@actsecurity/iam-data 0.22.202611061 → 0.22.202611071

package/data/actions/athena.json

@@ -170,6 +170,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createsystemtableconfiguration": {
+    "name": "CreateSystemTableConfiguration",
+    "description": "Grants permission to create a system table configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "system-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createworkgroup": {
     "name": "CreateWorkGroup",
     "description": "Grants permission to create a workgroup",
@@ -263,6 +281,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletesystemtableconfiguration": {
+    "name": "DeleteSystemTableConfiguration",
+    "description": "Grants permission to delete a system table configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "system-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteworkgroup": {
     "name": "DeleteWorkGroup",
     "description": "Grants permission to delete a workgroup",
@@ -635,6 +668,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getsystemtableconfiguration": {
+    "name": "GetSystemTableConfiguration",
+    "description": "Grants permission to get a system table configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "system-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "gettable": {
     "name": "GetTable",
     "description": "Grants permission to enable access to the specified table. Applies only to AWS services managed policy and principals that use an Athena JDBC driver version 1.1.0",
@@ -856,6 +904,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listsystemtablestatuses": {
+    "name": "ListSystemTableStatuses",
+    "description": "Grants permission to return the statuses of system tables for the specified AWS account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtablemetadata": {
     "name": "ListTableMetadata",
     "description": "Grants permission to return a list of table metadata in a database for a given datacatalog",
@@ -894,6 +950,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "system-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "workgroup",
         "required": true,
@@ -1048,6 +1110,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "system-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "workgroup",
         "required": true,
@@ -1105,6 +1173,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "system-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "workgroup",
         "required": true,
@@ -1207,6 +1281,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatesystemtableconfiguration": {
+    "name": "UpdateSystemTableConfiguration",
+    "description": "Grants permission to update a system table configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "system-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateworkgroup": {
     "name": "UpdateWorkGroup",
     "description": "Grants permission to update a workgroup",

package/data/actions/cloudwatch.json

@@ -22,6 +22,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "detectgroupoutliers": {
+    "name": "DetectGroupOutliers",
+    "description": "Grants permission to detect outliers within a group of metrics",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getotelenrichment": {
     "name": "GetOTelEnrichment",
     "description": "Grants permission to retrieve the status of OTel Enrichment of vended metrics for PromQL querying",

package/data/actions/glue.json

@@ -624,6 +624,9 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
+      "glue:ConnectionType",
+      "glue:CredentialVendingMode",
+      "glue:InstanceUrl",
       "glue:LakeFormationPermissions"
     ],
     "dependentActions": []
@@ -5322,6 +5325,9 @@
       }
     ],
     "conditionKeys": [
+      "glue:ConnectionType",
+      "glue:CredentialVendingMode",
+      "glue:InstanceUrl",
       "glue:LakeFormationPermissions"
     ],
     "dependentActions": []

package/data/actions/ram.json

@@ -1,4 +1,73 @@
 {
+  "deletecustomermanagedpermissionpolicy": {
+    "name": "DeleteCustomerManagedPermissionPolicy",
+    "description": "Grants permission to delete a resource-based policy on a customer-managed permission",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [
+      {
+        "name": "customer-managed-permission",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ram:RequestedPermissionArns",
+      "ram:RequestedPermissionResourceTypes"
+    ],
+    "dependentActions": []
+  },
+  "getcustomermanagedpermissionpolicy": {
+    "name": "GetCustomerManagedPermissionPolicy",
+    "description": "Grants permission to get a resource-based policy on a customer-managed permission",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "customer-managed-permission",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ram:RequestedPermissionArns",
+      "ram:RequestedPermissionResourceTypes"
+    ],
+    "dependentActions": []
+  },
+  "putcustomermanagedpermissionpolicy": {
+    "name": "PutCustomerManagedPermissionPolicy",
+    "description": "Grants permission to put a resource-based policy on a customer-managed permission",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [
+      {
+        "name": "customer-managed-permission",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ram:RequestedPermissionArns",
+      "ram:RequestedPermissionResourceTypes"
+    ],
+    "dependentActions": []
+  },
   "acceptresourceshareinvitation": {
     "name": "AcceptResourceShareInvitation",
     "description": "Grants permission to accept the specified resource share invitation",
@@ -7,14 +76,14 @@
       {
         "name": "resource-share-invitation",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "ram:ResourceShareName",
+          "ram:ShareOwnerAccountId"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "ram:ResourceShareName",
-      "ram:ShareOwnerAccountId"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "associateresourceshare": {
@@ -25,19 +94,25 @@
       {
         "name": "resource-share",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:AllowsExternalPrincipals",
+          "ram:Principal",
+          "ram:RequestedResourceType",
+          "ram:ResourceArn",
+          "ram:ResourceShareName",
+          "ram:ResourceTag/${TagKey}",
+          "ram:RetainSharingOnAccountLeaveOrganization"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "ram:AllowsExternalPrincipals",
-      "ram:Principal",
-      "ram:RequestedResourceType",
-      "ram:ResourceArn",
-      "ram:ResourceShareName",
-      "ram:ResourceTag/${TagKey}",
-      "ram:RetainSharingOnAccountLeaveOrganization"
+      "ram:RequestedPermissionArns",
+      "ram:RequestedPermissionResourceTypes",
+      "ram:RequestedPrincipals",
+      "ram:RequestedResourceArns",
+      "ram:RequestedResourceTypes"
     ],
     "dependentActions": []
   },
@@ -49,36 +124,68 @@
       {
         "name": "customer-managed-permission",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:PermissionTemplateParameter/${ParameterName}",
+          "ram:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "permission",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:PermissionTemplateParameter/${ParameterName}"
+        ],
         "dependentActions": []
       },
       {
         "name": "resource-share",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:AllowsExternalPrincipals",
+          "ram:PermissionArn",
+          "ram:ResourceShareName",
+          "ram:ResourceTag/${TagKey}",
+          "ram:RetainSharingOnAccountLeaveOrganization"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "ram:RequestedPermissionArns",
+      "ram:RequestedPermissionResourceTypes"
+    ],
     "dependentActions": []
   },
   "createpermission": {
     "name": "CreatePermission",
     "description": "Grants permission to create a Permission that can be associated to a Resource Share",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "customer-managed-permission",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
-      "ram:PermissionArn",
-      "ram:PermissionResourceType"
+      "ram:RequestedPermissionArns",
+      "ram:RequestedPermissionResourceTypes"
     ],
     "dependentActions": []
   },
@@ -90,13 +197,18 @@
       {
         "name": "customer-managed-permission",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "ram:PermissionArn",
-      "ram:PermissionResourceType"
+      "ram:RequestedPermissionArns",
+      "ram:RequestedPermissionResourceTypes"
     ],
     "dependentActions": []
   },
@@ -104,16 +216,50 @@
     "name": "CreateResourceShare",
     "description": "Grants permission to create a resource share with provided resource(s) and/or principal(s)",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "customer-managed-permission",
+        "required": false,
+        "conditionKeys": [
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:PermissionTemplateParameter/${ParameterName}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "permission",
+        "required": false,
+        "conditionKeys": [
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:PermissionTemplateParameter/${ParameterName}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "resource-share",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "ram:AllowsExternalPrincipals",
+          "ram:Principal",
+          "ram:RequestedAllowsExternalPrincipals",
+          "ram:RequestedResourceType",
+          "ram:ResourceArn",
+          "ram:ResourceShareName",
+          "ram:RetainSharingOnAccountLeaveOrganization"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "ram:AllowsExternalPrincipals",
-      "ram:Principal",
-      "ram:RequestedAllowsExternalPrincipals",
-      "ram:RequestedResourceType",
-      "ram:ResourceArn",
-      "ram:RetainSharingOnAccountLeaveOrganization"
+      "ram:RequestedPermissionArns",
+      "ram:RequestedPermissionResourceTypes",
+      "ram:RequestedPrincipals",
+      "ram:RequestedResourceArns",
+      "ram:RequestedResourceTypes"
     ],
     "dependentActions": []
   },
@@ -125,14 +271,18 @@
       {
         "name": "customer-managed-permission",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "ram:PermissionArn",
-      "ram:PermissionResourceType"
+      "ram:RequestedPermissionArns",
+      "ram:RequestedPermissionResourceTypes"
     ],
     "dependentActions": []
   },
@@ -144,13 +294,18 @@
       {
         "name": "customer-managed-permission",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "ram:PermissionArn",
-      "ram:PermissionResourceType"
+      "ram:RequestedPermissionArns",
+      "ram:RequestedPermissionResourceTypes"
     ],
     "dependentActions": []
   },
@@ -162,17 +317,17 @@
       {
         "name": "resource-share",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:AllowsExternalPrincipals",
+          "ram:ResourceShareName",
+          "ram:ResourceTag/${TagKey}",
+          "ram:RetainSharingOnAccountLeaveOrganization"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "ram:AllowsExternalPrincipals",
-      "ram:ResourceShareName",
-      "ram:ResourceTag/${TagKey}",
-      "ram:RetainSharingOnAccountLeaveOrganization"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "disassociateresourceshare": {
@@ -183,19 +338,23 @@
       {
         "name": "resource-share",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:AllowsExternalPrincipals",
+          "ram:Principal",
+          "ram:RequestedResourceType",
+          "ram:ResourceArn",
+          "ram:ResourceShareName",
+          "ram:ResourceTag/${TagKey}",
+          "ram:RetainSharingOnAccountLeaveOrganization"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "ram:AllowsExternalPrincipals",
-      "ram:Principal",
-      "ram:RequestedResourceType",
-      "ram:ResourceArn",
-      "ram:ResourceShareName",
-      "ram:ResourceTag/${TagKey}",
-      "ram:RetainSharingOnAccountLeaveOrganization"
+      "ram:RequestedPrincipals",
+      "ram:RequestedResourceArns",
+      "ram:RequestedResourceTypes"
     ],
     "dependentActions": []
   },
@@ -207,23 +366,41 @@
       {
         "name": "customer-managed-permission",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "permission",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "ram:PermissionArn",
+          "ram:PermissionResourceType"
+        ],
         "dependentActions": []
       },
       {
         "name": "resource-share",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:AllowsExternalPrincipals",
+          "ram:PermissionArn",
+          "ram:ResourceShareName",
+          "ram:ResourceTag/${TagKey}",
+          "ram:RetainSharingOnAccountLeaveOrganization"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "ram:RequestedPermissionArns",
+      "ram:RequestedPermissionResourceTypes"
+    ],
     "dependentActions": []
   },
   "enablesharingwithawsorganization": {
@@ -242,18 +419,27 @@
       {
         "name": "customer-managed-permission",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "permission",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "ram:PermissionArn",
+          "ram:PermissionResourceType"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "ram:PermissionArn"
+      "ram:RequestedPermissionArns",
+      "ram:RequestedPermissionResourceTypes"
     ],
     "dependentActions": []
   },
@@ -286,10 +472,7 @@
     "description": "Grants permission to get a set of resource shares from a provided list or with a specified status",
     "accessLevel": "Read",
     "resourceTypes": [],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "listpendinginvitationresources": {
@@ -300,44 +483,53 @@
       {
         "name": "resource-share-invitation",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "ram:ResourceShareName",
+          "ram:ShareOwnerAccountId"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "ram:ResourceShareName"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "listpermissionassociations": {
     "name": "ListPermissionAssociations",
     "description": "Grants permission to list information about the permission and any associations",
     "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ram:RequestedPermissionArns",
+      "ram:RequestedPermissionResourceTypes"
+    ],
+    "dependentActions": []
+  },
+  "listpermissionversions": {
+    "name": "ListPermissionVersions",
+    "description": "Grants permission to list the versions of an AWS RAM permission",
+    "accessLevel": "List",
     "resourceTypes": [
       {
         "name": "customer-managed-permission",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "permission",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "ram:PermissionArn",
+          "ram:PermissionResourceType"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "ram:PermissionArn",
-      "ram:PermissionResourceType"
-    ],
-    "dependentActions": []
-  },
-  "listpermissionversions": {
-    "name": "ListPermissionVersions",
-    "description": "Grants permission to list the versions of an AWS RAM permission",
-    "accessLevel": "List",
-    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -373,16 +565,17 @@
       {
         "name": "resource-share",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:AllowsExternalPrincipals",
+          "ram:ResourceShareName",
+          "ram:ResourceTag/${TagKey}",
+          "ram:RetainSharingOnAccountLeaveOrganization"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "ram:AllowsExternalPrincipals",
-      "ram:ResourceShareName",
-      "ram:RetainSharingOnAccountLeaveOrganization"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "listresourcetypes": {
@@ -417,13 +610,16 @@
       {
         "name": "customer-managed-permission",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "ram:PermissionArn",
+          "ram:PermissionResourceType"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "ram:PermissionArn",
-      "ram:PermissionResourceType"
+      "ram:RequestedPermissionArns",
+      "ram:RequestedPermissionResourceTypes"
     ],
     "dependentActions": []
   },
@@ -435,7 +631,12 @@
       {
         "name": "resource-share",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:AllowsExternalPrincipals",
+          "ram:ResourceShareName",
+          "ram:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -450,14 +651,14 @@
       {
         "name": "resource-share-invitation",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "ram:ResourceShareName",
+          "ram:ShareOwnerAccountId"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "ram:ResourceShareName",
-      "ram:ShareOwnerAccountId"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "replacepermissionassociations": {
@@ -468,19 +669,29 @@
       {
         "name": "customer-managed-permission",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:PermissionTemplateParameter/${ParameterName}",
+          "ram:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "permission",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:PermissionTemplateParameter/${ParameterName}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "ram:PermissionArn",
-      "ram:PermissionResourceType"
+      "ram:RequestedPermissionArns",
+      "ram:RequestedPermissionResourceTypes"
     ],
     "dependentActions": []
   },
@@ -492,13 +703,18 @@
       {
         "name": "customer-managed-permission",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "ram:PermissionArn",
-      "ram:PermissionResourceType"
+      "ram:RequestedPermissionArns",
+      "ram:RequestedPermissionResourceTypes"
     ],
     "dependentActions": []
   },
@@ -510,13 +726,23 @@
       {
         "name": "customer-managed-permission",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "resource-share",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:AllowsExternalPrincipals",
+          "ram:ResourceShareName",
+          "ram:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -534,13 +760,23 @@
       {
         "name": "customer-managed-permission",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "resource-share",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:AllowsExternalPrincipals",
+          "ram:ResourceShareName",
+          "ram:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -549,6 +785,29 @@
     ],
     "dependentActions": []
   },
+  "updatepermission": {
+    "name": "UpdatePermission",
+    "description": "Grants permission to update a customer managed permission, such as to deprecate it or restore it",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "customer-managed-permission",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:PermissionArn",
+          "ram:PermissionResourceType",
+          "ram:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ram:RequestedPermissionArns",
+      "ram:RequestedPermissionResourceTypes"
+    ],
+    "dependentActions": []
+  },
   "updateresourceshare": {
     "name": "UpdateResourceShare",
     "description": "Grants permission to update attributes of the resource share",
@@ -557,18 +816,18 @@
       {
         "name": "resource-share",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ram:AllowsExternalPrincipals",
+          "ram:RequestedAllowsExternalPrincipals",
+          "ram:ResourceShareName",
+          "ram:ResourceTag/${TagKey}",
+          "ram:RetainSharingOnAccountLeaveOrganization"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "ram:AllowsExternalPrincipals",
-      "ram:RequestedAllowsExternalPrincipals",
-      "ram:ResourceShareName",
-      "ram:ResourceTag/${TagKey}",
-      "ram:RetainSharingOnAccountLeaveOrganization"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   }
 }

package/data/actions/ssm.json

@@ -629,6 +629,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deregisterdefaulthostmanagementconfiguration": {
+    "name": "DeregisterDefaultHostManagementConfiguration",
+    "description": "Grants permission to disable Default Host Management Configuration (DHMC) for an AWS account and Region",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deregistermanagedinstance": {
     "name": "DeregisterManagedInstance",
     "description": "Grants permission to deregister a specified on-premises server or virtual machine (VM) from Systems Manager",
@@ -1942,6 +1950,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "registerdefaulthostmanagementconfiguration": {
+    "name": "RegisterDefaultHostManagementConfiguration",
+    "description": "Grants permission to enable Default Host Management Configuration (DHMC) for an AWS account and Region",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "registerdefaultpatchbaseline": {
     "name": "RegisterDefaultPatchBaseline",
     "description": "Grants permission to specify the default patch baseline for an operating system type",

package/data/conditionKeys/glue.json

@@ -14,11 +14,21 @@
     "description": "Filters access by the presence of tag keys in the request",
     "type": "ArrayOfString"
   },
+  "glue:connectiontype": {
+    "key": "glue:ConnectionType",
+    "description": "Filters access by the connection type specified in the request",
+    "type": "String"
+  },
   "glue:credentialissuingservice": {
     "key": "glue:CredentialIssuingService",
     "description": "Filters access by the service from which the credentials of the request is issued",
     "type": "String"
   },
+  "glue:credentialvendingmode": {
+    "key": "glue:CredentialVendingMode",
+    "description": "Filters access by the credential vending mode connection property specified in the request",
+    "type": "String"
+  },
   "glue:enabledforredshiftautodiscovery": {
     "key": "glue:EnabledForRedshiftAutoDiscovery",
     "description": "Filters access by the presence of the key configured for role's identity-based policy",
@@ -29,6 +39,11 @@
     "description": "Filters access by whether the resource belongs to federated authorization",
     "type": "String"
   },
+  "glue:instanceurl": {
+    "key": "glue:InstanceUrl",
+    "description": "Filters access by the URL and INSTANCE_URL connection property specified in the request",
+    "type": "String"
+  },
   "glue:lakeformationpermissions": {
     "key": "glue:LakeFormationPermissions",
     "description": "Filters access by whether Lake Formation permission checks will be performed for a given caller and the Glue resource",

package/data/conditionKeys/ram.json

@@ -21,17 +21,22 @@
   },
   "ram:permissionarn": {
     "key": "ram:PermissionArn",
-    "description": "Filters access by the specified Permission ARN",
+    "description": "Filters access by the specified Permission ARN. WARNING: We recommend using ram:RequestedPermissionArns instead",
     "type": "ARN"
   },
   "ram:permissionresourcetype": {
     "key": "ram:PermissionResourceType",
-    "description": "Filters access by permissions of specified resource type",
+    "description": "Filters access by permissions of specified resource type. WARNING: We recommend using ram:RequestedPermissionResourceTypes instead",
     "type": "String"
   },
+  "ram:permissiontemplateparameter/${parametername}": {
+    "key": "ram:PermissionTemplateParameter/${ParameterName}",
+    "description": "Filters access by permission template parameter values",
+    "type": "ArrayOfString"
+  },
   "ram:principal": {
     "key": "ram:Principal",
-    "description": "Filters access by format of the specified principal",
+    "description": "Filters access by format of the specified principal. WARNING: We recommend using ram:RequestedPrincipals instead",
     "type": "String"
   },
   "ram:requestedallowsexternalprincipals": {
@@ -39,14 +44,39 @@
     "description": "Filters access by the specified value for 'allowExternalPrincipals'. External principals are AWS accounts that are outside of its AWS Organization",
     "type": "Bool"
   },
+  "ram:requestedpermissionarns": {
+    "key": "ram:RequestedPermissionArns",
+    "description": "Filters access by the specified Permission ARNs",
+    "type": "ArrayOfARN"
+  },
+  "ram:requestedpermissionresourcetypes": {
+    "key": "ram:RequestedPermissionResourceTypes",
+    "description": "Filters access by permissions of specified resource types",
+    "type": "ArrayOfString"
+  },
+  "ram:requestedprincipals": {
+    "key": "ram:RequestedPrincipals",
+    "description": "Filters access by format of the specified principals",
+    "type": "ArrayOfString"
+  },
+  "ram:requestedresourcearns": {
+    "key": "ram:RequestedResourceArns",
+    "description": "Filters access by the specified ARNs",
+    "type": "ArrayOfARN"
+  },
   "ram:requestedresourcetype": {
     "key": "ram:RequestedResourceType",
-    "description": "Filters access by the specified resource type",
+    "description": "Filters access by the specified resource type. WARNING: We recommend using ram:RequestedResourceTypes instead",
     "type": "String"
   },
+  "ram:requestedresourcetypes": {
+    "key": "ram:RequestedResourceTypes",
+    "description": "Filters access by the specified resource types",
+    "type": "ArrayOfString"
+  },
   "ram:resourcearn": {
     "key": "ram:ResourceArn",
-    "description": "Filters access by  the specified ARN",
+    "description": "Filters access by the specified ARN. WARNING: We recommend using ram:RequestedResourceArns instead",
     "type": "ARN"
   },
   "ram:resourcesharename": {

package/data/conditionPatterns.json

@@ -57,6 +57,7 @@
     "license-manager:ResourceTag/.+?": "license-manager:ResourceTag/${TagKey}"
   },
   "ram": {
+    "ram:PermissionTemplateParameter/.+?": "ram:PermissionTemplateParameter/${ParameterName}",
     "ram:ResourceTag/.+?": "ram:ResourceTag/${TagKey}"
   },
   "secretsmanager": {

package/data/resourceTypes/athena.json

@@ -20,6 +20,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "system-table": {
+    "key": "system-table",
+    "arn": "arn:${Partition}:athena:${Region}:${Account}:system-table/${TableName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "workgroup": {
     "key": "workgroup",
     "arn": "arn:${Partition}:athena:${Region}:${Account}:workgroup/${WorkGroupName}",

package/data/resourceTypes/ram.json

@@ -5,12 +5,13 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
       "ram:PermissionArn",
-      "ram:PermissionResourceType"
+      "ram:PermissionResourceType",
+      "ram:ResourceTag/${TagKey}"
     ]
   },
   "permission": {
     "key": "permission",
-    "arn": "arn:${Partition}:ram::${Account}:permission/${ResourcePath}",
+    "arn": "arn:${Partition}:ram::aws:permission/${ResourcePath}",
     "conditionKeys": [
       "ram:PermissionArn",
       "ram:PermissionResourceType"
@@ -22,13 +23,16 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
       "ram:AllowsExternalPrincipals",
-      "ram:ResourceShareName"
+      "ram:ResourceShareName",
+      "ram:ResourceTag/${TagKey}",
+      "ram:RetainSharingOnAccountLeaveOrganization"
     ]
   },
   "resource-share-invitation": {
     "key": "resource-share-invitation",
     "arn": "arn:${Partition}:ram:${Region}:${Account}:resource-share-invitation/${ResourcePath}",
     "conditionKeys": [
+      "ram:ResourceShareName",
       "ram:ShareOwnerAccountId"
     ]
   }

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@actsecurity/iam-data",
-  "version": "0.22.202611061",
+  "version": "0.22.202611071",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/act-security-labs/iam-data.git"
   },
-  "updatedAt": "2026-11-06T04:41:37.185Z",
+  "updatedAt": "2026-11-07T04:41:44.234Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",