@cloud-copilot/iam-data 0.15.202509301 → 0.15.202510021

package/data/actions/ecs.json

@@ -3,8 +3,18 @@
     "name": "CreateCapacityProvider",
     "description": "Grants permission to create a new capacity provider. Capacity providers are associated with an Amazon ECS cluster and are used in capacity provider strategies to facilitate cluster auto scaling",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "capacity-provider",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
+      "ecs:propagate-tags",
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
@@ -70,7 +80,14 @@
     "name": "CreateTaskSet",
     "description": "Grants permission to create a new Amazon ECS task set",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "task-set",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
@@ -1053,6 +1070,7 @@
       }
     ],
     "conditionKeys": [
+      "ecs:propagate-tags",
       "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []

package/data/actions/pcs.json

@@ -347,6 +347,32 @@
     ],
     "dependentActions": []
   },
+  "updatecluster": {
+    "name": "UpdateCluster",
+    "description": "Grants permission to update cluster properties",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:CreateNetworkInterface",
+      "ec2:CreateNetworkInterfacePermission",
+      "ec2:DescribeNetworkInterfaces",
+      "ec2:DescribeSecurityGroups",
+      "ec2:DescribeSubnets",
+      "ec2:DescribeVpcs",
+      "ec2:GetSecurityGroupsForVpc",
+      "iam:CreateServiceLinkedRole",
+      "secretsmanager:CreateSecret",
+      "secretsmanager:TagResource"
+    ]
+  },
   "updatecomputenodegroup": {
     "name": "UpdateComputeNodeGroup",
     "description": "Grants permission to update compute node group properties",

package/data/actions/profile.json

@@ -732,6 +732,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getprofilehistoryrecord": {
+    "name": "GetProfileHistoryRecord",
+    "description": "Grants permission to get a profile history record for a profile in a domain",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getprofileobjecttype": {
     "name": "GetProfileObjectType",
     "description": "Grants permission to get a specific profile object type in the domain",
@@ -1087,6 +1102,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listprofilehistoryrecords": {
+    "name": "ListProfileHistoryRecords",
+    "description": "Grants permission to list all the profile history records for a profile in a domain",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listprofileobjecttypetemplates": {
     "name": "ListProfileObjectTypeTemplates",
     "description": "Grants permission to list all the profile object type templates in the account",

package/data/actions/resource-explorer-2.json

@@ -37,6 +37,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createresourceexplorersetup": {
+    "name": "CreateResourceExplorerSetup",
+    "description": "Grants permission to create resource explorer setup",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createstreamingaccessforservice": {
+    "name": "CreateStreamingAccessForService",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create resource explorer streaming access",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createview": {
     "name": "CreateView",
     "description": "Grants permission to create a view that users can query",
@@ -63,6 +80,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteresourceexplorersetup": {
+    "name": "DeleteResourceExplorerSetup",
+    "description": "Grants permission to delete resource explorer setup",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteresourcepolicy": {
     "name": "DeleteResourcePolicy",
     "isPermissionOnly": true,
@@ -79,6 +104,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletestreamingaccessforservice": {
+    "name": "DeleteStreamingAccessForService",
+    "isPermissionOnly": true,
+    "description": "Grants permission to delete resource explorer streaming access",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteview": {
     "name": "DeleteView",
     "description": "Grants permission to delete a view",
@@ -141,6 +175,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getresourceexplorersetup": {
+    "name": "GetResourceExplorerSetup",
+    "description": "Grants permission to get resource explorer setup",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getresourcepolicy": {
     "name": "GetResourcePolicy",
     "isPermissionOnly": true,
@@ -157,6 +199,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getserviceindex": {
+    "name": "GetServiceIndex",
+    "description": "Grants permission to get service index",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getserviceview": {
+    "name": "GetServiceView",
+    "description": "Grants permission to get service view",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getview": {
     "name": "GetView",
     "description": "Grants permission to retrieve information about the specified view",
@@ -196,6 +254,30 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listserviceindexes": {
+    "name": "ListServiceIndexes",
+    "description": "Grants permission to list service indexes in all AWS Regions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listserviceviews": {
+    "name": "ListServiceViews",
+    "description": "Grants permission to list service views in all AWS Regions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "liststreamingaccessforservices": {
+    "name": "ListStreamingAccessForServices",
+    "description": "Grants permission to list streaming access for services",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listsupportedresourcetypes": {
     "name": "ListSupportedResourceTypes",
     "description": "Grants permission to retrieve a list of all resource types currently supported by Resource Explorer",

package/data/actions/scn.json

@@ -41,7 +41,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createdatalakedataset": {
@@ -56,7 +59,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createdatalakenamespace": {
@@ -71,7 +77,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createinstance": {
@@ -86,7 +95,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createssoapplication": {
@@ -361,7 +373,7 @@
   },
   "listdatalakedatasets": {
     "name": "ListDataLakeDatasets",
-    "description": "Grants permission to list the data lake datasets under specific instance and namespace",
+    "description": "Grants permission to list the data lake datasets under specific instance or namespace",
     "accessLevel": "List",
     "resourceTypes": [
       {

package/data/resourceTypes/scn.json

@@ -1,7 +1,10 @@
 {
   "instance": {
     "key": "instance",
-    "arn": "arn:${Partition}:scn:${Region}:${Account}:instance/${InstanceId}"
+    "arn": "arn:${Partition}:scn:${Region}:${Account}:instance/${InstanceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "bill-of-materials-import-job": {
     "key": "bill-of-materials-import-job",
@@ -9,14 +12,23 @@
   },
   "data-integration-flow": {
     "key": "data-integration-flow",
-    "arn": "arn:${Partition}:scn:${Region}:${Account}:instance/${InstanceId}/data-integration-flows/${FlowName}"
+    "arn": "arn:${Partition}:scn:${Region}:${Account}:instance/${InstanceId}/data-integration-flows/${FlowName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "namespace": {
     "key": "namespace",
-    "arn": "arn:${Partition}:scn:${Region}:${Account}:instance/${InstanceId}/namespaces/${Namespace}"
+    "arn": "arn:${Partition}:scn:${Region}:${Account}:instance/${InstanceId}/namespaces/${Namespace}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "dataset": {
     "key": "dataset",
-    "arn": "arn:${Partition}:scn:${Region}:${Account}:instance/${InstanceId}/namespaces/${Namespace}/datasets/${DatasetName}"
+    "arn": "arn:${Partition}:scn:${Region}:${Account}:instance/${InstanceId}/namespaces/${Namespace}/datasets/${DatasetName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.15.202509301",
+  "version": "0.15.202510021",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2025-09-30T04:46:41.080Z",
+  "updatedAt": "2025-10-02T04:44:32.693Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",