@cloud-copilot/iam-data 0.15.202601311 → 0.15.202602041

package/data/actions/sso.json

@@ -1,4 +1,22 @@
 {
+  "addregion": {
+    "name": "AddRegion",
+    "description": "Grants permission to add a region to an IAM Identity Center instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Instance",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "identitystore:AddRegion",
+      "kms:Decrypt"
+    ]
+  },
   "associatedirectory": {
     "name": "AssociateDirectory",
     "description": "Grants permission to connect a directory to be used by AWS IAM Identity Center",
@@ -741,6 +759,23 @@
       "kms:Decrypt"
     ]
   },
+  "describeregion": {
+    "name": "DescribeRegion",
+    "description": "Grants permission to retrieve configuration details for a specific IAM Identity Center instance region",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Instance",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "describeregisteredregions": {
     "name": "DescribeRegisteredRegions",
     "description": "Grants permission to obtain the regions where your organization has enabled AWS IAM Identity Center",
@@ -1477,6 +1512,23 @@
       "sso:GetProfile"
     ]
   },
+  "listregions": {
+    "name": "ListRegions",
+    "description": "Grants permission to list all regions configured for an IAM Identity Center instance",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Instance",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list the tags that are attached to a specified resource",
@@ -1719,6 +1771,24 @@
       "kms:Decrypt"
     ]
   },
+  "removeregion": {
+    "name": "RemoveRegion",
+    "description": "Grants permission to remove a region from an IAM Identity Center instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Instance",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "identitystore:RemoveRegion",
+      "kms:Decrypt"
+    ]
+  },
   "searchgroups": {
     "name": "SearchGroups",
     "description": "Grants permission to search for groups within the associated directory",

package/data/actions/wafv2.json

@@ -12,6 +12,7 @@
           "amplify:AssociateWebACL",
           "apigateway:SetWebACL",
           "apprunner:AssociateWebAcl",
+          "appsync:AssociateWebACL",
           "appsync:SetWebACL",
           "cognito-idp:AssociateWebACL",
           "ec2:AssociateVerifiedAccessInstanceWebAcl",
@@ -367,6 +368,7 @@
           "amplify:DisassociateWebACL",
           "apigateway:SetWebACL",
           "apprunner:DisassociateWebAcl",
+          "appsync:DisassociateWebACL",
           "appsync:SetWebACL",
           "cognito-idp:DisassociateWebACL",
           "ec2:DisassociateVerifiedAccessInstanceWebAcl",
@@ -599,6 +601,7 @@
         "dependentActions": [
           "amplify:GetWebACLForResource",
           "apprunner:DescribeWebAclForService",
+          "appsync:GetWebACLForResource",
           "cognito-idp:GetWebACLForResource",
           "ec2:GetVerifiedAccessInstanceWebAcl",
           "elasticloadbalancing:GetLoadBalancerWebACL",
@@ -729,6 +732,7 @@
         "dependentActions": [
           "amplify:ListResourcesForWebACL",
           "apprunner:ListAssociatedServicesForWebAcl",
+          "appsync:ListResourcesForWebACL",
           "cognito-idp:ListResourcesForWebACL",
           "ec2:DescribeVerifiedAccessInstanceWebAclAssociations",
           "elasticloadbalancing:DescribeWebACLAssociation"

package/data/conditionKeys/bedrock-agentcore.json

@@ -54,6 +54,11 @@
     "description": "Filters access by namespace",
     "type": "String"
   },
+  "bedrock-agentcore:securitygroups": {
+    "key": "bedrock-agentcore:securityGroups",
+    "description": "Filters access by the ID of security groups configured for the AgentCore runtime",
+    "type": "ArrayOfString"
+  },
   "bedrock-agentcore:sessionid": {
     "key": "bedrock-agentcore:sessionId",
     "description": "Filters access by Session Id",
@@ -64,6 +69,11 @@
     "description": "Filters access by Memory Strategy Id",
     "type": "String"
   },
+  "bedrock-agentcore:subnets": {
+    "key": "bedrock-agentcore:subnets",
+    "description": "Filters access by the ID of subnets configured for the AgentCore runtime",
+    "type": "ArrayOfString"
+  },
   "bedrock-agentcore:userid": {
     "key": "bedrock-agentcore:userid",
     "description": "Filters access by the static user ID value passed in the request",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.15.202601311",
+  "version": "0.15.202602041",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-01-31T05:25:48.191Z",
+  "updatedAt": "2026-02-04T05:35:24.009Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",