grants permission to create data apps",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createdataproduct": {
     "name": "CreateDataProduct",
     "description": "Grants permission to create data product",
@@ -622,6 +630,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteconversation": {
+    "name": "DeleteConversation",
+    "description": "Grants permission to delete conversations",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedataapp": {
+    "name": "DeleteDataApp",
+    "description": "Grants permission to delete data apps",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletedataexportconfiguration": {
     "name": "DeleteDataExportConfiguration",
     "description": "Grants permission to delete DataZone catalog data export configuration",
@@ -829,6 +853,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deregisteragentartifact": {
+    "name": "DeregisterAgentArtifact",
+    "description": "Grants permission to deregister agent artifacts",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disassociateenvironmentrole": {
     "name": "DisassociateEnvironmentRole",
     "description": "Grants permission to disassociate a role in a default service blueprint environment",
@@ -941,6 +973,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdataapp": {
+    "name": "GetDataApp",
+    "description": "Grants permission to get data apps",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdataexportconfiguration": {
     "name": "GetDataExportConfiguration",
     "description": "Grants permission to retrieve DataZone catalog data export configuration",
@@ -1244,6 +1284,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "invokeagent": {
+    "name": "InvokeAgent",
+    "description": "Grants permission to invoke agent",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listaccountenvironments": {
     "name": "ListAccountEnvironments",
     "description": "Grants permission to list Environments across all domains in an AWS Account",
@@ -1268,6 +1316,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listagentartifacts": {
+    "name": "ListAgentArtifacts",
+    "description": "Grants permission to list agent artifacts",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listagentsessionrecords": {
+    "name": "ListAgentSessionRecords",
+    "description": "Grants permission to list agent session records",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listassetfilters": {
     "name": "ListAssetFilters",
     "description": "Grants permission to list asset filters",
@@ -1308,6 +1372,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdataapps": {
+    "name": "ListDataApps",
+    "description": "Grants permission to list data apps",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdataproductrevisions": {
     "name": "ListDataProductRevisions",
     "description": "Grants permission to list data product revisions",
@@ -1516,6 +1588,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listshareddataapps": {
+    "name": "ListSharedDataApps",
+    "description": "Grants permission to list shared data apps",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listsubscriptiongrants": {
     "name": "ListSubscriptionGrants",
     "description": "Grants permission to List subscription grants for a subscribed principal",
@@ -1619,6 +1699,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "registeragentartifact": {
+    "name": "RegisterAgentArtifact",
+    "description": "Grants permission to register agent artifacts",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "rejectpredictions": {
     "name": "RejectPredictions",
     "description": "Grants permission to reject prediction",
@@ -1779,6 +1867,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "stopagent": {
+    "name": "StopAgent",
+    "description": "Grants permission to stop agent",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "stopcompute": {
     "name": "StopCompute",
     "description": "Grants permission to stop compute",
@@ -1886,6 +1982,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateconversation": {
+    "name": "UpdateConversation",
+    "description": "Grants permission to update conversations",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatedataapp": {
+    "name": "UpdateDataApp",
+    "description": "Grants permission to update data apps",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatedatasource": {
     "name": "UpdateDataSource",
     "description": "Grants permission to update existing DataSource",

package/data/actions/ec2.json

@@ -619,7 +619,6 @@
           "ec2:AvailabilityZone",
           "ec2:CapacityReservationFleet",
           "ec2:CreateDate",
-          "ec2:DestinationCapacityReservationId",
           "ec2:EbsOptimized",
           "ec2:EndDate",
           "ec2:EndDateType",
@@ -630,7 +629,6 @@
           "ec2:OutpostArn",
           "ec2:PlacementGroup",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:SourceCapacityReservationId",
           "ec2:Tenancy"
         ],
         "dependentActions": []
@@ -1156,7 +1154,6 @@
           "ec2:AvailabilityZone",
           "ec2:CapacityReservationFleet",
           "ec2:CreateDate",
-          "ec2:DestinationCapacityReservationId",
           "ec2:EbsOptimized",
           "ec2:EndDate",
           "ec2:EndDateType",
@@ -1167,7 +1164,6 @@
           "ec2:OutpostArn",
           "ec2:PlacementGroup",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:SourceCapacityReservationId",
           "ec2:Tenancy"
         ],
         "dependentActions": []
@@ -2972,6 +2968,15 @@
     "description": "Grants permission to launch an EC2 Fleet. Resource-level permissions for this action do not include the resources specified in a launch template. To specify resource-level permissions for resources specified in a launch template, you must include the resources in the RunInstances action statement",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "capacity-reservation",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "fleet",
         "required": true,
@@ -3192,6 +3197,7 @@
         "conditionKeys": [
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
+          "ec2:BootModeOverride",
           "ec2:ImageID",
           "ec2:Owner"
         ],
@@ -13922,7 +13928,6 @@
           "ec2:AvailabilityZone",
           "ec2:CapacityReservationFleet",
           "ec2:CreateDate",
-          "ec2:DestinationCapacityReservationId",
           "ec2:EbsOptimized",
           "ec2:EndDate",
           "ec2:EndDateType",
@@ -13933,7 +13938,6 @@
           "ec2:OutpostArn",
           "ec2:PlacementGroup",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:SourceCapacityReservationId",
           "ec2:Tenancy"
         ],
         "dependentActions": []
@@ -19779,7 +19783,6 @@
           "ec2:AvailabilityZone",
           "ec2:CapacityReservationFleet",
           "ec2:CreateDate",
-          "ec2:DestinationCapacityReservationId",
           "ec2:EbsOptimized",
           "ec2:EndDate",
           "ec2:EndDateType",
@@ -19790,7 +19793,6 @@
           "ec2:OutpostArn",
           "ec2:PlacementGroup",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:SourceCapacityReservationId",
           "ec2:Tenancy"
         ],
         "dependentActions": []
@@ -20053,6 +20055,31 @@
     ],
     "dependentActions": []
   },
+  "replaceimageinstancetypespecification": {
+    "name": "ReplaceImageInstanceTypeSpecification",
+    "description": "Grants permission to replace or remove the instance type specification for an Amazon Machine Image (AMI)",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "image",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ImageID",
+          "ec2:ImageType",
+          "ec2:Owner",
+          "ec2:Public",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:RootDeviceType"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "replacenetworkaclassociation": {
     "name": "ReplaceNetworkAclAssociation",
     "description": "Grants permission to change which network ACL a subnet is associated with",
@@ -21923,6 +21950,28 @@
     ],
     "dependentActions": []
   },
+  "validatesecuritygroupquotasforinterface": {
+    "name": "ValidateSecurityGroupQuotasForInterface",
+    "description": "Grants permission to validate whether the specified security groups can be associated with a single network interface without exceeding applicable quotas",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "security-group",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SecurityGroupID",
+          "ec2:Vpc"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "withdrawbyoipcidr": {
     "name": "WithdrawByoipCidr",
     "description": "Grants permission to stop advertising an address range that was provisioned for use in AWS through bring your own IP addresses (BYOIP)",

package/data/actions/elasticache.json

@@ -27,6 +27,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "globalreplicationgroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "parametergroup",
         "required": false,
@@ -382,7 +388,10 @@
       {
         "name": "globalreplicationgroup",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       },
       {
@@ -663,6 +672,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "elasticache:NumNodeGroups"
     ],
     "dependentActions": []
@@ -772,7 +782,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deletereplicationgroup": {
@@ -1010,7 +1022,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "describereplicationgroups": {
@@ -1191,7 +1205,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "exportserverlesscachesnapshot": {
@@ -1223,7 +1239,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "increasenodegroupsinglobalreplicationgroup": {
@@ -1239,6 +1257,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "elasticache:NumNodeGroups"
     ],
     "dependentActions": []
@@ -1445,6 +1464,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "elasticache:AutomaticFailoverEnabled",
       "elasticache:CacheNodeType",
       "elasticache:EngineVersion"
@@ -1619,7 +1639,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "rebootcachecluster": {
@@ -1650,6 +1672,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "globalreplicationgroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "parametergroup",
         "required": false,

package/data/actions/elemental-inference.json

@@ -66,6 +66,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletefeedpolicy": {
+    "name": "DeleteFeedPolicy",
+    "description": "Grants permission to delete the resource-based policy of a feed",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "feed",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disassociatefeed": {
     "name": "DisassociateFeed",
     "description": "Grants permission to disassociate a feed from an AWS resource",
@@ -126,6 +141,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getfeedpolicy": {
+    "name": "GetFeedPolicy",
+    "description": "Grants permission to get the resource-based policy of a feed",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "feed",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getmetadata": {
     "name": "GetMetadata",
     "description": "Grants permission to retrieve metadata for a specific feed output",
@@ -165,6 +195,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putfeedpolicy": {
+    "name": "PutFeedPolicy",
+    "description": "Grants permission to put a resource-based policy on a feed",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "feed",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putmedia": {
     "name": "PutMedia",
     "description": "Grants permission to upload media data for a specified feed",