@actsecurity/iam-data 0.22.202611051 → 0.22.202611071

package/data/actions/agentaccess-mcp.json

@@ -19,6 +19,16 @@
     ],
     "dependentActions": []
   },
+  "closesession": {
+    "name": "CloseSession",
+    "description": "Grants permission to close a desktop session",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "agentaccess-mcp:StackArn"
+    ],
+    "dependentActions": []
+  },
   "doubleclick": {
     "name": "DoubleClick",
     "description": "Grants permission to perform double click at coordinates",

package/data/actions/assurance.json

@@ -84,14 +84,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "vendconnectionaccesstoken": {
-    "name": "VendConnectionAccessToken",
-    "description": "Grants permission to retrieve a short-lived access token for a third-party connection in an environment",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "acceptinvitation": {
     "name": "AcceptInvitation",
     "description": "Grants permission to accept an invitation to connect an account to an environment",
@@ -179,7 +171,7 @@
   },
   "chat": {
     "name": "Chat",
-    "description": "Grants permission to start a streaming chat session with the AI Governance agent",
+    "description": "Grants permission to start a streaming chat session with the AWS Assurance agent",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -807,6 +799,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getresourceactivitiesqueryresults": {
+    "name": "GetResourceActivitiesQueryResults",
+    "description": "Grants permission to retrieve results of an asynchronous resource-activities query for an AI agent",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "environment",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "gettask": {
     "name": "GetTask",
     "description": "Grants permission to retrieve a specific task by its identifying fields",
@@ -1349,6 +1358,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startresourceactivitiesquery": {
+    "name": "StartResourceActivitiesQuery",
+    "description": "Grants permission to start an asynchronous resource-activities query for an AI agent",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "environment",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add or overwrite tags on a resource",

package/data/actions/athena.json

@@ -170,6 +170,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createsystemtableconfiguration": {
+    "name": "CreateSystemTableConfiguration",
+    "description": "Grants permission to create a system table configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "system-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createworkgroup": {
     "name": "CreateWorkGroup",
     "description": "Grants permission to create a workgroup",
@@ -263,6 +281,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletesystemtableconfiguration": {
+    "name": "DeleteSystemTableConfiguration",
+    "description": "Grants permission to delete a system table configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "system-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteworkgroup": {
     "name": "DeleteWorkGroup",
     "description": "Grants permission to delete a workgroup",
@@ -635,6 +668,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getsystemtableconfiguration": {
+    "name": "GetSystemTableConfiguration",
+    "description": "Grants permission to get a system table configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "system-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "gettable": {
     "name": "GetTable",
     "description": "Grants permission to enable access to the specified table. Applies only to AWS services managed policy and principals that use an Athena JDBC driver version 1.1.0",
@@ -856,6 +904,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listsystemtablestatuses": {
+    "name": "ListSystemTableStatuses",
+    "description": "Grants permission to return the statuses of system tables for the specified AWS account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtablemetadata": {
     "name": "ListTableMetadata",
     "description": "Grants permission to return a list of table metadata in a database for a given datacatalog",
@@ -894,6 +950,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "system-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "workgroup",
         "required": true,
@@ -1048,6 +1110,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "system-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "workgroup",
         "required": true,
@@ -1105,6 +1173,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "system-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "workgroup",
         "required": true,
@@ -1207,6 +1281,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatesystemtableconfiguration": {
+    "name": "UpdateSystemTableConfiguration",
+    "description": "Grants permission to update a system table configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "system-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateworkgroup": {
     "name": "UpdateWorkGroup",
     "description": "Grants permission to update a workgroup",

package/data/actions/bedrock-agentcore.json

@@ -109,6 +109,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "invokewebanswer": {
+    "name": "InvokeWebAnswer",
+    "description": "Grants permission to invoke a web answer target",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "web-answer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "invokewebsearch": {
     "name": "InvokeWebSearch",
     "description": "Grants permission to invoke a web search target",

package/data/actions/cloudwatch.json

@@ -22,6 +22,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "detectgroupoutliers": {
+    "name": "DetectGroupOutliers",
+    "description": "Grants permission to detect outliers within a group of metrics",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getotelenrichment": {
     "name": "GetOTelEnrichment",
     "description": "Grants permission to retrieve the status of OTel Enrichment of vended metrics for PromQL querying",

package/data/actions/cognito-identity.json

@@ -6,6 +6,7 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []

package/data/actions/connect.json

@@ -7213,6 +7213,27 @@
     ],
     "dependentActions": []
   },
+  "updateoutboundemailcontactmessage": {
+    "name": "UpdateOutboundEmailContactMessage",
+    "description": "Grants permission to update the draft outbound email message for a contact in an Amazon Connect instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "contact",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "connect:Channel",
+      "connect:ContactAssociationId",
+      "connect:InstanceId",
+      "connect:UserArn"
+    ],
+    "dependentActions": []
+  },
   "updateparticipantauthentication": {
     "name": "UpdateParticipantAuthentication",
     "description": "Grants permission to update and continue authentication for a specific contact",

package/data/actions/dynamodb.json

@@ -275,6 +275,36 @@
     ],
     "dependentActions": []
   },
+  "bulkputitems": {
+    "name": "BulkPutItems",
+    "description": "Grants permission to write items into a table as part of a bulk put items operation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "cancelbulkoperation": {
+    "name": "CancelBulkOperation",
+    "description": "Grants permission to cancel an in-progress bulk operation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bulk-operation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "conditioncheckitem": {
     "name": "ConditionCheckItem",
     "description": "Grants permission to the ConditionCheckItem operation checks the existence of a set of attributes for the item with the given primary key",
@@ -436,6 +466,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describebulkoperation": {
+    "name": "DescribeBulkOperation",
+    "description": "Grants permission to describe an existing bulk operation",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "bulk-operation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describecontinuousbackups": {
     "name": "DescribeContinuousBackups",
     "description": "Grants permission to check the status of the backup restore settings on the specified table",
@@ -763,6 +808,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listbulkoperations": {
+    "name": "ListBulkOperations",
+    "description": "Grants permission to list bulk operations associated with the account and endpoint",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcontributorinsights": {
     "name": "ListContributorInsights",
     "description": "Grants permission to list the ContributorInsightsSummary for all tables and global secondary indexes associated with the current account and endpoint",
@@ -1084,6 +1137,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startbulkoperation": {
+    "name": "StartBulkOperation",
+    "description": "Grants permission to start a bulk operation that writes items from an Amazon S3 source into an existing DynamoDB table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bulk-operation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to associate a set of tags with an Amazon DynamoDB resource",

package/data/actions/glue.json

@@ -624,6 +624,9 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
+      "glue:ConnectionType",
+      "glue:CredentialVendingMode",
+      "glue:InstanceUrl",
       "glue:LakeFormationPermissions"
     ],
     "dependentActions": []
@@ -5322,6 +5325,9 @@
       }
     ],
     "conditionKeys": [
+      "glue:ConnectionType",
+      "glue:CredentialVendingMode",
+      "glue:InstanceUrl",
       "glue:LakeFormationPermissions"
     ],
     "dependentActions": []

package/data/actions/health-agent.json

@@ -1,4 +1,25 @@
 {
+  "batchrefillpatientpharmacyprescriptions": {
+    "name": "BatchRefillPatientPharmacyPrescriptions",
+    "description": "Grants permission to batch request patient pharmacy prescription refills",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "cancelappointment": {
     "name": "CancelAppointment",
     "description": "Grants permission to cancel an appointment",
@@ -392,6 +413,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listpatientpharmacyprescriptions": {
+    "name": "ListPatientPharmacyPrescriptions",
+    "description": "Grants permission to list a patient's pharmacy prescriptions",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listproviders": {
     "name": "ListProviders",
     "description": "Grants permission to retrieve active providers available for scheduling appointments with a patient",

package/data/actions/payments.json

@@ -63,6 +63,17 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createconnectedaccount": {
+    "name": "CreateConnectedAccount",
+    "description": "Grants permission to create a connected account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createfinancingapplication": {
     "name": "CreateFinancingApplication",
     "description": "Grants permission to create a financing application",
@@ -82,6 +93,40 @@
     ],
     "dependentActions": []
   },
+  "deleteconnectedaccount": {
+    "name": "DeleteConnectedAccount",
+    "description": "Grants permission to delete a connected account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connectedaccount",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getconnectedaccount": {
+    "name": "GetConnectedAccount",
+    "description": "Grants permission to get information about a connected account",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "connectedaccount",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getfinancingapplication": {
     "name": "GetFinancingApplication",
     "description": "Grants permission to get information about a financing application",
@@ -131,6 +176,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listconnectedaccounts": {
+    "name": "ListConnectedAccounts",
+    "description": "Grants permission to list connected accounts",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listfinancingapplications": {
     "name": "ListFinancingApplications",
     "description": "Grants permission to list financing application metadata",
@@ -176,6 +229,14 @@
     "description": "Grants permission to list tags on a payment resource",
     "accessLevel": "List",
     "resourceTypes": [
+      {
+        "name": "connectedaccount",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "payment-instrument",
         "required": false,
@@ -193,6 +254,16 @@
     "description": "Grants permission to tag a payment resource",
     "accessLevel": "Tagging, Write",
     "resourceTypes": [
+      {
+        "name": "connectedaccount",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "payment-instrument",
         "required": false,
@@ -212,6 +283,15 @@
     "description": "Grants permission to untag a payment resource",
     "accessLevel": "Tagging, Write",
     "resourceTypes": [
+      {
+        "name": "connectedaccount",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "payment-instrument",
         "required": false,