@cloud-copilot/iam-data 0.15.202511271 → 0.15.202512091

package/data/actions/datazone.json

@@ -722,6 +722,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdataexportconfiguration": {
+    "name": "GetDataExportConfiguration",
+    "description": "Grants permission to retrieve DataZone catalog data export configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdataproduct": {
     "name": "GetDataProduct",
     "description": "Grants permission to get data product",
@@ -1407,6 +1415,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putdataexportconfiguration": {
+    "name": "PutDataExportConfiguration",
+    "description": "Grants permission to create and update DataZone catalog data export configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putdomainsharingpolicy": {
     "name": "PutDomainSharingPolicy",
     "isPermissionOnly": true,

package/data/actions/ecr.json

@@ -203,6 +203,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletesigningconfiguration": {
+    "name": "DeleteSigningConfiguration",
+    "description": "Grants permission to delete the signing configuration for the registry",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deregisterpulltimeupdateexclusion": {
+    "name": "DeregisterPullTimeUpdateExclusion",
+    "description": "Grants permission to deregister a pull time update exclusion",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeimagereplicationstatus": {
     "name": "DescribeImageReplicationStatus",
     "description": "Grants permission to retrieve replication status about an image in a registry, including failure reason if replication fails",
@@ -233,6 +249,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeimagesigningstatus": {
+    "name": "DescribeImageSigningStatus",
+    "description": "Grants permission to retrieve signing status about an image in a specified registry",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeimages": {
     "name": "DescribeImages",
     "description": "Grants permission to get metadata about the images in a repository, including image size, image tags, and creation date",
@@ -397,6 +428,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getsigningconfiguration": {
+    "name": "GetSigningConfiguration",
+    "description": "Grants permission to retrieve the signing configuration for the registry",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "initiatelayerupload": {
     "name": "InitiateLayerUpload",
     "description": "Grants permission to notify Amazon ECR that you intend to upload an image layer",
@@ -427,6 +466,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listpulltimeupdateexclusions": {
+    "name": "ListPullTimeUpdateExclusions",
+    "description": "Grants permission to list pull time update exclusions for the registry",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list the tags for an Amazon ECR resource",
@@ -541,6 +588,22 @@
       "iam:CreateServiceLinkedRole"
     ]
   },
+  "putsigningconfiguration": {
+    "name": "PutSigningConfiguration",
+    "description": "Grants permission to update the signing configuration for the registry",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "registerpulltimeupdateexclusion": {
+    "name": "RegisterPullTimeUpdateExclusion",
+    "description": "Grants permission to register a pull time update exclusion",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "replicateimage": {
     "name": "ReplicateImage",
     "isPermissionOnly": true,
@@ -637,6 +700,21 @@
     ],
     "dependentActions": []
   },
+  "updateimagestorageclass": {
+    "name": "UpdateImageStorageClass",
+    "description": "Grants permission to get update the storage class of a specified image within a specified repository",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatepullthroughcacherule": {
     "name": "UpdatePullThroughCacheRule",
     "description": "Grants permission to update the pull-through cache rule",

package/data/actions/eks.json

@@ -115,6 +115,24 @@
     ],
     "dependentActions": []
   },
+  "createcapability": {
+    "name": "CreateCapability",
+    "description": "Grants permission to create a capability for an Amazon EKS cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createcluster": {
     "name": "CreateCluster",
     "description": "Grants permission to create an Amazon EKS cluster",
@@ -235,6 +253,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletecapability": {
+    "name": "DeleteCapability",
+    "description": "Grants permission to delete a capability from an Amazon EKS cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capability",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletecluster": {
     "name": "DeleteCluster",
     "description": "Grants permission to delete an Amazon EKS cluster",
@@ -371,6 +404,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describecapability": {
+    "name": "DescribeCapability",
+    "description": "Grants permission to describe a capability for an Amazon EKS cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "capability",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describecluster": {
     "name": "DescribeCluster",
     "description": "Grants permission to retrieve descriptive information about an Amazon EKS cluster",
@@ -516,6 +564,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "capability",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "nodegroup",
         "required": false,
@@ -613,6 +667,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcapabilities": {
+    "name": "ListCapabilities",
+    "description": "Grants permission to list capabilities for an Amazon EKS cluster",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listclusters": {
     "name": "ListClusters",
     "description": "Grants permission to list the Amazon EKS clusters in your AWS account (in the specified or default region)",
@@ -745,6 +814,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "capability",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "cluster",
         "required": false,
@@ -802,6 +877,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "capability",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "nodegroup",
         "required": false,
@@ -873,6 +954,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "capability",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "cluster",
         "required": false,
@@ -939,6 +1026,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "capability",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "cluster",
         "required": false,
@@ -1023,6 +1116,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatecapability": {
+    "name": "UpdateCapability",
+    "description": "Grants permission to update a capability for an Amazon EKS cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capability",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateclusterconfig": {
     "name": "UpdateClusterConfig",
     "description": "Grants permission to update Amazon EKS cluster configurations (eg: API server endpoint access)",

package/data/actions/healthlake.json

@@ -35,6 +35,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],

package/data/actions/identitystore.json

@@ -508,6 +508,25 @@
     ],
     "dependentActions": []
   },
+  "reserveuser": {
+    "name": "ReserveUser",
+    "description": "Grants permission to reserve a user by getting a userId",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Identitystore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
+    "dependentActions": []
+  },
   "updategroup": {
     "name": "UpdateGroup",
     "description": "Grants permission to update information about a group in the specified IdentityStore",