@cloud-copilot/iam-data 0.15.202511261 → 0.15.202511271

package/data/actions/cloudfront.json

@@ -106,17 +106,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createconnectionfunction": {
-    "name": "CreateConnectionFunction",
-    "description": "Grants permission to create a connection function",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
-    "dependentActions": []
-  },
   "createconnectiongroup": {
     "name": "CreateConnectionGroup",
     "description": "Grants permission to create a connection group",
@@ -310,17 +299,6 @@
     ],
     "dependentActions": []
   },
-  "createtruststore": {
-    "name": "CreateTrustStore",
-    "description": "Grants permission to create a trust store",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
-    "dependentActions": []
-  },
   "createvpcorigin": {
     "name": "CreateVpcOrigin",
     "description": "Grants permission to create a VPC origin",
@@ -377,21 +355,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deleteconnectionfunction": {
-    "name": "DeleteConnectionFunction",
-    "description": "Grants permission to delete a connection function",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "connection-function",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deleteconnectiongroup": {
     "name": "DeleteConnectionGroup",
     "description": "Grants permission to delete a connection group",
@@ -626,21 +589,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deletetruststore": {
-    "name": "DeleteTrustStore",
-    "description": "Grants permission to delete a trust store",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "trust-store",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deletevpcorigin": {
     "name": "DeleteVpcOrigin",
     "description": "Grants permission to delete a VPC origin",
@@ -656,21 +604,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describeconnectionfunction": {
-    "name": "DescribeConnectionFunction",
-    "description": "Grants permission to get a connection function summary",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "connection-function",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describefunction": {
     "name": "DescribeFunction",
     "description": "Grants permission to get a CloudFront function summary",
@@ -806,21 +739,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getconnectionfunction": {
-    "name": "GetConnectionFunction",
-    "description": "Grants permission to get a connection function's code",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "connection-function",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getconnectiongroup": {
     "name": "GetConnectionGroup",
     "description": "Grants permission to get information about a connection group",
@@ -1260,21 +1178,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "gettruststore": {
-    "name": "GetTrustStore",
-    "description": "Grants permission to get information about a trust store",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "trust-store",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getvpcorigin": {
     "name": "GetVpcOrigin",
     "description": "Grants permission to get the information about a VPC origin",
@@ -1329,14 +1232,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listconnectionfunctions": {
-    "name": "ListConnectionFunctions",
-    "description": "Grants permission to list the connection functions in your AWS account",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listconnectiongroups": {
     "name": "ListConnectionGroups",
     "description": "Grants permission to list the connection groups in your AWS account",
@@ -1393,21 +1288,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listdistributionsbyconnectionfunction": {
-    "name": "ListDistributionsByConnectionFunction",
-    "description": "Grants permission to list summaries for distributions associated with the specified connection function",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "connection-function",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listdistributionsbyconnectionmode": {
     "name": "ListDistributionsByConnectionMode",
     "description": "Grants permission to list the distributions by the specified connection mode",
@@ -1457,21 +1337,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listdistributionsbytruststore": {
-    "name": "ListDistributionsByTrustStore",
-    "description": "Grants permission to list summaries for distributions associated with the specified trust store",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "trust-store",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listdistributionsbyvpcoriginid": {
     "name": "ListDistributionsByVpcOriginId",
     "description": "Grants permission to list IDs for distributions associated with the specified VPC origin",
@@ -1656,12 +1521,6 @@
         "conditionKeys": [],
         "dependentActions": []
       },
-      {
-        "name": "connection-function",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "connection-group",
         "required": false,
@@ -1680,12 +1539,6 @@
         "conditionKeys": [],
         "dependentActions": []
       },
-      {
-        "name": "trust-store",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "vpcorigin",
         "required": false,
@@ -1696,14 +1549,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listtruststores": {
-    "name": "ListTrustStores",
-    "description": "Grants permission to list the trust stores in your AWS account",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listusages": {
     "name": "ListUsages",
     "isPermissionOnly": true,
@@ -1721,21 +1566,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "publishconnectionfunction": {
-    "name": "PublishConnectionFunction",
-    "description": "Grants permission to publish a connection function",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "connection-function",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "publishfunction": {
     "name": "PublishFunction",
     "description": "Grants permission to publish a CloudFront function",
@@ -1777,12 +1607,6 @@
         "conditionKeys": [],
         "dependentActions": []
       },
-      {
-        "name": "connection-function",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "connection-group",
         "required": false,
@@ -1807,12 +1631,6 @@
         "conditionKeys": [],
         "dependentActions": []
       },
-      {
-        "name": "trust-store",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "vpcorigin",
         "required": false,
@@ -1826,21 +1644,6 @@
     ],
     "dependentActions": []
   },
-  "testconnectionfunction": {
-    "name": "TestConnectionFunction",
-    "description": "Grants permission to test a connection function",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "connection-function",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "testfunction": {
     "name": "TestFunction",
     "description": "Grants permission to test a CloudFront function",
@@ -1867,12 +1670,6 @@
         "conditionKeys": [],
         "dependentActions": []
       },
-      {
-        "name": "connection-function",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "connection-group",
         "required": false,
@@ -1897,12 +1694,6 @@
         "conditionKeys": [],
         "dependentActions": []
       },
-      {
-        "name": "trust-store",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "vpcorigin",
         "required": false,
@@ -1960,21 +1751,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updateconnectionfunction": {
-    "name": "UpdateConnectionFunction",
-    "description": "Grants permission to update a connection function",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "connection-function",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "updateconnectiongroup": {
     "name": "UpdateConnectionGroup",
     "description": "Grants permission to update a connection group",
@@ -2224,21 +2000,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updatetruststore": {
-    "name": "UpdateTrustStore",
-    "description": "Grants permission to update a trust store",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "trust-store",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "updatevpcorigin": {
     "name": "UpdateVpcOrigin",
     "description": "Grants permission to update a VPC origin",

package/data/actions/cloudwatch.json

@@ -467,12 +467,6 @@
         "conditionKeys": [],
         "dependentActions": []
       },
-      {
-        "name": "alarm-mute-rule",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "insight-rule",
         "required": false,
@@ -498,15 +492,6 @@
           }
         ]
       },
-      {
-        "name": "CloudWatch-AlarmMuteRule",
-        "resourceTypes": [
-          {
-            "name": "alarm-mute-rule",
-            "required": true
-          }
-        ]
-      },
       {
         "name": "CloudWatch-InsightRule",
         "resourceTypes": [
@@ -703,12 +688,6 @@
         "conditionKeys": [],
         "dependentActions": []
       },
-      {
-        "name": "alarm-mute-rule",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "insight-rule",
         "required": false,
@@ -737,15 +716,6 @@
           }
         ]
       },
-      {
-        "name": "CloudWatch-AlarmMuteRule",
-        "resourceTypes": [
-          {
-            "name": "alarm-mute-rule",
-            "required": true
-          }
-        ]
-      },
       {
         "name": "CloudWatch-InsightRule",
         "resourceTypes": [
@@ -777,12 +747,6 @@
         "conditionKeys": [],
         "dependentActions": []
       },
-      {
-        "name": "alarm-mute-rule",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "insight-rule",
         "required": false,
@@ -810,15 +774,6 @@
           }
         ]
       },
-      {
-        "name": "CloudWatch-AlarmMuteRule",
-        "resourceTypes": [
-          {
-            "name": "alarm-mute-rule",
-            "required": true
-          }
-        ]
-      },
       {
         "name": "CloudWatch-InsightRule",
         "resourceTypes": [

package/data/actions/ecr.json

@@ -203,22 +203,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deletesigningconfiguration": {
-    "name": "DeleteSigningConfiguration",
-    "description": "Grants permission to delete the signing configuration for the registry",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "deregisterpulltimeupdateexclusion": {
-    "name": "DeregisterPullTimeUpdateExclusion",
-    "description": "Grants permission to deregister a pull time update exclusion",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describeimagereplicationstatus": {
     "name": "DescribeImageReplicationStatus",
     "description": "Grants permission to retrieve replication status about an image in a registry, including failure reason if replication fails",
@@ -249,21 +233,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describeimagesigningstatus": {
-    "name": "DescribeImageSigningStatus",
-    "description": "Grants permission to retrieve signing status about an image in a specified registry",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "repository",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describeimages": {
     "name": "DescribeImages",
     "description": "Grants permission to get metadata about the images in a repository, including image size, image tags, and creation date",
@@ -428,14 +397,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getsigningconfiguration": {
-    "name": "GetSigningConfiguration",
-    "description": "Grants permission to retrieve the signing configuration for the registry",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "initiatelayerupload": {
     "name": "InitiateLayerUpload",
     "description": "Grants permission to notify Amazon ECR that you intend to upload an image layer",
@@ -466,14 +427,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listpulltimeupdateexclusions": {
-    "name": "ListPullTimeUpdateExclusions",
-    "description": "Grants permission to list pull time update exclusions for the registry",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list the tags for an Amazon ECR resource",
@@ -588,22 +541,6 @@
       "iam:CreateServiceLinkedRole"
     ]
   },
-  "putsigningconfiguration": {
-    "name": "PutSigningConfiguration",
-    "description": "Grants permission to update the signing configuration for the registry",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "registerpulltimeupdateexclusion": {
-    "name": "RegisterPullTimeUpdateExclusion",
-    "description": "Grants permission to register a pull time update exclusion",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "replicateimage": {
     "name": "ReplicateImage",
     "isPermissionOnly": true,
@@ -700,21 +637,6 @@
     ],
     "dependentActions": []
   },
-  "updateimagestorageclass": {
-    "name": "UpdateImageStorageClass",
-    "description": "Grants permission to get update the storage class of a specified image within a specified repository",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "repository",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "updatepullthroughcacherule": {
     "name": "UpdatePullThroughCacheRule",
     "description": "Grants permission to update the pull-through cache rule",

package/data/actions/logs.json

@@ -1095,21 +1095,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "putloggroupdeletionprotection": {
-    "name": "PutLogGroupDeletionProtection",
-    "description": "Grants permission to enable or disable deletion protection for the specified log group",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "log-group",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "putmetricfilter": {
     "name": "PutMetricFilter",
     "description": "Grants permission to create or update a metric filter and associates it with the specified log group",

package/data/actions/sagemaker-unified-studio-mcp.json

@@ -1,7 +1,6 @@
 {
   "callprivilegedtool": {
     "name": "CallPrivilegedTool",
-    "isPermissionOnly": true,
     "description": "Grants permission to call privileged tools in MCP service",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -10,7 +9,6 @@
   },
   "callreadonlytool": {
     "name": "CallReadOnlyTool",
-    "isPermissionOnly": true,
     "description": "Grants permission to call read-only tools in MCP service",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -19,7 +17,6 @@
   },
   "invokemcp": {
     "name": "InvokeMcp",
-    "isPermissionOnly": true,
     "description": "Grants permission to use MCP service",
     "accessLevel": "Read",
     "resourceTypes": [],

package/data/actions/security-ir.json

@@ -89,7 +89,6 @@
         "dependentActions": [
           "iam:CreateServiceLinkedRole",
           "organizations:DescribeOrganization",
-          "organizations:ListAWSServiceAccessForOrganization",
           "organizations:ListDelegatedAdministrators"
         ]
       }
@@ -198,21 +197,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listinvestigations": {
-    "name": "ListInvestigations",
-    "description": "Grants permission to list investigations for a case",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "case",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listmemberships": {
     "name": "ListMemberships",
     "description": "Grants permission to list memberships",
@@ -245,21 +229,6 @@
     ],
     "dependentActions": []
   },
-  "sendfeedback": {
-    "name": "SendFeedback",
-    "description": "Grants permission to send feedback for investigation results",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "case",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to the specified resource",

package/data/resourceTypes/apigateway.json

@@ -464,7 +464,6 @@
       "apigateway:Request/DisableExecuteApiEndpoint",
       "apigateway:Request/EndpointType",
       "apigateway:Request/RouteAuthorizationType",
-      "apigateway:Request/SecurityPolicy",
       "apigateway:Resource/ApiKeyRequired",
       "apigateway:Resource/ApiName",
       "apigateway:Resource/AuthorizerType",
@@ -472,7 +471,6 @@
       "apigateway:Resource/DisableExecuteApiEndpoint",
       "apigateway:Resource/EndpointType",
       "apigateway:Resource/RouteAuthorizationType",
-      "apigateway:Resource/SecurityPolicy",
       "aws:ResourceTag/${TagKey}"
     ]
   },
@@ -487,7 +485,6 @@
       "apigateway:Request/DisableExecuteApiEndpoint",
       "apigateway:Request/EndpointType",
       "apigateway:Request/RouteAuthorizationType",
-      "apigateway:Request/SecurityPolicy",
       "aws:ResourceTag/${TagKey}"
     ]
   },

package/data/resourceTypes/cloudfront.json

@@ -84,19 +84,5 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
-  },
-  "trust-store": {
-    "key": "trust-store",
-    "arn": "arn:${Partition}:cloudfront::${Account}:trust-store/${Id}",
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ]
-  },
-  "connection-function": {
-    "key": "connection-function",
-    "arn": "arn:${Partition}:cloudfront::${Account}:connection-function/${Id}",
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ]
   }
 }

package/data/resourceTypes/omics.json

@@ -62,6 +62,10 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "taggingresource": {
+    "key": "TaggingResource",
+    "arn": "arn:${Partition}:omics:${Region}:${Account}:tag/${TagKey}"
+  },
   "taskresource": {
     "key": "TaskResource",
     "arn": "arn:${Partition}:omics:${Region}:${Account}:task/${Id}"

package/data/serviceNames.json

@@ -347,7 +347,7 @@
   "sagemaker-data-science-assistant": "Amazon SageMaker data science assistant",
   "sagemaker-geospatial": "Amazon SageMaker geospatial capabilities",
   "sagemaker-mlflow": "Amazon SageMaker with MLflow",
-  "sagemaker-unified-studio-mcp": "Amazon SageMaker Unified Studio MCP",
+  "sagemaker-unified-studio-mcp": "AWS SageMaker Unified Studio MCP is a managed MCP solution for AWS data processing services like EMR, Glue, Athena",
   "savingsplans": "AWS Savings Plans",
   "scheduler": "Amazon EventBridge Scheduler",
   "schemas": "Amazon EventBridge Schemas",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.15.202511261",
+  "version": "0.15.202511271",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2025-11-26T04:49:56.318Z",
+  "updatedAt": "2025-11-27T04:49:30.928Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",