@cloud-copilot/iam-data 0.15.202511222 → 0.15.202511261

package/data/actions/cloudfront.json

@@ -106,6 +106,17 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createconnectionfunction": {
+    "name": "CreateConnectionFunction",
+    "description": "Grants permission to create a connection function",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createconnectiongroup": {
     "name": "CreateConnectionGroup",
     "description": "Grants permission to create a connection group",
@@ -299,6 +310,17 @@
     ],
     "dependentActions": []
   },
+  "createtruststore": {
+    "name": "CreateTrustStore",
+    "description": "Grants permission to create a trust store",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createvpcorigin": {
     "name": "CreateVpcOrigin",
     "description": "Grants permission to create a VPC origin",
@@ -355,6 +377,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteconnectionfunction": {
+    "name": "DeleteConnectionFunction",
+    "description": "Grants permission to delete a connection function",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connection-function",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteconnectiongroup": {
     "name": "DeleteConnectionGroup",
     "description": "Grants permission to delete a connection group",
@@ -589,6 +626,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletetruststore": {
+    "name": "DeleteTrustStore",
+    "description": "Grants permission to delete a trust store",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "trust-store",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletevpcorigin": {
     "name": "DeleteVpcOrigin",
     "description": "Grants permission to delete a VPC origin",
@@ -604,6 +656,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeconnectionfunction": {
+    "name": "DescribeConnectionFunction",
+    "description": "Grants permission to get a connection function summary",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "connection-function",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describefunction": {
     "name": "DescribeFunction",
     "description": "Grants permission to get a CloudFront function summary",
@@ -739,6 +806,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getconnectionfunction": {
+    "name": "GetConnectionFunction",
+    "description": "Grants permission to get a connection function's code",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "connection-function",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getconnectiongroup": {
     "name": "GetConnectionGroup",
     "description": "Grants permission to get information about a connection group",
@@ -1178,6 +1260,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettruststore": {
+    "name": "GetTrustStore",
+    "description": "Grants permission to get information about a trust store",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "trust-store",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getvpcorigin": {
     "name": "GetVpcOrigin",
     "description": "Grants permission to get the information about a VPC origin",
@@ -1232,6 +1329,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listconnectionfunctions": {
+    "name": "ListConnectionFunctions",
+    "description": "Grants permission to list the connection functions in your AWS account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listconnectiongroups": {
     "name": "ListConnectionGroups",
     "description": "Grants permission to list the connection groups in your AWS account",
@@ -1288,6 +1393,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdistributionsbyconnectionfunction": {
+    "name": "ListDistributionsByConnectionFunction",
+    "description": "Grants permission to list summaries for distributions associated with the specified connection function",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "connection-function",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdistributionsbyconnectionmode": {
     "name": "ListDistributionsByConnectionMode",
     "description": "Grants permission to list the distributions by the specified connection mode",
@@ -1337,6 +1457,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdistributionsbytruststore": {
+    "name": "ListDistributionsByTrustStore",
+    "description": "Grants permission to list summaries for distributions associated with the specified trust store",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "trust-store",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdistributionsbyvpcoriginid": {
     "name": "ListDistributionsByVpcOriginId",
     "description": "Grants permission to list IDs for distributions associated with the specified VPC origin",
@@ -1521,6 +1656,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "connection-function",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "connection-group",
         "required": false,
@@ -1539,6 +1680,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "trust-store",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "vpcorigin",
         "required": false,
@@ -1549,6 +1696,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listtruststores": {
+    "name": "ListTrustStores",
+    "description": "Grants permission to list the trust stores in your AWS account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listusages": {
     "name": "ListUsages",
     "isPermissionOnly": true,
@@ -1566,6 +1721,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "publishconnectionfunction": {
+    "name": "PublishConnectionFunction",
+    "description": "Grants permission to publish a connection function",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connection-function",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "publishfunction": {
     "name": "PublishFunction",
     "description": "Grants permission to publish a CloudFront function",
@@ -1607,6 +1777,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "connection-function",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "connection-group",
         "required": false,
@@ -1631,6 +1807,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "trust-store",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "vpcorigin",
         "required": false,
@@ -1644,6 +1826,21 @@
     ],
     "dependentActions": []
   },
+  "testconnectionfunction": {
+    "name": "TestConnectionFunction",
+    "description": "Grants permission to test a connection function",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connection-function",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "testfunction": {
     "name": "TestFunction",
     "description": "Grants permission to test a CloudFront function",
@@ -1670,6 +1867,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "connection-function",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "connection-group",
         "required": false,
@@ -1694,6 +1897,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "trust-store",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "vpcorigin",
         "required": false,
@@ -1751,6 +1960,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateconnectionfunction": {
+    "name": "UpdateConnectionFunction",
+    "description": "Grants permission to update a connection function",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connection-function",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateconnectiongroup": {
     "name": "UpdateConnectionGroup",
     "description": "Grants permission to update a connection group",
@@ -2000,6 +2224,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatetruststore": {
+    "name": "UpdateTrustStore",
+    "description": "Grants permission to update a trust store",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "trust-store",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatevpcorigin": {
     "name": "UpdateVpcOrigin",
     "description": "Grants permission to update a VPC origin",

package/data/actions/cloudwatch.json

@@ -467,6 +467,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "alarm-mute-rule",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "insight-rule",
         "required": false,
@@ -492,6 +498,15 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-AlarmMuteRule",
+        "resourceTypes": [
+          {
+            "name": "alarm-mute-rule",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-InsightRule",
         "resourceTypes": [
@@ -688,6 +703,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "alarm-mute-rule",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "insight-rule",
         "required": false,
@@ -716,6 +737,15 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-AlarmMuteRule",
+        "resourceTypes": [
+          {
+            "name": "alarm-mute-rule",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-InsightRule",
         "resourceTypes": [
@@ -747,6 +777,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "alarm-mute-rule",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "insight-rule",
         "required": false,
@@ -774,6 +810,15 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-AlarmMuteRule",
+        "resourceTypes": [
+          {
+            "name": "alarm-mute-rule",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-InsightRule",
         "resourceTypes": [

package/data/actions/ecr.json

@@ -203,6 +203,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletesigningconfiguration": {
+    "name": "DeleteSigningConfiguration",
+    "description": "Grants permission to delete the signing configuration for the registry",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deregisterpulltimeupdateexclusion": {
+    "name": "DeregisterPullTimeUpdateExclusion",
+    "description": "Grants permission to deregister a pull time update exclusion",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeimagereplicationstatus": {
     "name": "DescribeImageReplicationStatus",
     "description": "Grants permission to retrieve replication status about an image in a registry, including failure reason if replication fails",
@@ -233,6 +249,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeimagesigningstatus": {
+    "name": "DescribeImageSigningStatus",
+    "description": "Grants permission to retrieve signing status about an image in a specified registry",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeimages": {
     "name": "DescribeImages",
     "description": "Grants permission to get metadata about the images in a repository, including image size, image tags, and creation date",
@@ -397,6 +428,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getsigningconfiguration": {
+    "name": "GetSigningConfiguration",
+    "description": "Grants permission to retrieve the signing configuration for the registry",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "initiatelayerupload": {
     "name": "InitiateLayerUpload",
     "description": "Grants permission to notify Amazon ECR that you intend to upload an image layer",
@@ -427,6 +466,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listpulltimeupdateexclusions": {
+    "name": "ListPullTimeUpdateExclusions",
+    "description": "Grants permission to list pull time update exclusions for the registry",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list the tags for an Amazon ECR resource",
@@ -541,6 +588,22 @@
       "iam:CreateServiceLinkedRole"
     ]
   },
+  "putsigningconfiguration": {
+    "name": "PutSigningConfiguration",
+    "description": "Grants permission to update the signing configuration for the registry",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "registerpulltimeupdateexclusion": {
+    "name": "RegisterPullTimeUpdateExclusion",
+    "description": "Grants permission to register a pull time update exclusion",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "replicateimage": {
     "name": "ReplicateImage",
     "isPermissionOnly": true,
@@ -637,6 +700,21 @@
     ],
     "dependentActions": []
   },
+  "updateimagestorageclass": {
+    "name": "UpdateImageStorageClass",
+    "description": "Grants permission to get update the storage class of a specified image within a specified repository",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatepullthroughcacherule": {
     "name": "UpdatePullThroughCacheRule",
     "description": "Grants permission to update the pull-through cache rule",

package/data/actions/logs.json

@@ -1095,6 +1095,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putloggroupdeletionprotection": {
+    "name": "PutLogGroupDeletionProtection",
+    "description": "Grants permission to enable or disable deletion protection for the specified log group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "log-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putmetricfilter": {
     "name": "PutMetricFilter",
     "description": "Grants permission to create or update a metric filter and associates it with the specified log group",

package/data/actions/sagemaker-unified-studio-mcp.json

@@ -1,6 +1,7 @@
 {
   "callprivilegedtool": {
     "name": "CallPrivilegedTool",
+    "isPermissionOnly": true,
     "description": "Grants permission to call privileged tools in MCP service",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -9,6 +10,7 @@
   },
   "callreadonlytool": {
     "name": "CallReadOnlyTool",
+    "isPermissionOnly": true,
     "description": "Grants permission to call read-only tools in MCP service",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -17,6 +19,7 @@
   },
   "invokemcp": {
     "name": "InvokeMcp",
+    "isPermissionOnly": true,
     "description": "Grants permission to use MCP service",
     "accessLevel": "Read",
     "resourceTypes": [],

package/data/actions/security-ir.json

@@ -89,6 +89,7 @@
         "dependentActions": [
           "iam:CreateServiceLinkedRole",
           "organizations:DescribeOrganization",
+          "organizations:ListAWSServiceAccessForOrganization",
           "organizations:ListDelegatedAdministrators"
         ]
       }
@@ -197,6 +198,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listinvestigations": {
+    "name": "ListInvestigations",
+    "description": "Grants permission to list investigations for a case",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "case",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listmemberships": {
     "name": "ListMemberships",
     "description": "Grants permission to list memberships",
@@ -229,6 +245,21 @@
     ],
     "dependentActions": []
   },
+  "sendfeedback": {
+    "name": "SendFeedback",
+    "description": "Grants permission to send feedback for investigation results",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "case",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to the specified resource",

package/data/resourceTypes/apigateway.json

@@ -464,6 +464,7 @@
       "apigateway:Request/DisableExecuteApiEndpoint",
       "apigateway:Request/EndpointType",
       "apigateway:Request/RouteAuthorizationType",
+      "apigateway:Request/SecurityPolicy",
       "apigateway:Resource/ApiKeyRequired",
       "apigateway:Resource/ApiName",
       "apigateway:Resource/AuthorizerType",
@@ -471,6 +472,7 @@
       "apigateway:Resource/DisableExecuteApiEndpoint",
       "apigateway:Resource/EndpointType",
       "apigateway:Resource/RouteAuthorizationType",
+      "apigateway:Resource/SecurityPolicy",
       "aws:ResourceTag/${TagKey}"
     ]
   },
@@ -485,6 +487,7 @@
       "apigateway:Request/DisableExecuteApiEndpoint",
       "apigateway:Request/EndpointType",
       "apigateway:Request/RouteAuthorizationType",
+      "apigateway:Request/SecurityPolicy",
       "aws:ResourceTag/${TagKey}"
     ]
   },

package/data/resourceTypes/cloudfront.json

@@ -84,5 +84,19 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "trust-store": {
+    "key": "trust-store",
+    "arn": "arn:${Partition}:cloudfront::${Account}:trust-store/${Id}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "connection-function": {
+    "key": "connection-function",
+    "arn": "arn:${Partition}:cloudfront::${Account}:connection-function/${Id}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/omics.json

@@ -62,10 +62,6 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
-  "taggingresource": {
-    "key": "TaggingResource",
-    "arn": "arn:${Partition}:omics:${Region}:${Account}:tag/${TagKey}"
-  },
   "taskresource": {
     "key": "TaskResource",
     "arn": "arn:${Partition}:omics:${Region}:${Account}:task/${Id}"

package/data/serviceNames.json

@@ -347,7 +347,7 @@
   "sagemaker-data-science-assistant": "Amazon SageMaker data science assistant",
   "sagemaker-geospatial": "Amazon SageMaker geospatial capabilities",
   "sagemaker-mlflow": "Amazon SageMaker with MLflow",
-  "sagemaker-unified-studio-mcp": "AWS SageMaker Unified Studio MCP is a managed MCP solution for AWS data processing services like EMR, Glue, Athena",
+  "sagemaker-unified-studio-mcp": "Amazon SageMaker Unified Studio MCP",
   "savingsplans": "AWS Savings Plans",
   "scheduler": "Amazon EventBridge Scheduler",
   "schemas": "Amazon EventBridge Schemas",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.15.202511222",
+  "version": "0.15.202511261",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2025-11-22T04:46:27.965Z",
+  "updatedAt": "2025-11-26T04:49:56.318Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",