@cloud-copilot/iam-data 0.15.202512181 → 0.15.202512191

package/data/actions/lambda.json

@@ -28,8 +28,7 @@
     ],
     "conditionKeys": [
       "lambda:Principal",
-      "lambda:FunctionUrlAuthType",
-      "lambda:InvokedViaFunctionUrl"
+      "lambda:FunctionUrlAuthType"
     ],
     "dependentActions": []
   },

package/data/actions/redshift.json

@@ -1124,7 +1124,14 @@
     "name": "DescribeClusters",
     "description": "Grants permission to describe properties of provisioned clusters",
     "accessLevel": "List",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },

package/data/actions/servicequotas.json

@@ -220,8 +220,8 @@
   },
   "startquotautilizationreport": {
     "name": "StartQuotaUtilizationReport",
-    "description": "Grants permission to initiate the generattion of a quota Utilization report for your account",
-    "accessLevel": "Write",
+    "description": "Grants permission to query quota utilization and create a report for your account",
+    "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []

package/data/conditionKeys/ec2.json

@@ -99,6 +99,11 @@
     "description": "Filters access by the ARN of the CloudWatch Logs log stream",
     "type": "ARN"
   },
+  "ec2:commitmentduration": {
+    "key": "ec2:CommitmentDuration",
+    "description": "Filters access by commitment duration of the Capacity Reservation",
+    "type": "Numeric"
+  },
   "ec2:cpuoptionsamdsevsnp": {
     "key": "ec2:CpuOptionsAmdSevSnp",
     "description": "Filters access by the state of AMD SEV-SNP CPU Options. Currently, only US East (Ohio) and Europe (Ireland) are supported",
@@ -269,6 +274,21 @@
     "description": "Filters access by the ID of an internet gateway",
     "type": "String"
   },
+  "ec2:interruptiblecapacityreservationid": {
+    "key": "ec2:InterruptibleCapacityReservationId",
+    "description": "Filters access by the ID of an interruptible Capacity Reservation",
+    "type": "String"
+  },
+  "ec2:interruptiontype": {
+    "key": "ec2:InterruptionType",
+    "description": "Filters access by the type of interruption",
+    "type": "String"
+  },
+  "ec2:ipamprefixlistresolvertargetid": {
+    "key": "ec2:IpamPrefixListResolverTargetId",
+    "description": "Filters access by the IPAM prefix list resolver target ID that is syncing CIDRs to a managed prefix list",
+    "type": "String"
+  },
   "ec2:ipv4ipampoolid": {
     "key": "ec2:Ipv4IpamPoolId",
     "description": "Filters access by the ID of an IPAM pool provided for IPv4 CIDR block allocation",
@@ -279,6 +299,11 @@
     "description": "Filters access by the ID of an IPAM pool provided for IPv6 CIDR block allocation",
     "type": "String"
   },
+  "ec2:isinterruptible": {
+    "key": "ec2:IsInterruptible",
+    "description": "Filters access by whether Capacity Reservations are interruptible",
+    "type": "Bool"
+  },
   "ec2:islaunchtemplateresource": {
     "key": "ec2:IsLaunchTemplateResource",
     "description": "Filters access by whether users are able to override resources that are specified in the launch template",
@@ -574,6 +599,11 @@
     "description": "Filters access by the ID of a subnet",
     "type": "String"
   },
+  "ec2:targetinstancecount": {
+    "key": "ec2:TargetInstanceCount",
+    "description": "Filters access by the number of instances the interruptible Capacity Reservation is assigned",
+    "type": "Numeric"
+  },
   "ec2:tenancy": {
     "key": "ec2:Tenancy",
     "description": "Filters access by the tenancy of the VPC or instance (default, dedicated, or host)",
@@ -629,6 +659,16 @@
     "description": "Filters access by multi region of the VPC endpoint service",
     "type": "String"
   },
+  "ec2:vpceprivatednspreference": {
+    "key": "ec2:VpcePrivateDnsPreference",
+    "description": "Filters access by the private DNS preference",
+    "type": "String"
+  },
+  "ec2:vpceprivatednsspecifieddomains": {
+    "key": "ec2:VpcePrivateDnsSpecifiedDomains",
+    "description": "Filters access by the private DNS domains",
+    "type": "ArrayOfString"
+  },
   "ec2:vpceservicename": {
     "key": "ec2:VpceServiceName",
     "description": "Filters access by the name of the VPC endpoint service",
@@ -669,6 +709,11 @@
     "description": "Filters access by the ID of a transit gateway",
     "type": "String"
   },
+  "ec2:transitgatewaymeteringpolicyid": {
+    "key": "ec2:transitGatewayMeteringPolicyId",
+    "description": "Filters access by the ID of a metering policy id",
+    "type": "String"
+  },
   "ec2:transitgatewaymulticastdomainid": {
     "key": "ec2:transitGatewayMulticastDomainId",
     "description": "Filters access by the ID of a transit gateway multicast domain",

package/data/resourceTypes/ec2.json

@@ -66,6 +66,7 @@
       "ec2:AvailabilityZone",
       "ec2:AvailabilityZoneId",
       "ec2:CapacityReservationFleet",
+      "ec2:CommitmentDuration",
       "ec2:CreateDate",
       "ec2:DestinationCapacityReservationId",
       "ec2:EbsOptimized",
@@ -76,6 +77,9 @@
       "ec2:InstanceMatchCriteria",
       "ec2:InstancePlatform",
       "ec2:InstanceType",
+      "ec2:InterruptibleCapacityReservationId",
+      "ec2:InterruptionType",
+      "ec2:IsInterruptible",
       "ec2:IsLaunchTemplateResource",
       "ec2:LaunchTemplate",
       "ec2:OutpostArn",
@@ -83,6 +87,7 @@
       "ec2:Region",
       "ec2:ResourceTag/${TagKey}",
       "ec2:SourceCapacityReservationId",
+      "ec2:TargetInstanceCount",
       "ec2:Tenancy"
     ]
   },
@@ -419,6 +424,19 @@
       "ec2:ResourceTag/${TagKey}"
     ]
   },
+  "ipam-policy": {
+    "key": "ipam-policy",
+    "arn": "arn:${Partition}:ec2::${Account}:ipam-policy/${IpamPolicyId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
   "ipam-pool": {
     "key": "ipam-pool",
     "arn": "arn:${Partition}:ec2::${Account}:ipam-pool/${IpamPoolId}",
@@ -432,6 +450,32 @@
       "ec2:ResourceTag/${TagKey}"
     ]
   },
+  "ipam-prefix-list-resolver": {
+    "key": "ipam-prefix-list-resolver",
+    "arn": "arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver/${IpamPrefixListResolverId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
+  "ipam-prefix-list-resolver-target": {
+    "key": "ipam-prefix-list-resolver-target",
+    "arn": "arn:${Partition}:ec2::${Account}:ipam-prefix-list-resolver-target/${IpamPrefixListResolverTargetId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
   "ipam-resource-discovery-association": {
     "key": "ipam-resource-discovery-association",
     "arn": "arn:${Partition}:ec2::${Account}:ipam-resource-discovery-association/${IpamResourceDiscoveryAssociationId}",
@@ -623,7 +667,8 @@
       "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "ec2:Region",
-      "ec2:ResourceTag/${TagKey}"
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:Vpc"
     ]
   },
   "network-acl": {
@@ -742,6 +787,7 @@
       "aws:TagKeys",
       "ec2:Attribute",
       "ec2:Attribute/${AttributeName}",
+      "ec2:IpamPrefixListResolverTargetId",
       "ec2:Region",
       "ec2:ResourceTag/${TagKey}"
     ]
@@ -1036,6 +1082,19 @@
       "ec2:transitGatewayId"
     ]
   },
+  "transit-gateway-metering-policy": {
+    "key": "transit-gateway-metering-policy",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-metering-policy/${TransitGatewayMeteringPolicyId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:transitGatewayMeteringPolicyId"
+    ]
+  },
   "transit-gateway-multicast-domain": {
     "key": "transit-gateway-multicast-domain",
     "arn": "arn:${Partition}:ec2:${Region}:${Account}:transit-gateway-multicast-domain/${TransitGatewayMulticastDomainId}",
@@ -1200,6 +1259,18 @@
       "ec2:ResourceTag/${TagKey}"
     ]
   },
+  "vpc-encryption-control": {
+    "key": "vpc-encryption-control",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpc-encryption-control/${VpcEncryptionControlId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
   "vpc-endpoint-connection": {
     "key": "vpc-endpoint-connection",
     "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpc-endpoint-connection/${VpcEndpointConnectionId}",
@@ -1223,6 +1294,8 @@
       "ec2:Region",
       "ec2:ResourceTag/${TagKey}",
       "ec2:VpceMultiRegion",
+      "ec2:VpcePrivateDnsPreference",
+      "ec2:VpcePrivateDnsSpecifiedDomains",
       "ec2:VpceServiceName",
       "ec2:VpceServiceOwner",
       "ec2:VpceServiceRegion"
@@ -1300,6 +1373,17 @@
       "ec2:VpcPeeringConnectionID"
     ]
   },
+  "vpn-concentrator": {
+    "key": "vpn-concentrator",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpn-concentrator/${VpnConcentratorId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
   "vpn-connection-device-type": {
     "key": "vpn-connection-device-type",
     "arn": "arn:${Partition}:ec2:${Region}:${Account}:vpn-connection-device-type/${VpnConnectionDeviceTypeId}",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.15.202512181",
+  "version": "0.15.202512191",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2025-12-18T04:58:53.334Z",
+  "updatedAt": "2025-12-19T04:58:30.394Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",