@actsecurity/iam-data 0.22.202611041 → 0.22.202611061

package/data/actions/s3tables.json

@@ -54,6 +54,26 @@
     ],
     "dependentActions": []
   },
+  "completetablemigration": {
+    "name": "CompleteTableMigration",
+    "description": "Grants permission to complete a table migration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "s3tables:TableBucketTag/${TagKey}",
+      "s3tables:namespace",
+      "s3tables:tableName"
+    ],
+    "dependentActions": []
+  },
   "createnamespace": {
     "name": "CreateNamespace",
     "description": "Grants permission to create a namespace",
@@ -472,6 +492,26 @@
     ],
     "dependentActions": []
   },
+  "gettablemigration": {
+    "name": "GetTableMigration",
+    "description": "Grants permission to get the status and details of a table migration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "s3tables:TableBucketTag/${TagKey}",
+      "s3tables:namespace",
+      "s3tables:tableName"
+    ],
+    "dependentActions": []
+  },
   "gettablepolicy": {
     "name": "GetTablePolicy",
     "description": "Grants permission to retrieve a policy on a table",
@@ -603,6 +643,32 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listtablemigrations": {
+    "name": "ListTableMigrations",
+    "description": "Grants permission to list table migrations",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "TableBucket",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "s3tables:TableBucketTag/${TagKey}",
+      "s3tables:namespace",
+      "s3tables:tableName"
+    ],
+    "dependentActions": []
+  },
   "listtables": {
     "name": "ListTables",
     "description": "Grants permission to list tables",
@@ -848,6 +914,47 @@
     ],
     "dependentActions": []
   },
+  "starttablemigration": {
+    "name": "StartTableMigration",
+    "description": "Grants permission to start a migration of a table into a table bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "TableBucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "s3tables:TableBucketTag/${TagKey}",
+      "s3tables:namespace"
+    ],
+    "dependentActions": []
+  },
+  "synctablemigration": {
+    "name": "SyncTableMigration",
+    "description": "Grants permission to sync a migrated table with its source",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "s3tables:TableBucketTag/${TagKey}",
+      "s3tables:namespace",
+      "s3tables:tableName"
+    ],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a S3 Tables resource",
@@ -916,5 +1023,25 @@
       "s3tables:tableName"
     ],
     "dependentActions": []
+  },
+  "updatetablemigration": {
+    "name": "UpdateTableMigration",
+    "description": "Grants permission to update a table migration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "s3tables:TableBucketTag/${TagKey}",
+      "s3tables:namespace",
+      "s3tables:tableName"
+    ],
+    "dependentActions": []
   }
 }

package/data/actions/shield.json

@@ -1,4 +1,19 @@
 {
+  "allowvendedlogdeliveryforresource": {
+    "name": "AllowVendedLogDeliveryForResource",
+    "description": "Grants permission to allow vended log delivery for a protection",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "protection",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeattackcontributors": {
     "name": "DescribeAttackContributors",
     "description": "Grants permission to get detailed information about the contributors to a specific DDoS attack",

package/data/actions/ssmmessages.json

@@ -30,7 +30,17 @@
     "name": "OpenDataChannel",
     "description": "Grants permission to open a websocket connection for a registered data channel stream from an instance to Systems Manager service",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [
+          "ssm:resourceTag/aws:ssmmessages:session-id",
+          "ssm:resourceTag/aws:ssmmessages:target-id"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   }

package/data/conditionKeys/partnercentral.json

@@ -14,6 +14,21 @@
     "description": "Filters access by the tag keys that are passed in the request",
     "type": "ArrayOfString"
   },
+  "partnercentral:allowawsengagement": {
+    "key": "partnercentral:AllowAwsEngagement",
+    "description": "Filters access by whether the partner allows AWS to make changes to their business plans",
+    "type": "String"
+  },
+  "partnercentral:businessplanitemstage": {
+    "key": "partnercentral:BusinessPlanItemStage",
+    "description": "Filters access by the stage of a business plan item",
+    "type": "String"
+  },
+  "partnercentral:businessplanitemtype": {
+    "key": "partnercentral:BusinessPlanItemType",
+    "description": "Filters access by the type of a business plan item",
+    "type": "String"
+  },
   "partnercentral:catalog": {
     "key": "partnercentral:Catalog",
     "description": "Filters access by a specific Catalog",

package/data/conditionKeys/ssmmessages.json

@@ -8,5 +8,15 @@
     "key": "ssm:SourceInstanceARN",
     "description": "Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made. This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile",
     "type": "ARN"
+  },
+  "ssm:resourcetag/aws:ssmmessages:session-id": {
+    "key": "ssm:resourceTag/aws:ssmmessages:session-id",
+    "description": "Filters access by the user ID of the principal that started the session, as recorded in the AWS-supplied aws:ssmmessages:session-id tag",
+    "type": "String"
+  },
+  "ssm:resourcetag/aws:ssmmessages:target-id": {
+    "key": "ssm:resourceTag/aws:ssmmessages:target-id",
+    "description": "Filters access by the ID of the managed node that the session connects to, as recorded in the AWS-supplied aws:ssmmessages:target-id tag",
+    "type": "String"
   }
 }

package/data/resourceTypes/bedrock-agentcore.json

@@ -191,6 +191,10 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "web-answer": {
+    "key": "web-answer",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:aws:tool/web-answer.v1"
+  },
   "web-search": {
     "key": "web-search",
     "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:tool/web-search.v1"

package/data/resourceTypes/cloudwatch.json

@@ -127,7 +127,7 @@
   },
   "view": {
     "key": "view",
-    "arn": "arn:${Partition}:cloudwatch:${Region}:${Account}:view/${ViewName}",
+    "arn": "arn:${Partition}:cloudwatch:${Region}:${Account}:view/${ViewName}/${ViewId}",
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]

package/data/resourceTypes/dynamodb.json

@@ -3,6 +3,10 @@
     "key": "backup",
     "arn": "arn:${Partition}:dynamodb:${Region}:${Account}:table/${TableName}/backup/${BackupName}"
   },
+  "bulk-operation": {
+    "key": "bulk-operation",
+    "arn": "arn:${Partition}:dynamodb:${Region}:${Account}:bulk-operation/${BulkOperationId}"
+  },
   "export": {
     "key": "export",
     "arn": "arn:${Partition}:dynamodb:${Region}:${Account}:table/${TableName}/export/${ExportName}"

package/data/resourceTypes/partnercentral.json

@@ -14,6 +14,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "businessplan": {
+    "key": "BusinessPlan",
+    "arn": "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/business-plan/${Identifier}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "channelhandshake": {
     "key": "ChannelHandshake",
     "arn": "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/channel-handshake/${Identifier}",
@@ -37,6 +44,10 @@
     "key": "Dashboard",
     "arn": "arn:${Partition}:partnercentral::${Account}:catalog/${Catalog}/ReportingData/${TableId}/Dashboard/${DashboardId}"
   },
+  "dataset": {
+    "key": "Dataset",
+    "arn": "arn:${Partition}:partnercentral::${Account}:catalog/${Catalog}/ReportingData/${Domain}/Dataset/${DatasetName}"
+  },
   "engagement": {
     "key": "Engagement",
     "arn": "arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/engagement/${Identifier}"

package/data/resourceTypes/payments.json

@@ -1,4 +1,11 @@
 {
+  "connectedaccount": {
+    "key": "connectedaccount",
+    "arn": "arn:${Partition}:payments::${Account}:connectedaccount/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "payment-instrument": {
     "key": "payment-instrument",
     "arn": "arn:${Partition}:payments::${Account}:payment-instrument:${ResourceId}",

package/data/resourceTypes/quicksight.json

@@ -1,4 +1,11 @@
 {
+  "accesscontrolapplication": {
+    "key": "accessControlApplication",
+    "arn": "arn:${Partition}:quicksight:${Region}:${Account}:access-control-application/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "account": {
     "key": "account",
     "arn": "arn:${Partition}:quicksight:${Region}:${Account}:account/${ResourceId}"
@@ -145,6 +152,13 @@
     "key": "group",
     "arn": "arn:${Partition}:quicksight:${Region}:${Account}:group/${ResourceId}"
   },
+  "inboundconnector": {
+    "key": "inboundConnector",
+    "arn": "arn:${Partition}:quicksight:${Region}:${Account}:inbound-connector/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "ingestion": {
     "key": "ingestion",
     "arn": "arn:${Partition}:quicksight:${Region}:${Account}:dataset/${DatasetId}/ingestion/${ResourceId}",

package/data/resourceTypes/ssmmessages.json

@@ -1 +1,10 @@
-{}
+{
+  "session": {
+    "key": "session",
+    "arn": "arn:${Partition}:ssm:${Region}:${Account}:session/${SessionId}",
+    "conditionKeys": [
+      "ssm:resourceTag/aws:ssmmessages:session-id",
+      "ssm:resourceTag/aws:ssmmessages:target-id"
+    ]
+  }
+}

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@actsecurity/iam-data",
-  "version": "0.22.202611041",
+  "version": "0.22.202611061",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/act-security-labs/iam-data.git"
   },
-  "updatedAt": "2026-11-04T04:41:58.532Z",
+  "updatedAt": "2026-11-06T04:41:37.185Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",