@cloud-copilot/iam-data 0.15.202512061 → 0.15.202512091

package/data/actions/aco-automation.json

@@ -0,0 +1,252 @@
+{
+  "associateaccounts": {
+    "name": "AssociateAccounts",
+    "description": "Grants permission to associate member accounts with the management account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createautomationrule": {
+    "name": "CreateAutomationRule",
+    "description": "Grants permission to create automation rule",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deleteautomationrule": {
+    "name": "DeleteAutomationRule",
+    "description": "Grants permission to delete automation rule",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AutomationRule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "disassociateaccounts": {
+    "name": "DisassociateAccounts",
+    "description": "Grants permission to disassociate member accounts from the management account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getautomationevent": {
+    "name": "GetAutomationEvent",
+    "description": "Grants permission to get automation event details",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getautomationrule": {
+    "name": "GetAutomationRule",
+    "description": "Grants permission to get automation rule",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "AutomationRule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "getenrollmentconfiguration": {
+    "name": "GetEnrollmentConfiguration",
+    "description": "Grants permission to get enrollment configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listaccounts": {
+    "name": "ListAccounts",
+    "description": "Grants permission to list the accounts in your organization that are enrolled in Compute Optimizer and whether they have enabled the Automation feature",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautomationeventsteps": {
+    "name": "ListAutomationEventSteps",
+    "description": "Grants permission to list automation event steps",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautomationeventsummaries": {
+    "name": "ListAutomationEventSummaries",
+    "description": "Grants permission to list automation event summaries",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautomationevents": {
+    "name": "ListAutomationEvents",
+    "description": "Grants permission to list automation events",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautomationrulepreview": {
+    "name": "ListAutomationRulePreview",
+    "description": "Grants permission to list automation rule preview results",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:DescribeVolumes"
+    ]
+  },
+  "listautomationrulepreviewsummaries": {
+    "name": "ListAutomationRulePreviewSummaries",
+    "description": "Grants permission to list automation rule preview summaries",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautomationrules": {
+    "name": "ListAutomationRules",
+    "description": "Grants permission to list automation rules",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listrecommendedactionsummaries": {
+    "name": "ListRecommendedActionSummaries",
+    "description": "Grants permission to list recommended action summaries",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listrecommendedactions": {
+    "name": "ListRecommendedActions",
+    "description": "Grants permission to list recommended actions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:DescribeVolumes"
+    ]
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list tags for automation rule",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "AutomationRule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "rollbackautomationevent": {
+    "name": "RollbackAutomationEvent",
+    "description": "Grants permission to initiate a rollback for an automation event",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startautomationevent": {
+    "name": "StartAutomationEvent",
+    "description": "Grants permission to initiate an on-demand automation for a recommended action",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to add tags to automation rule",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "AutomationRule",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove tags from automation rule",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "AutomationRule",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updateautomationrule": {
+    "name": "UpdateAutomationRule",
+    "description": "Grants permission to update automation rule",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AutomationRule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "updateenrollmentconfiguration": {
+    "name": "UpdateEnrollmentConfiguration",
+    "description": "Grants permission to update enrollment configuration for the Compute Optimizer automation feature",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/aidevops.json

@@ -283,14 +283,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "invokeagent": {
-    "name": "InvokeAgent",
-    "description": "Grants permission to invoke an agent",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listagentspaces": {
     "name": "ListAgentSpaces",
     "description": "Grants permission to list agentspace",

package/data/actions/bcm-data-exports.json

@@ -9,6 +9,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "billingview",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -186,6 +192,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "billingview",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [

package/data/actions/bedrock.json

@@ -927,6 +927,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteenforcedguardrailconfiguration": {
+    "name": "DeleteEnforcedGuardrailConfiguration",
+    "description": "Grants permission to delete account-level enforced guardrail configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteflow": {
     "name": "DeleteFlow",
     "description": "Grants permission to delete a prompt flow",
@@ -1145,7 +1153,19 @@
     "resourceTypes": [
       {
         "name": "custom-model",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "guardrail",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "guardrail-profile",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -2025,7 +2045,19 @@
     "resourceTypes": [
       {
         "name": "custom-model",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "guardrail",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "guardrail-profile",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -2588,6 +2620,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listenforcedguardrailsconfiguration": {
+    "name": "ListEnforcedGuardrailsConfiguration",
+    "description": "Grants permission to list account-level enforced guardrail configurations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listevaluationjobs": {
     "name": "ListEvaluationJobs",
     "description": "Grants permission to get the list of evaluation jobs that you have submitted",
@@ -3093,6 +3133,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putenforcedguardrailconfiguration": {
+    "name": "PutEnforcedGuardrailConfiguration",
+    "description": "Grants permission to set account-level enforced guardrail configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putfoundationmodelentitlement": {
     "name": "PutFoundationModelEntitlement",
     "description": "Grants permission to put entitlement to access a foundation model",
@@ -3132,7 +3180,19 @@
     "resourceTypes": [
       {
         "name": "custom-model",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "guardrail",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "guardrail-profile",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -3862,6 +3922,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatecustommodeldeployment": {
+    "name": "UpdateCustomModelDeployment",
+    "description": "Grants permission to update an existing custom model deployment with a new custom model",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "custom-model",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "custom-model-deployment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatedataautomationproject": {
     "name": "UpdateDataAutomationProject",
     "description": "Grants permission to update a data automation project",

package/data/actions/ce.json

@@ -496,6 +496,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcostcategoryresourceassociations": {
+    "name": "ListCostCategoryResourceAssociations",
+    "description": "Grants permission to retrieve resource associations of all Cost Categories defined in the account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listsavingsplanspurchaserecommendationgeneration": {
     "name": "ListSavingsPlansPurchaseRecommendationGeneration",
     "description": "Grants permission to retrieve a list of your historical recommendation generations",

package/data/actions/healthlake.json

@@ -35,6 +35,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],

package/data/actions/identitystore.json

@@ -508,6 +508,25 @@
     ],
     "dependentActions": []
   },
+  "reserveuser": {
+    "name": "ReserveUser",
+    "description": "Grants permission to reserve a user by getting a userId",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Identitystore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "kms:Decrypt"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "identitystore:PrimaryRegion"
+    ],
+    "dependentActions": []
+  },
   "updategroup": {
     "name": "UpdateGroup",
     "description": "Grants permission to update information about a group in the specified IdentityStore",

package/data/actions/nova-act.json

@@ -0,0 +1,276 @@
+{
+  "createact": {
+    "name": "CreateAct",
+    "description": "Grants permission to create a new AI task (act) within a session that can interact with tools and perform specific actions",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createsession": {
+    "name": "CreateSession",
+    "description": "Grants permission to create a new session context within a workflow run to manage conversation state and acts",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createworkflowdefinition": {
+    "name": "CreateWorkflowDefinition",
+    "description": "Grants permission to create a new workflow definition template that can be used to execute multiple workflow runs",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createworkflowrun": {
+    "name": "CreateWorkflowRun",
+    "description": "Grants permission to create a new execution instance of a workflow definition with specified parameters",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteworkflowdefinition": {
+    "name": "DeleteWorkflowDefinition",
+    "description": "Grants permission to delete a workflow definition and all associated resources",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteworkflowrun": {
+    "name": "DeleteWorkflowRun",
+    "description": "Grants permission to terminate and clean up a workflow run, stopping all associated acts and sessions",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getworkflowdefinition": {
+    "name": "GetWorkflowDefinition",
+    "description": "Grants permission to retrieve details and configuration of a specific workflow definition",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getworkflowrun": {
+    "name": "GetWorkflowRun",
+    "description": "Grants permission to retrieve the current state, configuration, and execution details of a workflow run",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invokeactstep": {
+    "name": "InvokeActStep",
+    "description": "Grants permission to execute the next step of an act, processing tool call results and returning new tool calls if needed",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listacts": {
+    "name": "ListActs",
+    "description": "Grants permission to list all acts within a specific session with their current status and execution details",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listmodels": {
+    "name": "ListModels",
+    "description": "Grants permission to list all available AI models that can be used for workflow execution, including their status and compatibility information",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listsessions": {
+    "name": "ListSessions",
+    "description": "Grants permission to list all sessions within a specific workflow run",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listworkflowdefinitions": {
+    "name": "ListWorkflowDefinitions",
+    "description": "Grants permission to list all workflow definitions in your account with optional filtering and pagination",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listworkflowruns": {
+    "name": "ListWorkflowRuns",
+    "description": "Grants permission to list all workflow runs for a specific workflow definition with optional filtering and pagination",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateact": {
+    "name": "UpdateAct",
+    "description": "Grants permission to update an existing act's configuration, status, or error information",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateworkflowrun": {
+    "name": "UpdateWorkflowRun",
+    "description": "Grants permission to update the configuration or state of an active workflow run",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/vpce.json

@@ -4,7 +4,20 @@
     "isPermissionOnly": true,
     "description": "Grants permission to manage multi-region VPC endpoints and VPC endpoint service configurations",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "vpc-endpoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "vpc-endpoint-service",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   }

package/data/conditionKeys/aco-automation.json

@@ -0,0 +1,17 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/nova-act.json

@@ -0,0 +1 @@
+{}

package/data/resourceTypes/aco-automation.json

@@ -0,0 +1,9 @@
+{
+  "automationrule": {
+    "key": "AutomationRule",
+    "arn": "arn:${Partition}:compute-optimizer::${Account}:automation-rule/${RuleId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

package/data/resourceTypes/bcm-data-exports.json

@@ -9,5 +9,12 @@
   "table": {
     "key": "table",
     "arn": "arn:${Partition}:bcm-data-exports:${Region}:${Account}:table/${Identifier}"
+  },
+  "billingview": {
+    "key": "billingview",
+    "arn": "arn:${Partition}:billing::${Account}:billingview/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/nova-act.json

@@ -0,0 +1,10 @@
+{
+  "workflow-definition": {
+    "key": "workflow-definition",
+    "arn": "arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/${WorkflowDefinitionName}"
+  },
+  "workflow-run": {
+    "key": "workflow-run",
+    "arn": "arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/${WorkflowDefinitionName}/workflow-run/${WorkflowRunId}"
+  }
+}

package/data/resourceTypes/vpce.json

@@ -1 +1,10 @@
-{}
+{
+  "vpc-endpoint": {
+    "key": "vpc-endpoint",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint/${VpcEndpointId}"
+  },
+  "vpc-endpoint-service": {
+    "key": "vpc-endpoint-service",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/${VpcEndpointServiceId}"
+  }
+}

package/data/serviceNames.json

@@ -5,6 +5,7 @@
   "account": "AWS Account Management",
   "acm": "AWS Certificate Manager",
   "acm-pca": "AWS Private Certificate Authority",
+  "aco-automation": "AWS Compute Optimizer Automation",
   "action-recommendations": "AWS Action Recommendations",
   "activate": "AWS Activate",
   "aidevops": "AWS DevOps Agent Service",
@@ -121,7 +122,6 @@
   "dax": "Amazon DynamoDB Accelerator (DAX)",
   "dbqms": "Database Query Metadata Service",
   "deadline": "AWS Deadline Cloud",
-  "deepcomposer": "AWS DeepComposer",
   "deepracer": "AWS DeepRacer",
   "detective": "Amazon Detective",
   "devicefarm": "AWS Device Farm",
@@ -278,6 +278,7 @@
   "nimble": "Amazon Nimble Studio",
   "notifications": "AWS User Notifications",
   "notifications-contacts": "AWS User Notifications Contacts",
+  "nova-act": "AWS service to manage AI agents for UI workflows",
   "oam": "Amazon CloudWatch Observability Access Manager",
   "observabilityadmin": "Amazon CloudWatch Observability Admin Service",
   "odb": "AWS Service - Oracle Database@AWS",

package/data/services.json

@@ -5,6 +5,7 @@
   "account",
   "acm",
   "acm-pca",
+  "aco-automation",
   "action-recommendations",
   "activate",
   "aidevops",
@@ -121,7 +122,6 @@
   "dax",
   "dbqms",
   "deadline",
-  "deepcomposer",
   "deepracer",
   "detective",
   "devicefarm",
@@ -278,6 +278,7 @@
   "nimble",
   "notifications",
   "notifications-contacts",
+  "nova-act",
   "oam",
   "observabilityadmin",
   "odb",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.15.202512061",
+  "version": "0.15.202512091",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2025-12-06T04:47:37.991Z",
+  "updatedAt": "2025-12-09T04:52:55.761Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",

package/data/actions/deepcomposer.json

@@ -1,316 +0,0 @@
-{
-  "associatecoupon": {
-    "name": "AssociateCoupon",
-    "isPermissionOnly": true,
-    "description": "Grants permission to associate a DeepComposer coupon (or DSN) with the account associated with the sender of the request",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "createaudio": {
-    "name": "CreateAudio",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create an audio file by converting the midi composition into a wav or mp3 file",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "audio",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "createcomposition": {
-    "name": "CreateComposition",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create a multi-track midi composition",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "composition",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
-    "dependentActions": []
-  },
-  "createmodel": {
-    "name": "CreateModel",
-    "isPermissionOnly": true,
-    "description": "Grants permission to start creating/training a generative-model that is able to perform inference against the user-provided piano-melody to create a multi-track midi composition",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "model",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
-    "dependentActions": []
-  },
-  "deletecomposition": {
-    "name": "DeleteComposition",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete the composition",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "composition",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "deletemodel": {
-    "name": "DeleteModel",
-    "description": "Grants permission to delete the model",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "model",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getcomposition": {
-    "name": "GetComposition",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get information about the composition",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "composition",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
-    "dependentActions": []
-  },
-  "getmodel": {
-    "name": "GetModel",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get information about the model",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "model",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
-    "dependentActions": []
-  },
-  "getsamplemodel": {
-    "name": "GetSampleModel",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get information about the sample/pre-trained DeepComposer model",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "model",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listcompositions": {
-    "name": "ListCompositions",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list all the compositions owned by the sender of the request",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "composition",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listmodels": {
-    "name": "ListModels",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list all the models owned by the sender of the request",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "model",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listsamplemodels": {
-    "name": "ListSampleModels",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list all the sample/pre-trained models provided by the DeepComposer service",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "model",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listtagsforresource": {
-    "name": "ListTagsForResource",
-    "description": "Grants permission to list tags for a resource",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "composition",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "model",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
-    "dependentActions": []
-  },
-  "listtrainingtopics": {
-    "name": "ListTrainingTopics",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list all the training options or topic for creating/training a model",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "model",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "tagresource": {
-    "name": "TagResource",
-    "description": "Grants permission to tag a resource",
-    "accessLevel": "Tagging",
-    "resourceTypes": [
-      {
-        "name": "composition",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "model",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
-    ],
-    "dependentActions": []
-  },
-  "untagresource": {
-    "name": "UntagResource",
-    "description": "Grants permission to untag a resource",
-    "accessLevel": "Tagging",
-    "resourceTypes": [
-      {
-        "name": "composition",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "model",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
-    ],
-    "dependentActions": []
-  },
-  "updatecomposition": {
-    "name": "UpdateComposition",
-    "isPermissionOnly": true,
-    "description": "Grants permission to modify the mutable properties associated with a composition",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "composition",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "updatemodel": {
-    "name": "UpdateModel",
-    "isPermissionOnly": true,
-    "description": "Grants permission to to modify the mutable properties associated with a model",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "model",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  }
-}

package/data/conditionKeys/deepcomposer.json

@@ -1,17 +0,0 @@
-{
-  "aws:requesttag/${tagkey}": {
-    "key": "aws:RequestTag/${TagKey}",
-    "description": "Filters access by actions based on the presence of tag key-value pairs in the request",
-    "type": "String"
-  },
-  "aws:resourcetag/${tagkey}": {
-    "key": "aws:ResourceTag/${TagKey}",
-    "description": "Filters access by actions based on tag key-value pairs attached to the resource",
-    "type": "String"
-  },
-  "aws:tagkeys": {
-    "key": "aws:TagKeys",
-    "description": "Filters access by actions based on the presence of tag keys in the request",
-    "type": "ArrayOfString"
-  }
-}

package/data/resourceTypes/deepcomposer.json

@@ -1,20 +0,0 @@
-{
-  "model": {
-    "key": "model",
-    "arn": "arn:${Partition}:deepcomposer:${Region}:${Account}:model/${ModelId}",
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ]
-  },
-  "composition": {
-    "key": "composition",
-    "arn": "arn:${Partition}:deepcomposer:${Region}:${Account}:composition/${CompositionId}",
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ]
-  },
-  "audio": {
-    "key": "audio",
-    "arn": "arn:${Partition}:deepcomposer:${Region}:${Account}:audio/${AudioId}"
-  }
-}