@cloud-copilot/iam-data 0.15.202512231 → 0.15.202512271

package/data/actions/bedrock.json

@@ -3130,7 +3130,7 @@
   },
   "putfoundationmodelentitlement": {
     "name": "PutFoundationModelEntitlement",
-    "description": "Grants permission to put entitlement to access a foundation model",
+    "description": "Grants permission to put entitlement to access a serverless foundation model. Do not use to restrict model access",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],

package/data/actions/redshift-serverless.json

@@ -465,6 +465,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listautonomicsdenylist": {
+    "name": "ListAutonomicsDenylist",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list the resources that are denylisted from global autonomics decisions for a specified workgroup",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workgroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcustomdomainassociations": {
     "name": "ListCustomDomainAssociations",
     "description": "Grants permission to list custom domain associations in Amazon Redshift Serverless",
@@ -793,6 +809,22 @@
     ],
     "dependentActions": []
   },
+  "updateautonomicsdenylist": {
+    "name": "UpdateAutonomicsDenylist",
+    "isPermissionOnly": true,
+    "description": "Grants permission to add or remove resources from the global autonomics denylist for a specified workgroup",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workgroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatecustomdomainassociation": {
     "name": "UpdateCustomDomainAssociation",
     "description": "Grants permission to update a certificate associated with a custom domain",

package/data/actions/redshift.json

@@ -1049,6 +1049,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeautonomicsdenylist": {
+    "name": "DescribeAutonomicsDenylist",
+    "isPermissionOnly": true,
+    "description": "Grants permission to describe the list of resources that are denylisted from global autonomics decisions for a specified cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeclusterdbrevisions": {
     "name": "DescribeClusterDbRevisions",
     "description": "Grants permission to describe database revisions for a cluster",
@@ -1804,6 +1820,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "modifyautonomicsdenylist": {
+    "name": "ModifyAutonomicsDenylist",
+    "isPermissionOnly": true,
+    "description": "Grants permission to add or remove resources from the global autonomics denylist for a specified cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "modifycluster": {
     "name": "ModifyCluster",
     "description": "Grants permission to modify the settings of a cluster",

package/data/actions/sagemaker-mlflow.json

@@ -19,7 +19,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "createmodelversion": {
@@ -34,7 +36,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "createregisteredmodel": {
@@ -49,7 +53,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "createrun": {
@@ -64,7 +70,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deleteexperiment": {
@@ -79,7 +87,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deleteloggedmodel": {
@@ -94,7 +104,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deleteloggedmodeltag": {
@@ -109,7 +121,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deletemodelversion": {
@@ -124,7 +138,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deletemodelversiontag": {
@@ -139,7 +155,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deleteregisteredmodel": {
@@ -154,7 +172,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deleteregisteredmodelalias": {
@@ -169,7 +189,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deleteregisteredmodeltag": {
@@ -184,7 +206,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deleterun": {
@@ -199,7 +223,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deletetag": {
@@ -214,7 +240,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deletetracetag": {
@@ -229,7 +257,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deletetraces": {
@@ -244,7 +274,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "endtrace": {
@@ -259,7 +291,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "finalizeloggedmodel": {
@@ -274,7 +308,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getdownloaduriformodelversionartifacts": {
@@ -289,7 +325,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getexperiment": {
@@ -304,7 +342,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getexperimentbyname": {
@@ -319,7 +359,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getlatestmodelversions": {
@@ -334,7 +376,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getloggedmodel": {
@@ -349,7 +393,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getmetrichistory": {
@@ -364,7 +410,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getmodelversion": {
@@ -379,7 +427,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getmodelversionbyalias": {
@@ -394,7 +444,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getregisteredmodel": {
@@ -409,7 +461,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getrun": {
@@ -424,7 +478,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "gettraceinfo": {
@@ -439,7 +495,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "listartifacts": {
@@ -454,7 +512,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "listloggedmodelartifacts": {
@@ -469,7 +529,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "logbatch": {
@@ -484,7 +546,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "loginputs": {
@@ -499,7 +563,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "logloggedmodelparams": {
@@ -514,7 +580,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "logmetric": {
@@ -529,7 +597,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "logmodel": {
@@ -544,7 +614,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "logoutputs": {
@@ -559,7 +631,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "logparam": {
@@ -574,7 +648,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "renameregisteredmodel": {
@@ -589,7 +665,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "restoreexperiment": {
@@ -604,7 +682,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "restorerun": {
@@ -619,7 +699,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "searchexperiments": {
@@ -634,7 +716,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "searchloggedmodels": {
@@ -649,7 +733,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "searchmodelversions": {
@@ -664,7 +750,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "searchregisteredmodels": {
@@ -679,7 +767,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "searchruns": {
@@ -694,7 +784,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "searchtraces": {
@@ -709,7 +801,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "setexperimenttag": {
@@ -724,7 +818,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "setloggedmodeltags": {
@@ -739,7 +835,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "setmodelversiontag": {
@@ -754,7 +852,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "setregisteredmodelalias": {
@@ -769,7 +869,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "setregisteredmodeltag": {
@@ -784,7 +886,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "settag": {
@@ -799,7 +903,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "settracetag": {
@@ -814,7 +920,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "starttrace": {
@@ -829,7 +937,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "transitionmodelversionstage": {
@@ -844,7 +954,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "updateexperiment": {
@@ -859,7 +971,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "updatemodelversion": {
@@ -874,7 +988,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "updateregisteredmodel": {
@@ -889,7 +1005,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "updaterun": {
@@ -904,7 +1022,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   }
 }

package/data/actions/sagemaker.json

@@ -1444,7 +1444,10 @@
       {
         "name": "mlflow-app",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "sagemaker:ResourceTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": [
           "iam:PassRole",
           "sagemaker:AddTags"
@@ -1465,7 +1468,10 @@
       {
         "name": "mlflow-tracking-server",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "sagemaker:ResourceTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": [
           "iam:PassRole",
           "sagemaker:AddTags"
@@ -1786,7 +1792,10 @@
       {
         "name": "partner-app",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "sagemaker:ResourceTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": [
           "sagemaker:AddTags"
         ]
@@ -1810,7 +1819,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "createpipeline": {
@@ -1861,7 +1873,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "createpresignedmlflowtrackingserverurl": {
@@ -1876,7 +1891,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "createpresignednotebookinstanceurl": {
@@ -2776,7 +2794,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deletemlflowtrackingserver": {
@@ -2791,7 +2812,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deletemodel": {
@@ -2990,7 +3014,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deletepipeline": {
@@ -4160,7 +4187,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "describemlflowtrackingserver": {
@@ -4175,7 +4205,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "describemodel": {
@@ -4374,7 +4407,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "describepipeline": {
@@ -6353,7 +6389,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "startmonitoringschedule": {
@@ -6565,7 +6604,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "stopmonitoringschedule": {
@@ -7167,7 +7209,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "updatemlflowtrackingserver": {
@@ -7182,7 +7227,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "updatemodelcard": {
@@ -7321,7 +7369,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:ResourceTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "updatepipeline": {

package/data/conditionKeys/sagemaker-mlflow.json

@@ -3,10 +3,5 @@
     "key": "aws:ResourceTag/${TagKey}",
     "description": "Filters access by a tag key and value pair",
     "type": "String"
-  },
-  "sagemaker:resourcetag/${tagkey}": {
-    "key": "sagemaker:ResourceTag/${TagKey}",
-    "description": "Filters access by a tag key and value pair",
-    "type": "String"
   }
 }

package/data/conditionPatterns.json

@@ -134,9 +134,9 @@
     "s3:RequestObjectTag/.+?": "s3:RequestObjectTag/<key>"
   },
   "sagemaker": {
-    "sagemaker:ResourceTag/.+?": "sagemaker:ResourceTag/${TagKey}",
     "sagemaker:CurrentCustomerMetadataProperties/.+?": "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}",
     "sagemaker:CustomerMetadataProperties/.+?": "sagemaker:CustomerMetadataProperties/${MetadataKey}",
+    "sagemaker:ResourceTag/.+?": "sagemaker:ResourceTag/${TagKey}",
     "sagemaker:SearchVisibilityCondition/.+?": "sagemaker:SearchVisibilityCondition/${FilterKey}"
   },
   "vpc-lattice-svcs": {

package/data/resourceTypes/sagemaker-mlflow.json

@@ -1,10 +1,6 @@
 {
   "mlflow-tracking-server": {
     "key": "mlflow-tracking-server",
-    "arn": "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/${MlflowTrackingServerName}",
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "sagemaker:ResourceTag/${TagKey}"
-    ]
+    "arn": "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/${MlflowTrackingServerName}"
   }
 }

package/data/resourceTypes/sagemaker.json

@@ -496,19 +496,11 @@
   },
   "mlflow-tracking-server": {
     "key": "mlflow-tracking-server",
-    "arn": "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/${MlflowTrackingServerName}",
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "sagemaker:ResourceTag/${TagKey}"
-    ]
+    "arn": "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/${MlflowTrackingServerName}"
   },
   "mlflow-app": {
     "key": "mlflow-app",
-    "arn": "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-app/${MLflowAppId}",
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "sagemaker:ResourceTag/${TagKey}"
-    ]
+    "arn": "arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-app/${MLflowAppId}"
   },
   "compute-quota": {
     "key": "compute-quota",
@@ -528,10 +520,6 @@
   },
   "partner-app": {
     "key": "partner-app",
-    "arn": "arn:${Partition}:sagemaker:${Region}:${Account}:partner-app/${AppId}",
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "sagemaker:ResourceTag/${TagKey}"
-    ]
+    "arn": "arn:${Partition}:sagemaker:${Region}:${Account}:partner-app/${AppId}"
   }
 }

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.15.202512231",
+  "version": "0.15.202512271",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2025-12-23T05:01:00.319Z",
+  "updatedAt": "2025-12-27T04:57:00.769Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",