@actsecurity/iam-data 0.22.202611051 → 0.22.202611061

package/data/actions/agentaccess-mcp.json

@@ -19,6 +19,16 @@
     ],
     "dependentActions": []
   },
+  "closesession": {
+    "name": "CloseSession",
+    "description": "Grants permission to close a desktop session",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "agentaccess-mcp:StackArn"
+    ],
+    "dependentActions": []
+  },
   "doubleclick": {
     "name": "DoubleClick",
     "description": "Grants permission to perform double click at coordinates",

package/data/actions/assurance.json

@@ -84,14 +84,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "vendconnectionaccesstoken": {
-    "name": "VendConnectionAccessToken",
-    "description": "Grants permission to retrieve a short-lived access token for a third-party connection in an environment",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "acceptinvitation": {
     "name": "AcceptInvitation",
     "description": "Grants permission to accept an invitation to connect an account to an environment",
@@ -179,7 +171,7 @@
   },
   "chat": {
     "name": "Chat",
-    "description": "Grants permission to start a streaming chat session with the AI Governance agent",
+    "description": "Grants permission to start a streaming chat session with the AWS Assurance agent",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -807,6 +799,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getresourceactivitiesqueryresults": {
+    "name": "GetResourceActivitiesQueryResults",
+    "description": "Grants permission to retrieve results of an asynchronous resource-activities query for an AI agent",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "environment",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "gettask": {
     "name": "GetTask",
     "description": "Grants permission to retrieve a specific task by its identifying fields",
@@ -1349,6 +1358,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startresourceactivitiesquery": {
+    "name": "StartResourceActivitiesQuery",
+    "description": "Grants permission to start an asynchronous resource-activities query for an AI agent",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "environment",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add or overwrite tags on a resource",

package/data/actions/bedrock-agentcore.json

@@ -109,6 +109,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "invokewebanswer": {
+    "name": "InvokeWebAnswer",
+    "description": "Grants permission to invoke a web answer target",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "web-answer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "invokewebsearch": {
     "name": "InvokeWebSearch",
     "description": "Grants permission to invoke a web search target",

package/data/actions/cognito-identity.json

@@ -6,6 +6,7 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []

package/data/actions/connect.json

@@ -7213,6 +7213,27 @@
     ],
     "dependentActions": []
   },
+  "updateoutboundemailcontactmessage": {
+    "name": "UpdateOutboundEmailContactMessage",
+    "description": "Grants permission to update the draft outbound email message for a contact in an Amazon Connect instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "contact",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "connect:Channel",
+      "connect:ContactAssociationId",
+      "connect:InstanceId",
+      "connect:UserArn"
+    ],
+    "dependentActions": []
+  },
   "updateparticipantauthentication": {
     "name": "UpdateParticipantAuthentication",
     "description": "Grants permission to update and continue authentication for a specific contact",

package/data/actions/dynamodb.json

@@ -275,6 +275,36 @@
     ],
     "dependentActions": []
   },
+  "bulkputitems": {
+    "name": "BulkPutItems",
+    "description": "Grants permission to write items into a table as part of a bulk put items operation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "cancelbulkoperation": {
+    "name": "CancelBulkOperation",
+    "description": "Grants permission to cancel an in-progress bulk operation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bulk-operation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "conditioncheckitem": {
     "name": "ConditionCheckItem",
     "description": "Grants permission to the ConditionCheckItem operation checks the existence of a set of attributes for the item with the given primary key",
@@ -436,6 +466,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describebulkoperation": {
+    "name": "DescribeBulkOperation",
+    "description": "Grants permission to describe an existing bulk operation",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "bulk-operation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describecontinuousbackups": {
     "name": "DescribeContinuousBackups",
     "description": "Grants permission to check the status of the backup restore settings on the specified table",
@@ -763,6 +808,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listbulkoperations": {
+    "name": "ListBulkOperations",
+    "description": "Grants permission to list bulk operations associated with the account and endpoint",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcontributorinsights": {
     "name": "ListContributorInsights",
     "description": "Grants permission to list the ContributorInsightsSummary for all tables and global secondary indexes associated with the current account and endpoint",
@@ -1084,6 +1137,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startbulkoperation": {
+    "name": "StartBulkOperation",
+    "description": "Grants permission to start a bulk operation that writes items from an Amazon S3 source into an existing DynamoDB table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bulk-operation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to associate a set of tags with an Amazon DynamoDB resource",

package/data/actions/health-agent.json

@@ -1,4 +1,25 @@
 {
+  "batchrefillpatientpharmacyprescriptions": {
+    "name": "BatchRefillPatientPharmacyPrescriptions",
+    "description": "Grants permission to batch request patient pharmacy prescription refills",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "cancelappointment": {
     "name": "CancelAppointment",
     "description": "Grants permission to cancel an appointment",
@@ -392,6 +413,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listpatientpharmacyprescriptions": {
+    "name": "ListPatientPharmacyPrescriptions",
+    "description": "Grants permission to list a patient's pharmacy prescriptions",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listproviders": {
     "name": "ListProviders",
     "description": "Grants permission to retrieve active providers available for scheduling appointments with a patient",

package/data/actions/payments.json

@@ -63,6 +63,17 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createconnectedaccount": {
+    "name": "CreateConnectedAccount",
+    "description": "Grants permission to create a connected account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createfinancingapplication": {
     "name": "CreateFinancingApplication",
     "description": "Grants permission to create a financing application",
@@ -82,6 +93,40 @@
     ],
     "dependentActions": []
   },
+  "deleteconnectedaccount": {
+    "name": "DeleteConnectedAccount",
+    "description": "Grants permission to delete a connected account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connectedaccount",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getconnectedaccount": {
+    "name": "GetConnectedAccount",
+    "description": "Grants permission to get information about a connected account",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "connectedaccount",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getfinancingapplication": {
     "name": "GetFinancingApplication",
     "description": "Grants permission to get information about a financing application",
@@ -131,6 +176,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listconnectedaccounts": {
+    "name": "ListConnectedAccounts",
+    "description": "Grants permission to list connected accounts",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listfinancingapplications": {
     "name": "ListFinancingApplications",
     "description": "Grants permission to list financing application metadata",
@@ -176,6 +229,14 @@
     "description": "Grants permission to list tags on a payment resource",
     "accessLevel": "List",
     "resourceTypes": [
+      {
+        "name": "connectedaccount",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "payment-instrument",
         "required": false,
@@ -193,6 +254,16 @@
     "description": "Grants permission to tag a payment resource",
     "accessLevel": "Tagging, Write",
     "resourceTypes": [
+      {
+        "name": "connectedaccount",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "payment-instrument",
         "required": false,
@@ -212,6 +283,15 @@
     "description": "Grants permission to untag a payment resource",
     "accessLevel": "Tagging, Write",
     "resourceTypes": [
+      {
+        "name": "connectedaccount",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "payment-instrument",
         "required": false,

package/data/actions/quicksight.json

@@ -15,6 +15,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "authorizeoauthaccess": {
+    "name": "AuthorizeOAuthAccess",
+    "description": "Grants permission to authorize OAuth 2.0 access for Amazon QuickSight clients",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchgetpreferences": {
     "name": "BatchGetPreferences",
     "description": "Grants permission to get user preferences",
@@ -31,6 +39,39 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createaccesscontrolapplication": {
+    "name": "CreateAccessControlApplication",
+    "description": "Grants permission to create an access control application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "accessControlApplication",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createaccesscontrolapplicationsecret": {
+    "name": "CreateAccessControlApplicationSecret",
+    "description": "Grants permission to create a client secret for an access control application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "accessControlApplication",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createadmin": {
     "name": "CreateAdmin",
     "description": "Grants permission to provision Amazon QuickSight administrators, authors, and readers",
@@ -94,6 +135,32 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createinboundconnector": {
+    "name": "CreateInboundConnector",
+    "description": "Grants permission to create an inbound connector",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "inboundConnector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createoauthtoken": {
+    "name": "CreateOAuthToken",
+    "description": "Grants permission to issue OAuth 2.0 access and refresh tokens for Amazon QuickSight clients",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createreader": {
     "name": "CreateReader",
     "description": "Grants permission to provision Amazon QuickSight readers",
@@ -124,6 +191,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteaccesscontrolapplication": {
+    "name": "DeleteAccessControlApplication",
+    "description": "Grants permission to delete an access control application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "accessControlApplication",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteaccesscontrolapplicationsecret": {
+    "name": "DeleteAccessControlApplicationSecret",
+    "description": "Grants permission to delete a client secret from an access control application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "accessControlApplication",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteemailcustomizationtemplate": {
     "name": "DeleteEmailCustomizationTemplate",
     "description": "Grants permission to delete a QuickSight email customization template",
@@ -169,6 +266,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteinboundconnector": {
+    "name": "DeleteInboundConnector",
+    "description": "Grants permission to delete an inbound connector",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "inboundConnector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeaccesscontrolapplication": {
+    "name": "DescribeAccessControlApplication",
+    "description": "Grants permission to describe an access control application",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "accessControlApplication",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describechatconfiguration": {
     "name": "DescribeChatConfiguration",
     "description": "Grants permission to describe chat configuration",
@@ -252,6 +379,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeinboundconnector": {
+    "name": "DescribeInboundConnector",
+    "description": "Grants permission to describe an inbound connector",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "inboundConnector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describequickindexcapacity": {
     "name": "DescribeQuickIndexCapacity",
     "description": "Grants permission to describe index capacity",
@@ -299,6 +441,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listaccesscontrolapplications": {
+    "name": "ListAccessControlApplications",
+    "description": "Grants permission to list access control applications in an account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcustompermissionassignments": {
     "name": "ListCustomPermissionAssignments",
     "description": "Grants permission to list assignment information of the custom permission profile in an account",
@@ -339,6 +489,29 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listinboundconnectorapplicationassociations": {
+    "name": "ListInboundConnectorApplicationAssociations",
+    "description": "Grants permission to list the access control applications associated with an inbound connector",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "inboundConnector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listinboundconnectors": {
+    "name": "ListInboundConnectors",
+    "description": "Grants permission to list inbound connectors in an account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listkmskeysforuser": {
     "name": "ListKMSKeysForUser",
     "description": "Grants permission to list a user's KMS keys",
@@ -433,6 +606,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "revokeoauthtoken": {
+    "name": "RevokeOAuthToken",
+    "description": "Grants permission to revoke OAuth 2.0 tokens issued to Amazon QuickSight clients",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "scopedownpolicy": {
     "name": "ScopeDownPolicy",
     "description": "Grants permission to manage scoping policies for permissions to AWS resources",
@@ -536,6 +717,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateaccesscontrolapplication": {
+    "name": "UpdateAccessControlApplication",
+    "description": "Grants permission to update an access control application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "accessControlApplication",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateaccesscontrolapplicationsecret": {
+    "name": "UpdateAccessControlApplicationSecret",
+    "description": "Grants permission to update a client secret for an access control application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "accessControlApplication",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatechatconfiguration": {
     "name": "UpdateChatConfiguration",
     "description": "Grants permission to update chat configuration",
@@ -604,17 +815,39 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updatequickindexcapacity": {
-    "name": "UpdateQuickIndexCapacity",
-    "description": "Grants permission to update index capacity",
+  "updateinboundconnector": {
+    "name": "UpdateInboundConnector",
+    "description": "Grants permission to update an inbound connector",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "inboundConnector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updateresourcepermissions": {
-    "name": "UpdateResourcePermissions",
-    "description": "Grants permission to update resource-level permissions in QuickSight",
+  "updateinboundconnectorapplicationassociations": {
+    "name": "UpdateInboundConnectorApplicationAssociations",
+    "description": "Grants permission to associate or disassociate access control applications with an inbound connector",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "inboundConnector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatequickindexcapacity": {
+    "name": "UpdateQuickIndexCapacity",
+    "description": "Grants permission to update index capacity",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -2576,6 +2809,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeresourcepermissions": {
+    "name": "DescribeResourcePermissions",
+    "description": "Grants permission to describe the QuickSight service role configuration for an account",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describerolecustompermission": {
     "name": "DescribeRoleCustomPermission",
     "description": "Grants permission to describe the custom permission associated with a role",
@@ -3382,6 +3623,12 @@
     "description": "Grants permission to list tags of a QuickSight resource",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "accessControlApplication",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "actionconnector",
         "required": false,
@@ -3460,6 +3707,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "inboundConnector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "namespace",
         "required": false,
@@ -3993,6 +4246,12 @@
     "description": "Grants permission to add tags to a QuickSight resource",
     "accessLevel": "Tagging, Write",
     "resourceTypes": [
+      {
+        "name": "accessControlApplication",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "actionconnector",
         "required": false,
@@ -4071,6 +4330,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "inboundConnector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "ingestion",
         "required": false,
@@ -4131,6 +4396,12 @@
     "description": "Grants permission to remove tags from a QuickSight resource",
     "accessLevel": "Tagging, Write",
     "resourceTypes": [
+      {
+        "name": "accessControlApplication",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "actionconnector",
         "required": false,
@@ -4209,6 +4480,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "inboundConnector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "ingestion",
         "required": false,
@@ -4860,6 +5137,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateresourcepermissions": {
+    "name": "UpdateResourcePermissions",
+    "description": "Grants permission to update resource permissions and the QuickSight service role configuration for an account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updaterolecustompermission": {
     "name": "UpdateRoleCustomPermission",
     "description": "Grants permission to update the custom permission associated with a role",

package/data/actions/route53domains.json

@@ -215,6 +215,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "restoredomain": {
+    "name": "RestoreDomain",
+    "description": "Grants permission to restore domains",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "retrievedomainauthcode": {
     "name": "RetrieveDomainAuthCode",
     "description": "Grants permission to get the AuthCode for the domain",

package/data/actions/ssmmessages.json

@@ -30,7 +30,17 @@
     "name": "OpenDataChannel",
     "description": "Grants permission to open a websocket connection for a registered data channel stream from an instance to Systems Manager service",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [
+          "ssm:resourceTag/aws:ssmmessages:session-id",
+          "ssm:resourceTag/aws:ssmmessages:target-id"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   }

package/data/conditionKeys/ssmmessages.json

@@ -8,5 +8,15 @@
     "key": "ssm:SourceInstanceARN",
     "description": "Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made. This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile",
     "type": "ARN"
+  },
+  "ssm:resourcetag/aws:ssmmessages:session-id": {
+    "key": "ssm:resourceTag/aws:ssmmessages:session-id",
+    "description": "Filters access by the user ID of the principal that started the session, as recorded in the AWS-supplied aws:ssmmessages:session-id tag",
+    "type": "String"
+  },
+  "ssm:resourcetag/aws:ssmmessages:target-id": {
+    "key": "ssm:resourceTag/aws:ssmmessages:target-id",
+    "description": "Filters access by the ID of the managed node that the session connects to, as recorded in the AWS-supplied aws:ssmmessages:target-id tag",
+    "type": "String"
   }
 }

package/data/resourceTypes/bedrock-agentcore.json

@@ -191,6 +191,10 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "web-answer": {
+    "key": "web-answer",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:aws:tool/web-answer.v1"
+  },
   "web-search": {
     "key": "web-search",
     "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:tool/web-search.v1"

package/data/resourceTypes/cloudwatch.json

@@ -127,7 +127,7 @@
   },
   "view": {
     "key": "view",
-    "arn": "arn:${Partition}:cloudwatch:${Region}:${Account}:view/${ViewName}",
+    "arn": "arn:${Partition}:cloudwatch:${Region}:${Account}:view/${ViewName}/${ViewId}",
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]

package/data/resourceTypes/dynamodb.json

@@ -3,6 +3,10 @@
     "key": "backup",
     "arn": "arn:${Partition}:dynamodb:${Region}:${Account}:table/${TableName}/backup/${BackupName}"
   },
+  "bulk-operation": {
+    "key": "bulk-operation",
+    "arn": "arn:${Partition}:dynamodb:${Region}:${Account}:bulk-operation/${BulkOperationId}"
+  },
   "export": {
     "key": "export",
     "arn": "arn:${Partition}:dynamodb:${Region}:${Account}:table/${TableName}/export/${ExportName}"

package/data/resourceTypes/payments.json

@@ -1,4 +1,11 @@
 {
+  "connectedaccount": {
+    "key": "connectedaccount",
+    "arn": "arn:${Partition}:payments::${Account}:connectedaccount/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "payment-instrument": {
     "key": "payment-instrument",
     "arn": "arn:${Partition}:payments::${Account}:payment-instrument:${ResourceId}",

package/data/resourceTypes/quicksight.json

@@ -1,4 +1,11 @@
 {
+  "accesscontrolapplication": {
+    "key": "accessControlApplication",
+    "arn": "arn:${Partition}:quicksight:${Region}:${Account}:access-control-application/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "account": {
     "key": "account",
     "arn": "arn:${Partition}:quicksight:${Region}:${Account}:account/${ResourceId}"
@@ -145,6 +152,13 @@
     "key": "group",
     "arn": "arn:${Partition}:quicksight:${Region}:${Account}:group/${ResourceId}"
   },
+  "inboundconnector": {
+    "key": "inboundConnector",
+    "arn": "arn:${Partition}:quicksight:${Region}:${Account}:inbound-connector/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "ingestion": {
     "key": "ingestion",
     "arn": "arn:${Partition}:quicksight:${Region}:${Account}:dataset/${DatasetId}/ingestion/${ResourceId}",

package/data/resourceTypes/ssmmessages.json

@@ -1 +1,10 @@
-{}
+{
+  "session": {
+    "key": "session",
+    "arn": "arn:${Partition}:ssm:${Region}:${Account}:session/${SessionId}",
+    "conditionKeys": [
+      "ssm:resourceTag/aws:ssmmessages:session-id",
+      "ssm:resourceTag/aws:ssmmessages:target-id"
+    ]
+  }
+}

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@actsecurity/iam-data",
-  "version": "0.22.202611051",
+  "version": "0.22.202611061",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/act-security-labs/iam-data.git"
   },
-  "updatedAt": "2026-11-05T04:41:37.248Z",
+  "updatedAt": "2026-11-06T04:41:37.185Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",