@cloud-copilot/iam-data 0.15.202512061 → 0.15.202512101

package/data/actions/nova-act.json

@@ -0,0 +1,276 @@
+{
+  "createact": {
+    "name": "CreateAct",
+    "description": "Grants permission to create a new AI task (act) within a session that can interact with tools and perform specific actions",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createsession": {
+    "name": "CreateSession",
+    "description": "Grants permission to create a new session context within a workflow run to manage conversation state and acts",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createworkflowdefinition": {
+    "name": "CreateWorkflowDefinition",
+    "description": "Grants permission to create a new workflow definition template that can be used to execute multiple workflow runs",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createworkflowrun": {
+    "name": "CreateWorkflowRun",
+    "description": "Grants permission to create a new execution instance of a workflow definition with specified parameters",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteworkflowdefinition": {
+    "name": "DeleteWorkflowDefinition",
+    "description": "Grants permission to delete a workflow definition and all associated resources",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteworkflowrun": {
+    "name": "DeleteWorkflowRun",
+    "description": "Grants permission to terminate and clean up a workflow run, stopping all associated acts and sessions",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getworkflowdefinition": {
+    "name": "GetWorkflowDefinition",
+    "description": "Grants permission to retrieve details and configuration of a specific workflow definition",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getworkflowrun": {
+    "name": "GetWorkflowRun",
+    "description": "Grants permission to retrieve the current state, configuration, and execution details of a workflow run",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invokeactstep": {
+    "name": "InvokeActStep",
+    "description": "Grants permission to execute the next step of an act, processing tool call results and returning new tool calls if needed",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listacts": {
+    "name": "ListActs",
+    "description": "Grants permission to list all acts within a specific session with their current status and execution details",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listmodels": {
+    "name": "ListModels",
+    "description": "Grants permission to list all available AI models that can be used for workflow execution, including their status and compatibility information",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listsessions": {
+    "name": "ListSessions",
+    "description": "Grants permission to list all sessions within a specific workflow run",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listworkflowdefinitions": {
+    "name": "ListWorkflowDefinitions",
+    "description": "Grants permission to list all workflow definitions in your account with optional filtering and pagination",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listworkflowruns": {
+    "name": "ListWorkflowRuns",
+    "description": "Grants permission to list all workflow runs for a specific workflow definition with optional filtering and pagination",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateact": {
+    "name": "UpdateAct",
+    "description": "Grants permission to update an existing act's configuration, status, or error information",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateworkflowrun": {
+    "name": "UpdateWorkflowRun",
+    "description": "Grants permission to update the configuration or state of an active workflow run",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workflow-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow-run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/rds.json

@@ -53,6 +53,12 @@
     "description": "Grants permission to add metadata tags to an Amazon RDS resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "auto-backup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "cev",
         "required": false,
@@ -65,6 +71,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "cluster-auto-backup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "cluster-endpoint",
         "required": false,
@@ -2183,6 +2195,12 @@
     "description": "Grants permission to list all tags on an Amazon RDS resource",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "auto-backup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "cev",
         "required": false,
@@ -2195,6 +2213,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "cluster-auto-backup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "cluster-endpoint",
         "required": false,
@@ -2755,7 +2779,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "rds:AddTagsToResource"
+    ]
   },
   "promotereadreplicadbcluster": {
     "name": "PromoteReadReplicaDBCluster",
@@ -2930,6 +2956,12 @@
     "description": "Grants permission to remove metadata tags from an Amazon RDS resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "auto-backup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "cev",
         "required": false,
@@ -2942,6 +2974,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "cluster-auto-backup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "cluster-endpoint",
         "required": false,
@@ -3491,7 +3529,9 @@
         "name": "auto-backup",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "rds:AddTagsToResource"
+        ]
       },
       {
         "name": "db",
@@ -3500,7 +3540,11 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "rds:req-tag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "startexporttask": {

package/data/actions/vpce.json

@@ -4,7 +4,20 @@
     "isPermissionOnly": true,
     "description": "Grants permission to manage multi-region VPC endpoints and VPC endpoint service configurations",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "vpc-endpoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "vpc-endpoint-service",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   }

package/data/conditionKeys/aco-automation.json

@@ -0,0 +1,17 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/nova-act.json

@@ -0,0 +1 @@
+{}

package/data/resourceTypes/aco-automation.json

@@ -0,0 +1,9 @@
+{
+  "automationrule": {
+    "key": "AutomationRule",
+    "arn": "arn:${Partition}:compute-optimizer::${Account}:automation-rule/${RuleId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

package/data/resourceTypes/bcm-data-exports.json

@@ -9,5 +9,12 @@
   "table": {
     "key": "table",
     "arn": "arn:${Partition}:bcm-data-exports:${Region}:${Account}:table/${Identifier}"
+  },
+  "billingview": {
+    "key": "billingview",
+    "arn": "arn:${Partition}:billing::${Account}:billingview/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/nova-act.json

@@ -0,0 +1,10 @@
+{
+  "workflow-definition": {
+    "key": "workflow-definition",
+    "arn": "arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/${WorkflowDefinitionName}"
+  },
+  "workflow-run": {
+    "key": "workflow-run",
+    "arn": "arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/${WorkflowDefinitionName}/workflow-run/${WorkflowRunId}"
+  }
+}

package/data/resourceTypes/rds.json

@@ -16,11 +16,17 @@
   },
   "cluster-auto-backup": {
     "key": "cluster-auto-backup",
-    "arn": "arn:${Partition}:rds:${Region}:${Account}:cluster-auto-backup:${DbClusterAutomatedBackupId}"
+    "arn": "arn:${Partition}:rds:${Region}:${Account}:cluster-auto-backup:${DbClusterAutomatedBackupId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "auto-backup": {
     "key": "auto-backup",
-    "arn": "arn:${Partition}:rds:${Region}:${Account}:auto-backup:${DbInstanceAutomatedBackupId}"
+    "arn": "arn:${Partition}:rds:${Region}:${Account}:auto-backup:${DbInstanceAutomatedBackupId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "cluster-endpoint": {
     "key": "cluster-endpoint",

package/data/resourceTypes/vpce.json

@@ -1 +1,10 @@
-{}
+{
+  "vpc-endpoint": {
+    "key": "vpc-endpoint",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint/${VpcEndpointId}"
+  },
+  "vpc-endpoint-service": {
+    "key": "vpc-endpoint-service",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-service/${VpcEndpointServiceId}"
+  }
+}

package/data/serviceNames.json

@@ -5,6 +5,7 @@
   "account": "AWS Account Management",
   "acm": "AWS Certificate Manager",
   "acm-pca": "AWS Private Certificate Authority",
+  "aco-automation": "AWS Compute Optimizer Automation",
   "action-recommendations": "AWS Action Recommendations",
   "activate": "AWS Activate",
   "aidevops": "AWS DevOps Agent Service",
@@ -121,7 +122,6 @@
   "dax": "Amazon DynamoDB Accelerator (DAX)",
   "dbqms": "Database Query Metadata Service",
   "deadline": "AWS Deadline Cloud",
-  "deepcomposer": "AWS DeepComposer",
   "deepracer": "AWS DeepRacer",
   "detective": "Amazon Detective",
   "devicefarm": "AWS Device Farm",
@@ -278,6 +278,7 @@
   "nimble": "Amazon Nimble Studio",
   "notifications": "AWS User Notifications",
   "notifications-contacts": "AWS User Notifications Contacts",
+  "nova-act": "AWS service to manage AI agents for UI workflows",
   "oam": "Amazon CloudWatch Observability Access Manager",
   "observabilityadmin": "Amazon CloudWatch Observability Admin Service",
   "odb": "AWS Service - Oracle Database@AWS",

package/data/services.json

@@ -5,6 +5,7 @@
   "account",
   "acm",
   "acm-pca",
+  "aco-automation",
   "action-recommendations",
   "activate",
   "aidevops",
@@ -121,7 +122,6 @@
   "dax",
   "dbqms",
   "deadline",
-  "deepcomposer",
   "deepracer",
   "detective",
   "devicefarm",
@@ -278,6 +278,7 @@
   "nimble",
   "notifications",
   "notifications-contacts",
+  "nova-act",
   "oam",
   "observabilityadmin",
   "odb",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.15.202512061",
+  "version": "0.15.202512101",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2025-12-06T04:47:37.991Z",
+  "updatedAt": "2025-12-10T04:56:34.711Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",