@cloud-copilot/iam-data 0.15.202511201 → 0.15.202511221

package/data/actions/action-recommendations.json

@@ -1,7 +1,7 @@
 {
   "listrecommendedactions": {
     "name": "ListRecommendedActions",
-    "description": "Grants permission to list recommended actions in the the console",
+    "description": "Grants permission to list recommended actions in the AWS Management Console",
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [],

package/data/actions/application-signals.json

@@ -103,6 +103,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listentityevents": {
+    "name": "ListEntityEvents",
+    "description": "Grants permission to list events for an entity",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listgroupingattributedefinitions": {
     "name": "ListGroupingAttributeDefinitions",
     "description": "Grants permission to list grouping attribute configurations",

package/data/actions/autoscaling.json

@@ -381,6 +381,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeaccountsettings": {
+    "name": "DescribeAccountSettings",
+    "description": "Grants permission to describe the current Amazon EC2 Auto Scaling account settings for your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeadjustmenttypes": {
     "name": "DescribeAdjustmentTypes",
     "description": "Grants permission to describe the policy adjustment types for use with PutScalingPolicy",
@@ -735,6 +743,14 @@
     ],
     "dependentActions": []
   },
+  "putaccountsetting": {
+    "name": "PutAccountSetting",
+    "description": "Grants permission to modify an account setting for your account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putlifecyclehook": {
     "name": "PutLifecycleHook",
     "description": "Grants permission to create or update a lifecycle hook for the specified Auto Scaling Group",

package/data/actions/backup.json

@@ -68,6 +68,22 @@
     ],
     "dependentActions": []
   },
+  "createbackupaccesspoint": {
+    "name": "CreateBackupAccessPoint",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create a new access point for backup instant access",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "recoveryPoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createbackupplan": {
     "name": "CreateBackupPlan",
     "description": "Grants permission to create a new backup plan",
@@ -77,7 +93,9 @@
         "name": "backupPlan",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "iam:PassRole"
+        ]
       }
     ],
     "conditionKeys": [
@@ -249,6 +267,33 @@
       "iam:PassRole"
     ]
   },
+  "createtieringconfiguration": {
+    "name": "CreateTieringConfiguration",
+    "description": "Grants permission to create a new tiering configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "tieringConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deletebackupaccesspoint": {
+    "name": "DeleteBackupAccessPoint",
+    "isPermissionOnly": true,
+    "description": "Grants permission to delete the access point",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletebackupplan": {
     "name": "DeleteBackupPlan",
     "description": "Grants permission to delete a backup plan",
@@ -430,6 +475,30 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletetieringconfiguration": {
+    "name": "DeleteTieringConfiguration",
+    "description": "Grants permission to delete a tiering configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "tieringConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describebackupaccesspoint": {
+    "name": "DescribeBackupAccessPoint",
+    "isPermissionOnly": true,
+    "description": "Grants permission to return information about the specified access point",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describebackupjob": {
     "name": "DescribeBackupJob",
     "description": "Grants permission to describe a backup job",
@@ -546,6 +615,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describescanjob": {
+    "name": "DescribeScanJob",
+    "description": "Grants permission to describe a scan job",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disassociatebackupvaultmpaapprovalteam": {
     "name": "DisassociateBackupVaultMpaApprovalTeam",
     "description": "Grants permission to disassociate an MPA approval team from a backup vault",
@@ -790,6 +867,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettieringconfiguration": {
+    "name": "GetTieringConfiguration",
+    "description": "Grants permission to describe a tiering configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "tieringConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listbackupjobsummaries": {
     "name": "ListBackupJobSummaries",
     "description": "Grants permission to list backup job summaries",
@@ -1048,6 +1140,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listscanjobsummaries": {
+    "name": "ListScanJobSummaries",
+    "description": "Grants permission to list scan job summaries",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listscanjobs": {
+    "name": "ListScanJobs",
+    "description": "Grants permission to list scan jobs",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtags": {
     "name": "ListTags",
     "description": "Grants permission to list tags for a resource",
@@ -1094,11 +1202,25 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "tieringConfiguration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listtieringconfigurations": {
+    "name": "ListTieringConfigurations",
+    "description": "Grants permission to list tiering configurations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putbackupvaultaccesspolicy": {
     "name": "PutBackupVaultAccessPolicy",
     "description": "Grants permission to add an access policy to the backup vault",
@@ -1269,6 +1391,23 @@
       "iam:PassRole"
     ]
   },
+  "startscanjob": {
+    "name": "StartScanJob",
+    "description": "Grants permission to start a new scan job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "recoveryPoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "iam:PassRole"
+    ]
+  },
   "stopbackupjob": {
     "name": "StopBackupJob",
     "description": "Grants permission to stop a backup job",
@@ -1323,6 +1462,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "tieringConfiguration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1377,6 +1522,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "tieringConfiguration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1397,7 +1548,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "iam:PassRole"
+    ]
   },
   "updateframework": {
     "name": "UpdateFramework",
@@ -1510,5 +1663,20 @@
     "dependentActions": [
       "iam:PassRole"
     ]
+  },
+  "updatetieringconfiguration": {
+    "name": "UpdateTieringConfiguration",
+    "description": "Grants permission to update a tiering configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "tieringConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

package/data/actions/bedrock-agentcore.json

@@ -250,7 +250,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "bedrock-agentcore:KmsKeyArn"
     ],
     "dependentActions": [
       "iam:PassRole"

package/data/actions/bedrock.json

@@ -2133,6 +2133,33 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "invokedataautomation": {
+    "name": "InvokeDataAutomation",
+    "description": "Grants permission to invoke a call to Sync API of Bedrock data automation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "blueprint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "data-automation-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "data-automation-project",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "invokedataautomationasync": {
     "name": "InvokeDataAutomationAsync",
     "description": "Grants permission to invoke a Bedrock data automation job",
@@ -2260,7 +2287,8 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
       "bedrock:GuardrailIdentifier",
-      "bedrock:BearerTokenType"
+      "bedrock:BearerTokenType",
+      "bedrock:ServiceTier"
     ],
     "dependentActions": []
   },
@@ -2328,7 +2356,8 @@
       "bedrock:InferenceProfileArn",
       "bedrock:PromptRouterArn",
       "bedrock:GuardrailIdentifier",
-      "bedrock:BearerTokenType"
+      "bedrock:BearerTokenType",
+      "bedrock:ServiceTier"
     ],
     "dependentActions": []
   },

package/data/actions/braket.json

@@ -62,6 +62,30 @@
     ],
     "dependentActions": []
   },
+  "createspendinglimit": {
+    "name": "CreateSpendingLimit",
+    "description": "Grants permission to create a spending limit",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deletespendinglimit": {
+    "name": "DeleteSpendingLimit",
+    "description": "Grants permission to delete a spending limit",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "getdevice": {
     "name": "GetDevice",
     "description": "Grants permission to retrieve information about the devices available in Amazon Braket",
@@ -134,6 +158,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "spending-limit",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -163,6 +193,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "searchspendinglimits": {
+    "name": "SearchSpendingLimits",
+    "description": "Grants permission to search for spending limit",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add one or more tags to a quantum task or a hybrid job",
@@ -179,6 +217,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "spending-limit",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -203,11 +247,29 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "spending-limit",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
       "aws:TagKeys"
     ],
     "dependentActions": []
+  },
+  "updatespendinglimit": {
+    "name": "UpdateSpendingLimit",
+    "description": "Grants permission to update a spending limit",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
   }
 }

package/data/actions/cloudformation.json

@@ -392,6 +392,27 @@
     ],
     "dependentActions": []
   },
+  "describeevents": {
+    "name": "DescribeEvents",
+    "description": "Grants permission to return all related events for a specified operation",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "changeset",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "stack",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describegeneratedtemplate": {
     "name": "DescribeGeneratedTemplate",
     "description": "Grants permission to describe a generated template. The output includes details about the progress of the creation of a generated template",

package/data/actions/cloudshell.json

@@ -31,7 +31,7 @@
   "createsession": {
     "name": "CreateSession",
     "isPermissionOnly": true,
-    "description": "Grants permissions to connect to a CloudShell environment from the the console",
+    "description": "Grants permissions to connect to a CloudShell environment from the AWS Management Console",
     "accessLevel": "Write",
     "resourceTypes": [
       {

package/data/actions/cloudtrail.json

@@ -409,12 +409,18 @@
   },
   "geteventconfiguration": {
     "name": "GetEventConfiguration",
-    "description": "Grants permission to list event configurations that are configured for an event data store",
+    "description": "Grants permission to list event configurations that are configured for a trail or an event data store",
     "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "eventdatastore",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "trail",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -630,6 +636,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listinsightsdata": {
+    "name": "ListInsightsData",
+    "description": "Grants permission to retrieve data captured by CloudTrail Insights",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "trail",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listpublickeys": {
     "name": "ListPublicKeys",
     "description": "Grants permission to list the public keys whose private keys were used to sign trail digest files within a specified time range",
@@ -713,21 +734,27 @@
   },
   "puteventconfiguration": {
     "name": "PutEventConfiguration",
-    "description": "Grants permission to create and update event configurations for an event data store",
+    "description": "Grants permission to create and update event configurations for a trail or an event data store",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "eventdatastore",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:CreateServiceLinkedRole",
+          "iam:GetRole"
+        ]
+      },
+      {
+        "name": "trail",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole",
-      "iam:GetRole"
-    ]
+    "dependentActions": []
   },
   "puteventselectors": {
     "name": "PutEventSelectors",

package/data/actions/cost-optimization-hub.json

@@ -15,6 +15,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listefficiencymetrics": {
+    "name": "ListEfficiencyMetrics",
+    "description": "Grants permission to list efficiency metric scores by group",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listenrollmentstatuses": {
     "name": "ListEnrollmentStatuses",
     "description": "Grants permission to list enrollment statuses for the specified account or all members under a management account",

package/data/actions/dms.json

@@ -292,6 +292,22 @@
     ],
     "dependentActions": []
   },
+  "createoutboundintegration": {
+    "name": "CreateOutboundIntegration",
+    "isPermissionOnly": true,
+    "description": "Grants permission to DMS to create resources for zero-ETL integrations with self managed databases",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "dms:req-tag/${TagKey}"
+    ],
+    "dependentActions": [
+      "iam:PassRole"
+    ]
+  },
   "createreplicationconfig": {
     "name": "CreateReplicationConfig",
     "description": "Grants permission to create a replication config using the provided settings",
@@ -1345,6 +1361,17 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "modifyoutboundintegration": {
+    "name": "ModifyOutboundIntegration",
+    "isPermissionOnly": true,
+    "description": "Grants permission to DMS to modify resources for zero-ETL integrations with self managed databases",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "iam:PassRole"
+    ]
+  },
   "modifyreplicationconfig": {
     "name": "ModifyReplicationConfig",
     "description": "Grants permission to modify the specified replication config",

package/data/actions/ds.json

@@ -748,7 +748,7 @@
   "disableroleaccess": {
     "name": "DisableRoleAccess",
     "isPermissionOnly": true,
-    "description": "Grants permission to disable the console access for identity in your AWS Directory",
+    "description": "Grants permission to disable AWS Management Console access for identity in your AWS Directory",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -857,7 +857,7 @@
   "enableroleaccess": {
     "name": "EnableRoleAccess",
     "isPermissionOnly": true,
-    "description": "Grants permission to enable the console access for identity in your AWS Directory",
+    "description": "Grants permission to enable AWS Management Console access for identity in your AWS Directory",
     "accessLevel": "Write",
     "resourceTypes": [
       {