@cloud-copilot/iam-data 0.15.202511111 → 0.15.202511181

package/data/actions/glue.json

@@ -503,7 +503,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -619,7 +620,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -956,7 +958,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -1106,7 +1109,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -1313,7 +1317,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -1610,7 +1615,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -1820,6 +1826,30 @@
     ],
     "dependentActions": []
   },
+  "federateauthorization": {
+    "name": "FederateAuthorization",
+    "description": "Grants permission to read and write redshift federated resources",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "rootcatalog",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "catalog",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "glue:EnabledForRedshiftAutoDiscovery",
+      "glue:FederatedAuthorizationSource"
+    ],
+    "dependentActions": []
+  },
   "getblueprint": {
     "name": "GetBlueprint",
     "description": "Grants permission to retrieve a blueprint",
@@ -1885,7 +1915,8 @@
     ],
     "conditionKeys": [
       "glue:EnabledForRedshiftAutoDiscovery",
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -1926,7 +1957,8 @@
     ],
     "conditionKeys": [
       "glue:EnabledForRedshiftAutoDiscovery",
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -2305,7 +2337,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -2334,7 +2367,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -3051,7 +3085,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -3185,7 +3220,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -3350,7 +3386,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -4763,7 +4800,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },
@@ -5205,7 +5243,8 @@
       }
     ],
     "conditionKeys": [
-      "glue:LakeFormationPermissions"
+      "glue:LakeFormationPermissions",
+      "glue:FederatedAuthorizationSource"
     ],
     "dependentActions": []
   },

package/data/actions/groundstation.json

@@ -163,6 +163,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getagenttaskresponseurl": {
+    "name": "GetAgentTaskResponseUrl",
+    "description": "Grants permission to retrieve presigned S3 logging URLs",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Agent",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getconfig": {
     "name": "GetConfig",
     "description": "Grants permission to return a configuration",

package/data/actions/healthlake.json

@@ -14,6 +14,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "confirmattributionlist": {
+    "name": "ConfirmAttributionList",
+    "description": "Grants permission to allow customers to indicate to a Producer that the Consumer does not have any more changes to be made to the Attribution List",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "datastore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createfhirdatastore": {
     "name": "CreateFHIRDatastore",
     "description": "Grants permission to create a datastore that can ingest and export FHIR data",
@@ -70,6 +85,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describefhirbulkdeletejob": {
+    "name": "DescribeFHIRBulkDeleteJob",
+    "description": "Grants permission to describe a FHIR Bulk Delete Job",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "datastore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describefhirdatastore": {
     "name": "DescribeFHIRDatastore",
     "description": "Grants permission to get the properties associated with the FHIR datastore, including the datastore ID, datastore ARN, datastore name, datastore status, created at, datastore type version, and datastore endpoint",
@@ -318,6 +348,51 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "memberadd": {
+    "name": "MemberAdd",
+    "description": "Grants permission to attribute a member with a specific provider group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "datastore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "membermatch": {
+    "name": "MemberMatch",
+    "description": "Grants permission to enable cross-system patient matching",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "datastore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "memberremove": {
+    "name": "MemberRemove",
+    "description": "Grants permission to remove a member from a group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "datastore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "patchresource": {
     "name": "PatchResource",
     "description": "Grants permission to patch a resource",
@@ -363,6 +438,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "retrieveattributionstatus": {
+    "name": "RetrieveAttributionStatus",
+    "description": "Grants permission to retrieve member attribution status",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "datastore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "searcheverything": {
     "name": "SearchEverything",
     "description": "Grants permission to search all resources related to a patient",
@@ -408,6 +498,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startfhirbulkdeletejob": {
+    "name": "StartFHIRBulkDeleteJob",
+    "description": "Grants permission to begin a FHIR Bulk Delete Job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "datastore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startfhirexportjob": {
     "name": "StartFHIRExportJob",
     "description": "Grants permission to begin a FHIR Export job",

package/data/actions/invoicing.json

@@ -55,8 +55,7 @@
   },
   "getinvoicepdf": {
     "name": "GetInvoicePDF",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get Invoice PDF",
+    "description": "Grants permission to get downloadable Invoice document pre-signed URL with supplemental documents",
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],

package/data/actions/kafka.json

@@ -772,6 +772,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updaterebalancing": {
+    "name": "UpdateRebalancing",
+    "description": "Grants permission to update the rebalancing status of the MSK cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatereplicationinfo": {
     "name": "UpdateReplicationInfo",
     "description": "Grants permission to update the replication info of the MSK replicator",

package/data/actions/lambda.json

@@ -579,7 +579,8 @@
       }
     ],
     "conditionKeys": [
-      "lambda:EventSourceToken"
+      "lambda:EventSourceToken",
+      "lambda:InvokedViaFunctionUrl"
     ],
     "dependentActions": []
   },

package/data/actions/sagemaker-unified-studio-mcp.json

@@ -0,0 +1,26 @@
+{
+  "callprivilegedtool": {
+    "name": "CallPrivilegedTool",
+    "description": "Grants permission to call privileged tools in MCP service",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "callreadonlytool": {
+    "name": "CallReadOnlyTool",
+    "description": "Grants permission to call read-only tools in MCP service",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invokemcp": {
+    "name": "InvokeMcp",
+    "description": "Grants permission to use MCP service",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/support.json

@@ -183,6 +183,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listinteractionentries": {
+    "name": "ListInteractionEntries",
+    "description": "Grants permission to retrieve a list of entries within a specific interaction, including messages, status updates, or other relevant data points",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listinteractions": {
+    "name": "ListInteractions",
+    "description": "Grants permission to retrieve a list of interactions, potentially with filters or pagination",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putcaseattributes": {
     "name": "PutCaseAttributes",
     "description": "Grants permission to allow secondary services to attach attributes to AWS Support cases. This is an internally managed function",
@@ -215,6 +231,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "resolveinteraction": {
+    "name": "ResolveInteraction",
+    "description": "Grants permission to mark a specific interaction as resolved by its unique identifier, indicating that the issue has been addressed and no further action is needed",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "searchforcases": {
     "name": "SearchForCases",
     "description": "Grants permission to return a list of AWS Support cases that matches the given inputs",
@@ -229,7 +253,9 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "support:DescribeSupportLevel"
+    ]
   },
   "updatecaseseverity": {
     "name": "UpdateCaseSeverity",

package/data/conditionKeys/airflow-serverless.json

@@ -0,0 +1,17 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the presence of tag key-value pairs in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by tag key-value pairs that are attached to the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by tag keys in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/eks-mcp.json

@@ -0,0 +1 @@
+{}

package/data/conditionKeys/events.json

@@ -37,7 +37,7 @@
   "events:detail-type": {
     "key": "events:detail-type",
     "description": "Filters access by the literal string of the detail-type of the event to PutEvents and PutRule actions",
-    "type": "String"
+    "type": "ArrayOfString"
   },
   "events:detail.eventtypecode": {
     "key": "events:detail.eventTypeCode",

package/data/conditionKeys/glue.json

@@ -24,6 +24,11 @@
     "description": "Filters access by the presence of the key configured for role's identity-based policy",
     "type": "Bool"
   },
+  "glue:federatedauthorizationsource": {
+    "key": "glue:FederatedAuthorizationSource",
+    "description": "Filters access by whether the resource belongs to federarted authorization",
+    "type": "String"
+  },
   "glue:lakeformationpermissions": {
     "key": "glue:LakeFormationPermissions",
     "description": "Filters access by whether Lake Formation permission checks will be performed for a given caller and the Glue resource",

package/data/conditionKeys/sagemaker-unified-studio-mcp.json

@@ -0,0 +1 @@
+{}

package/data/resourceTypes/airflow-serverless.json

@@ -0,0 +1,9 @@
+{
+  "workflow": {
+    "key": "Workflow",
+    "arn": "arn:${Partition}:airflow-serverless:${Region}:${Account}:workflow/${WorkflowId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

package/data/resourceTypes/athena.json

@@ -19,5 +19,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "session": {
+    "key": "session",
+    "arn": "arn:${Partition}:athena:${Region}:${Account}:workgroup/${WorkGroupName}/session/${SessionId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/cloudformation.json

@@ -28,6 +28,10 @@
     "key": "type",
     "arn": "arn:${Partition}:cloudformation:${Region}:${Account}:type/resource/${Type}"
   },
+  "typehook": {
+    "key": "typeHook",
+    "arn": "arn:${Partition}:cloudformation:${Region}:${Account}:type/hook/${Type}"
+  },
   "generatedtemplate": {
     "key": "generatedtemplate",
     "arn": "arn:${Partition}:cloudformation:${Region}:${Account}:generatedTemplate/${Id}"

package/data/resourceTypes/eks-mcp.json

@@ -0,0 +1 @@
+{}

package/data/resourceTypes/sagemaker-unified-studio-mcp.json

@@ -0,0 +1 @@
+{}

package/data/serviceNames.json

@@ -9,6 +9,7 @@
   "activate": "AWS Activate",
   "aiops": "Amazon AI Operations",
   "airflow": "Amazon Managed Workflows for Apache Airflow",
+  "airflow-serverless": "AWS MWAA Serverless",
   "amplify": "AWS Amplify",
   "amplifybackend": "AWS Amplify Admin",
   "amplifyuibuilder": "AWS Amplify UI Builder",
@@ -141,6 +142,7 @@
   "ecs": "Amazon Elastic Container Service",
   "eks": "Amazon Elastic Kubernetes Service",
   "eks-auth": "Amazon EKS Auth",
+  "eks-mcp": "Amazon EKS MCP Server",
   "elasticache": "Amazon ElastiCache",
   "elasticbeanstalk": "AWS Elastic Beanstalk",
   "elasticfilesystem": "Amazon Elastic File System",
@@ -344,6 +346,7 @@
   "sagemaker-data-science-assistant": "Amazon SageMaker data science assistant",
   "sagemaker-geospatial": "Amazon SageMaker geospatial capabilities",
   "sagemaker-mlflow": "Amazon SageMaker with MLflow",
+  "sagemaker-unified-studio-mcp": "AWS SageMaker Unified Studio MCP is a managed MCP solution for AWS data processing services like EMR, Glue, Athena",
   "savingsplans": "AWS Savings Plans",
   "scheduler": "Amazon EventBridge Scheduler",
   "schemas": "Amazon EventBridge Schemas",

package/data/services.json

@@ -9,6 +9,7 @@
   "activate",
   "aiops",
   "airflow",
+  "airflow-serverless",
   "amplify",
   "amplifybackend",
   "amplifyuibuilder",
@@ -141,6 +142,7 @@
   "ecs",
   "eks",
   "eks-auth",
+  "eks-mcp",
   "elasticache",
   "elasticbeanstalk",
   "elasticfilesystem",
@@ -344,6 +346,7 @@
   "sagemaker-data-science-assistant",
   "sagemaker-geospatial",
   "sagemaker-mlflow",
+  "sagemaker-unified-studio-mcp",
   "savingsplans",
   "scheduler",
   "schemas",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.15.202511111",
+  "version": "0.15.202511181",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2025-11-11T04:48:21.794Z",
+  "updatedAt": "2025-11-18T04:48:44.345Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",