@cloud-copilot/iam-data 0.15.202512111 → 0.15.202512131

package/data/actions/cognito-identity.json

@@ -15,7 +15,9 @@
     "description": "Grants permission to delete identities from an identity pool. You can specify a list of 1-60 identities that you want to delete",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "cognito-identity:IdentityPoolArn"
+    ],
     "dependentActions": []
   },
   "deleteidentitypool": {
@@ -38,7 +40,9 @@
     "description": "Grants permission to return metadata related to the given identity, including when the identity was created and any associated linked logins",
     "accessLevel": "Read",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "cognito-identity:IdentityPoolArn"
+    ],
     "dependentActions": []
   },
   "describeidentitypool": {
@@ -61,7 +65,12 @@
     "description": "Grants permission to return credentials for the provided identity ID",
     "accessLevel": "Read",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "cognito-identity-unauth:IdentityPoolArn",
+      "cognito-identity-unauth:AccountId",
+      "cognito-identity-auth:IdentityPoolArn",
+      "cognito-identity-auth:AccountId"
+    ],
     "dependentActions": []
   },
   "getid": {
@@ -69,7 +78,12 @@
     "description": "Grants permission to generate (or retrieve) a Cognito ID. Supplying multiple logins will create an implicit linked account",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "cognito-identity-unauth:IdentityPoolArn",
+      "cognito-identity-unauth:AccountId",
+      "cognito-identity-auth:IdentityPoolArn",
+      "cognito-identity-auth:AccountId"
+    ],
     "dependentActions": []
   },
   "getidentitypoolanalytics": {
@@ -137,7 +151,12 @@
     "description": "Grants permission to get an OpenID token, using a known Cognito ID",
     "accessLevel": "Read",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "cognito-identity-unauth:IdentityPoolArn",
+      "cognito-identity-unauth:AccountId",
+      "cognito-identity-auth:IdentityPoolArn",
+      "cognito-identity-auth:AccountId"
+    ],
     "dependentActions": []
   },
   "getopenidtokenfordeveloperidentity": {
@@ -261,7 +280,7 @@
     "resourceTypes": [
       {
         "name": "identitypool",
-        "required": false,
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -292,7 +311,10 @@
     "description": "Grants permission to unlink a federated identity from an existing account",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "cognito-identity-auth:IdentityPoolArn",
+      "cognito-identity-auth:AccountId"
+    ],
     "dependentActions": []
   },
   "untagresource": {
@@ -302,7 +324,7 @@
     "resourceTypes": [
       {
         "name": "identitypool",
-        "required": false,
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }

package/data/actions/groundstation.json

@@ -36,6 +36,17 @@
     ],
     "dependentActions": []
   },
+  "createdataflowendpointgroupv2": {
+    "name": "CreateDataflowEndpointGroupV2",
+    "description": "Grants permission to create a data flow endpoint group using the V2 operation",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createephemeris": {
     "name": "CreateEphemeris",
     "description": "Grants permission to create an ephemeris item",

package/data/actions/network-security-director.json

@@ -7,18 +7,18 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getnetworksecurityscan": {
-    "name": "GetNetworkSecurityScan",
-    "description": "Grants permission to get the status of network security scan",
+  "getresource": {
+    "name": "GetResource",
+    "description": "Grants permission to get a resource",
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getresource": {
-    "name": "GetResource",
-    "description": "Grants permission to get a resource",
-    "accessLevel": "Read",
+  "listaccountsummaries": {
+    "name": "ListAccountSummaries",
+    "description": "Grants permission to list account summaries for an account",
+    "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
@@ -55,14 +55,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "startnetworksecurityscan": {
-    "name": "StartNetworkSecurityScan",
-    "description": "Grants permission to start a network security scan",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "updatefinding": {
     "name": "UpdateFinding",
     "description": "Grants permission to update the status of a finding",

package/data/conditionKeys/cognito-identity.json

@@ -1,17 +1,42 @@
 {
   "aws:requesttag/${tagkey}": {
     "key": "aws:RequestTag/${TagKey}",
-    "description": "Filters actions based on the presence of tag key-value pairs in the request",
+    "description": "Filters access by tag key-value pairs in the request",
     "type": "String"
   },
   "aws:resourcetag/${tagkey}": {
     "key": "aws:ResourceTag/${TagKey}",
-    "description": "Filters actions based on tag key-value pairs attached to the resource",
+    "description": "Filters access by tag key-value pairs attached to the resource",
     "type": "String"
   },
   "aws:tagkeys": {
     "key": "aws:TagKeys",
     "description": "Filters access by a key that is present in the request",
     "type": "ArrayOfString"
+  },
+  "cognito-identity-auth:accountid": {
+    "key": "cognito-identity-auth:AccountId",
+    "description": "Filters access by the owning AWS account ID for identity pool authenticated users. Applies to unauthenticated (public) API operations",
+    "type": "String"
+  },
+  "cognito-identity-auth:identitypoolarn": {
+    "key": "cognito-identity-auth:IdentityPoolArn",
+    "description": "Filters access by the identity pool ID for a given authenticated-user identity ID. Applies to unauthenticated (public) API operations",
+    "type": "ARN"
+  },
+  "cognito-identity-unauth:accountid": {
+    "key": "cognito-identity-unauth:AccountId",
+    "description": "Filters access by the owning AWS account ID of an identity pool for identity pool guest users. Applies to unauthenticated (public) API operations",
+    "type": "String"
+  },
+  "cognito-identity-unauth:identitypoolarn": {
+    "key": "cognito-identity-unauth:IdentityPoolArn",
+    "description": "Filters access by the identity pool ID for a given guest-user identity ID. Applies to unauthenticated (public) API operations",
+    "type": "ARN"
+  },
+  "cognito-identity:identitypoolarn": {
+    "key": "cognito-identity:IdentityPoolArn",
+    "description": "Filters access by the identity pool ID for a given identity ID for DeleteIdentities and DescribeIdentity",
+    "type": "ARN"
   }
 }

package/data/resourceTypes/bedrock.json

@@ -212,7 +212,7 @@
   },
   "custom-model-deployment": {
     "key": "custom-model-deployment",
-    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/${ResourceId}",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:custom-model-deployment/${ResourceId}",
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]

package/data/unassociatedConditions.json

@@ -19,5 +19,11 @@
   ],
   "www.amazon.com": [
     "sts"
+  ],
+  "cognito-identity-auth": [
+    "cognito-identity"
+  ],
+  "cognito-identity-unauth": [
+    "cognito-identity"
   ]
 }

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.15.202512111",
+  "version": "0.15.202512131",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2025-12-11T04:58:14.608Z",
+  "updatedAt": "2025-12-13T04:49:35.967Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",