@cloud-copilot/iam-data 0.15.202601141 → 0.15.202601161

package/data/actions/aoss.json

@@ -17,6 +17,23 @@
     ],
     "dependentActions": []
   },
+  "addcollectiontocollectiongroup": {
+    "name": "AddCollectionToCollectionGroup",
+    "description": "Grants permission to add a serverless collection to a specified collection group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "CollectionGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aoss:collection-group"
+    ],
+    "dependentActions": []
+  },
   "batchgetcollection": {
     "name": "BatchGetCollection",
     "description": "Grants permission to get attributes for one or more collections",
@@ -27,6 +44,16 @@
     ],
     "dependentActions": []
   },
+  "batchgetcollectiongroup": {
+    "name": "BatchGetCollectionGroup",
+    "description": "Grants permission to get attributes for one or more collection groups",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aoss:collection-group"
+    ],
+    "dependentActions": []
+  },
   "batchgeteffectivelifecyclepolicy": {
     "name": "BatchGetEffectiveLifecyclePolicy",
     "description": "Grants permission to get the information about a lifecycle policy applied to one or more AOSS resources",
@@ -74,6 +101,17 @@
     ],
     "dependentActions": []
   },
+  "createcollectiongroup": {
+    "name": "CreateCollectionGroup",
+    "description": "Grants permission to create a serverless collection group",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createindex": {
     "name": "CreateIndex",
     "description": "Grants permission to create an opensearch index",
@@ -162,6 +200,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletecollectiongroup": {
+    "name": "DeleteCollectionGroup",
+    "description": "Grants permission to delete a serverless collection group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "CollectionGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteindex": {
     "name": "DeleteIndex",
     "description": "Grants permission to delete an opensearch index",
@@ -267,6 +320,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcollectiongroups": {
+    "name": "ListCollectionGroups",
+    "description": "Grants permission to list collection groups",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcollections": {
     "name": "ListCollections",
     "description": "Grants permission to list collections",
@@ -371,6 +432,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatecollectiongroup": {
+    "name": "UpdateCollectionGroup",
+    "description": "Grants permission to update a collection group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "CollectionGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateindex": {
     "name": "UpdateIndex",
     "description": "Grants permission to update an opensearch index",

package/data/actions/appsync.json

@@ -44,6 +44,28 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "associatewebacl": {
+    "name": "AssociateWebACL",
+    "isPermissionOnly": true,
+    "description": "Grants permission to associate a web ACL and a resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "api",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "graphqlapi",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createapi": {
     "name": "CreateApi",
     "description": "Grants permission to create an API",
@@ -321,6 +343,28 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disassociatewebacl": {
+    "name": "DisassociateWebACL",
+    "isPermissionOnly": true,
+    "description": "Grants permission to disassociate a web ACL and a resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "api",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "graphqlapi",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "evaluatecode": {
     "name": "EvaluateCode",
     "description": "Grants permission to evaluate code with a runtime and context",
@@ -569,6 +613,28 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getwebaclforresource": {
+    "name": "GetWebACLForResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get associated web ACLs for a resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "api",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "graphqlapi",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "graphql": {
     "name": "GraphQL",
     "isPermissionOnly": true,
@@ -676,6 +742,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listresourcesforwebacl": {
+    "name": "ListResourcesForWebACL",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get associated resources for a web ACL",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listsourceapiassociations": {
     "name": "ListSourceApiAssociations",
     "description": "Grants permission to list source APIs associated to a given merged API",

package/data/actions/deadline.json

@@ -216,13 +216,17 @@
         "name": "budget",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "deadline:TagResource",
+          "identitystore:ListGroupMembershipsForMember"
+        ]
       }
     ],
-    "conditionKeys": [],
-    "dependentActions": [
-      "identitystore:ListGroupMembershipsForMember"
-    ]
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
   },
   "createfarm": {
     "name": "CreateFarm",
@@ -1629,6 +1633,12 @@
     "description": "Grants permission to list all tags on specified Deadline Cloud resources",
     "accessLevel": "List",
     "resourceTypes": [
+      {
+        "name": "budget",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "farm",
         "required": false,
@@ -1828,6 +1838,12 @@
     "description": "Grants permission to add or overwrite one or more tags for the specified Deadline Cloud resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "budget",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "farm",
         "required": false,
@@ -1877,6 +1893,12 @@
     "description": "Grants permission to disassociate one or more tags from the specified Deadline Cloud resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "budget",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "farm",
         "required": false,

package/data/actions/mgn.json

@@ -469,6 +469,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getaccountsettings": {
+    "name": "GetAccountSettings",
+    "description": "Grants permission to get account settings",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getagentcommandformgn": {
     "name": "GetAgentCommandForMgn",
     "isPermissionOnly": true,
@@ -2012,6 +2020,14 @@
     ],
     "dependentActions": []
   },
+  "updateaccountsettings": {
+    "name": "UpdateAccountSettings",
+    "description": "Grants permission to update account settings",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateagentbacklogformgn": {
     "name": "UpdateAgentBacklogForMgn",
     "isPermissionOnly": true,

package/data/actions/network-firewall.json

@@ -47,7 +47,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "associatesubnets": {

package/data/actions/wafv2.json

@@ -15,6 +15,7 @@
           "appsync:SetWebACL",
           "cognito-idp:AssociateWebACL",
           "ec2:AssociateVerifiedAccessInstanceWebAcl",
+          "elasticloadbalancing:CreateWebACLAssociation",
           "elasticloadbalancing:SetWebAcl",
           "wafv2:GetPermissionPolicy",
           "wafv2:PutPermissionPolicy"
@@ -369,6 +370,7 @@
           "appsync:SetWebACL",
           "cognito-idp:DisassociateWebACL",
           "ec2:DisassociateVerifiedAccessInstanceWebAcl",
+          "elasticloadbalancing:DeleteWebACLAssociation",
           "elasticloadbalancing:SetWebAcl",
           "wafv2:PutPermissionPolicy"
         ]
@@ -599,6 +601,7 @@
           "apprunner:DescribeWebAclForService",
           "cognito-idp:GetWebACLForResource",
           "ec2:GetVerifiedAccessInstanceWebAcl",
+          "elasticloadbalancing:GetLoadBalancerWebACL",
           "wafv2:GetWebACL"
         ]
       },
@@ -727,7 +730,8 @@
           "amplify:ListResourcesForWebACL",
           "apprunner:ListAssociatedServicesForWebAcl",
           "cognito-idp:ListResourcesForWebACL",
-          "ec2:DescribeVerifiedAccessInstanceWebAclAssociations"
+          "ec2:DescribeVerifiedAccessInstanceWebAclAssociations",
+          "elasticloadbalancing:DescribeWebACLAssociation"
         ]
       },
       {

package/data/conditionKeys/aoss.json

@@ -9,6 +9,11 @@
     "description": "Filters access by the collection name",
     "type": "String"
   },
+  "aoss:collection-group": {
+    "key": "aoss:collection-group",
+    "description": "Filters access by the collection group name",
+    "type": "String"
+  },
   "aoss:index": {
     "key": "aoss:index",
     "description": "Filters access by the index",

package/data/conditionKeys/sts.json

@@ -226,8 +226,8 @@
   },
   "sts:durationseconds": {
     "key": "sts:DurationSeconds",
-    "description": "Filters access by the duration in seconds when getting a bearer token",
-    "type": "String"
+    "description": "Filters access by the duration in seconds when getting a bearer token or a JSON Web Token (JWT) from the GetWebIdentityToken API",
+    "type": "Numeric"
   },
   "sts:externalid": {
     "key": "sts:ExternalId",

package/data/resourceTypes/aoss.json

@@ -6,6 +6,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "collectiongroup": {
+    "key": "CollectionGroup",
+    "arn": "arn:${Partition}:aoss:${Region}:${Account}:collection-group/${CollectionGroupId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "dashboards": {
     "key": "Dashboards",
     "arn": "arn:${Partition}:aoss:${Region}:${Account}:dashboards/default"

package/data/resourceTypes/deadline.json

@@ -3,6 +3,7 @@
     "key": "budget",
     "arn": "arn:${Partition}:deadline:${Region}:${Account}:farm/${FarmId}/budget/${BudgetId}",
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "deadline:FarmMembershipLevels"
     ]
   },

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.15.202601141",
+  "version": "0.15.202601161",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-01-14T05:01:36.074Z",
+  "updatedAt": "2026-01-16T05:01:24.426Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",