@cloud-copilot/iam-data 0.15.202601071 → 0.15.202601091

package/data/actions/elasticloadbalancing.json

@@ -205,6 +205,15 @@
     ],
     "dependentActions": []
   },
+  "createwebaclassociation": {
+    "name": "CreateWebACLAssociation",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create WebAcl association to WAF",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletelistener": {
     "name": "DeleteListener",
     "description": "Grants permission to delete the specified listener",
@@ -331,6 +340,15 @@
     ],
     "dependentActions": []
   },
+  "deletewebaclassociation": {
+    "name": "DeleteWebACLAssociation",
+    "isPermissionOnly": true,
+    "description": "Grants permission to delete WebAcl association to WAF",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deregistertargets": {
     "name": "DeregisterTargets",
     "description": "Grants permission to deregister the specified targets from the specified target group",
@@ -477,6 +495,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describewebaclassociation": {
+    "name": "DescribeWebACLAssociation",
+    "isPermissionOnly": true,
+    "description": "Grants permission to describe WebAcl association to WAF",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getloadbalancerwebacl": {
+    "name": "GetLoadBalancerWebACL",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get Load Balancer WebAcl to WAF",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getresourcepolicy": {
     "name": "GetResourcePolicy",
     "description": "Grants permission to retrieve the resource policy associated with the resource",

package/data/actions/execute-api.json

@@ -1,7 +1,7 @@
 {
   "invalidatecache": {
     "name": "InvalidateCache",
-    "description": "Used to invalidate API cache upon a client request",
+    "description": "Grants permission to invalidate API cache upon a client request",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -16,7 +16,7 @@
   },
   "invoke": {
     "name": "Invoke",
-    "description": "Used to invoke an API upon a client request",
+    "description": "Grants permission to invoke an API upon a client request",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -37,7 +37,7 @@
   },
   "manageconnections": {
     "name": "ManageConnections",
-    "description": "ManageConnections controls access to the @connections API",
+    "description": "Grants permission to access the Websocket @connections Route",
     "accessLevel": "Write",
     "resourceTypes": [
       {

package/data/actions/networkmanager.json

@@ -211,6 +211,21 @@
     ],
     "dependentActions": []
   },
+  "createcorenetworkprefixlistassociation": {
+    "name": "CreateCoreNetworkPrefixListAssociation",
+    "description": "Grants permission to create a prefix list core network association",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createdevice": {
     "name": "CreateDevice",
     "description": "Grants permission to create a new device",
@@ -490,6 +505,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletecorenetworkprefixlistassociation": {
+    "name": "DeleteCoreNetworkPrefixListAssociation",
+    "description": "Grants permission to delete a prefix list core network association",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletedevice": {
     "name": "DeleteDevice",
     "description": "Grants permission to delete a device",
@@ -1211,6 +1241,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcorenetworkprefixlistassociations": {
+    "name": "ListCoreNetworkPrefixListAssociations",
+    "description": "Grants permission to list core network prefix list associaitons",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcorenetworkroutinginformation": {
+    "name": "ListCoreNetworkRoutingInformation",
+    "description": "Grants permission to list core network routing information",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcorenetworks": {
     "name": "ListCoreNetworks",
     "description": "Grants permission to list core networks",
@@ -1300,6 +1360,27 @@
     ],
     "dependentActions": []
   },
+  "putattachmentroutingpolicylabel": {
+    "name": "PutAttachmentRoutingPolicyLabel",
+    "description": "Grants permission to put an attachment routing policy label",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "attachment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putcorenetworkpolicy": {
     "name": "PutCoreNetworkPolicy",
     "description": "Grants permission to create a core network policy",
@@ -1364,6 +1445,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "removeattachmentroutingpolicylabel": {
+    "name": "RemoveAttachmentRoutingPolicyLabel",
+    "description": "Grants permission to remove an attachment routing policy label",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "attachment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "restorecorenetworkpolicyversion": {
     "name": "RestoreCoreNetworkPolicyVersion",
     "description": "Grants permission to restore the core network policy to a previous version",

package/data/actions/payment-cryptography.json

@@ -17,7 +17,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "createalias": {
@@ -48,7 +50,10 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "payment-cryptography:KeyClass",
+      "payment-cryptography:KeyUsage",
+      "payment-cryptography:KeyAlgorithm"
     ],
     "dependentActions": [
       "payment-cryptography:TagResource"
@@ -72,7 +77,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "deletealias": {
@@ -105,7 +112,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "disabledefaultkeyreplicationregions": {
@@ -142,7 +151,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "exportkey": {
@@ -157,7 +168,11 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias",
+      "payment-cryptography:CertificateAuthorityPublicKeyIdentifier",
+      "payment-cryptography:WrappingKeyIdentifier"
+    ],
     "dependentActions": []
   },
   "generatecardvalidationdata": {
@@ -178,7 +193,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "generatemac": {
@@ -199,7 +216,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "generatemacemvpinchange": {
@@ -220,7 +239,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "generatepindata": {
@@ -241,7 +262,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "getalias": {
@@ -286,7 +309,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "getdefaultkeyreplicationregions": {
@@ -309,7 +334,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "getparametersforexport": {
@@ -340,7 +367,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "importkey": {
@@ -350,7 +379,10 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "payment-cryptography:ImportKeyMaterial",
+      "payment-cryptography:CertificateAuthorityPublicKeyIdentifier",
+      "payment-cryptography:WrappingKeyIdentifier"
     ],
     "dependentActions": [
       "payment-cryptography:TagResource"
@@ -405,7 +437,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "removekeyreplicationregions": {
@@ -426,7 +460,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "restorekey": {
@@ -441,7 +477,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "startkeyusage": {
@@ -456,7 +494,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "stopkeyusage": {
@@ -471,7 +511,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "tagresource": {
@@ -510,7 +552,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "translatepindata": {
@@ -531,7 +575,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "untagresource": {
@@ -593,7 +639,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "verifycardvalidationdata": {
@@ -614,7 +662,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "verifymac": {
@@ -635,7 +685,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   },
   "verifypindata": {
@@ -656,7 +708,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
     "dependentActions": []
   }
 }

package/data/conditionKeys/apigateway.json

@@ -151,7 +151,7 @@
   },
   "apigateway:resource/authorizeruri": {
     "key": "apigateway:Resource/AuthorizerUri",
-    "description": "Filters access by URI of a Lambda authorizer function. Available during UpdateAuthorizer and DeleteAuthorizer operations. Also available during reimport as an ArrayOfString",
+    "description": "Filters access by the URI of the current Lambda authorizer associated with the current API. Available during UpdateAuthorizer and DeleteAuthorizer. Also available as a collection during reimport",
     "type": "ArrayOfString"
   },
   "apigateway:resource/cognitouserpoolarn": {
@@ -269,19 +269,9 @@
     "description": "Filters access by access association source. Available during the CreateDomainNameAccessAssociation operation",
     "type": "String"
   },
-  "apigateway:request/cognitouserpoolproviderarn": {
-    "key": "apigateway:Request/CognitoUserPoolProviderArn",
-    "description": "Filters access by Cognito user pool provider ARN. Available during CreateAuthorizer and UpdateAuthorizer",
-    "type": "ARN"
-  },
   "apigateway:request/domainnamearn": {
     "key": "apigateway:Request/DomainNameArn",
     "description": "Filters access by domain name ARN. Available during the CreateDomainNameAccessAssociation operation",
     "type": "ARN"
-  },
-  "apigateway:resource/cognitouserpoolproviderarn": {
-    "key": "apigateway:Resource/CognitoUserPoolProviderArn",
-    "description": "Filters access by Cognito user pool provider ARN. Available during CreateAuthorizer and UpdateAuthorizer",
-    "type": "ARN"
   }
 }

package/data/conditionKeys/execute-api.json

@@ -1,7 +1,7 @@
 {
   "execute-api:viadomainarn": {
     "key": "execute-api:viaDomainArn",
-    "description": "Filters access by the domain name ARN the API is called from",
-    "type": "String"
+    "description": "Filters access by the DomainName ARN the API is called from",
+    "type": "ARN"
   }
 }

package/data/resourceTypes/apigateway.json

@@ -60,11 +60,7 @@
     "arn": "arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/authorizers/${AuthorizerId}",
     "conditionKeys": [
       "apigateway:Request/AuthorizerType",
-      "apigateway:Request/AuthorizerUri",
-      "apigateway:Request/CognitoUserPoolProviderArn",
       "apigateway:Resource/AuthorizerType",
-      "apigateway:Resource/AuthorizerUri",
-      "apigateway:Resource/CognitoUserPoolProviderArn",
       "aws:ResourceTag/${TagKey}"
     ]
   },
@@ -73,8 +69,6 @@
     "arn": "arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/authorizers",
     "conditionKeys": [
       "apigateway:Request/AuthorizerType",
-      "apigateway:Request/AuthorizerUri",
-      "apigateway:Request/CognitoUserPoolProviderArn",
       "aws:ResourceTag/${TagKey}"
     ]
   },
@@ -498,7 +492,6 @@
       "apigateway:Request/ApiKeyRequired",
       "apigateway:Request/ApiName",
       "apigateway:Request/AuthorizerType",
-      "apigateway:Request/AuthorizerUri",
       "apigateway:Request/DisableExecuteApiEndpoint",
       "apigateway:Request/EndpointType",
       "apigateway:Request/RouteAuthorizationType",
@@ -506,7 +499,6 @@
       "apigateway:Resource/ApiKeyRequired",
       "apigateway:Resource/ApiName",
       "apigateway:Resource/AuthorizerType",
-      "apigateway:Resource/AuthorizerUri",
       "apigateway:Resource/DisableExecuteApiEndpoint",
       "apigateway:Resource/EndpointType",
       "apigateway:Resource/RouteAuthorizationType",
@@ -521,7 +513,6 @@
       "apigateway:Request/ApiKeyRequired",
       "apigateway:Request/ApiName",
       "apigateway:Request/AuthorizerType",
-      "apigateway:Request/AuthorizerUri",
       "apigateway:Request/DisableExecuteApiEndpoint",
       "apigateway:Request/EndpointType",
       "apigateway:Request/RouteAuthorizationType",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.15.202601071",
+  "version": "0.15.202601091",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-01-07T05:02:44.530Z",
+  "updatedAt": "2026-01-09T05:02:21.052Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",