@cloud-copilot/iam-data 0.15.202602041 → 0.15.202602061

package/data/actions/bedrock-agentcore.json

@@ -212,6 +212,17 @@
     ],
     "dependentActions": []
   },
+  "createbrowserprofile": {
+    "name": "CreateBrowserProfile",
+    "description": "Grants permission to create a new browser profile",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createcodeinterpreter": {
     "name": "CreateCodeInterpreter",
     "description": "Grants permission to create a new custom code interpreter",
@@ -230,7 +241,11 @@
     "description": "Grants permission to create a new evaluator",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createevent": {
@@ -286,7 +301,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "bedrock-agentcore:KmsKeyArn"
     ],
     "dependentActions": [
       "iam:PassRole"
@@ -321,7 +337,11 @@
     "description": "Grants permission to create a new online evaluation configuration",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": [
       "iam:PassRole"
     ]
@@ -445,6 +465,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletebrowserprofile": {
+    "name": "DeleteBrowserProfile",
+    "description": "Grants permission to delete a browser profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "browser-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletecodeinterpreter": {
     "name": "DeleteCodeInterpreter",
     "description": "Grants permission to delete a custom code interpreter",
@@ -781,6 +816,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getbrowserprofile": {
+    "name": "GetBrowserProfile",
+    "description": "Grants permission to get details of a browser profile",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "browser-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getbrowsersession": {
     "name": "GetBrowserSession",
     "description": "Grants permission to get details of a browser session",
@@ -1405,6 +1455,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listbrowserprofiles": {
+    "name": "ListBrowserProfiles",
+    "description": "Grants permission to list browser profiles",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listbrowsersessions": {
     "name": "ListBrowserSessions",
     "description": "Grants permission to list browser sessions",
@@ -1662,12 +1720,24 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "browser-profile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "code-interpreter-custom",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "evaluator",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "gateway",
         "required": false,
@@ -1686,6 +1756,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "online-evaluation-config",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "runtime",
         "required": false,
@@ -1833,6 +1909,33 @@
     ],
     "dependentActions": []
   },
+  "savebrowsersessionprofile": {
+    "name": "SaveBrowserSessionProfile",
+    "description": "Grants permission to save a browser session profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "browser",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "browser-custom",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "browser-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "settokenvaultcmk": {
     "name": "SetTokenVaultCMK",
     "description": "Grants permission to associate a Customer Managed Key (CMK) or a Service Managed Key with a specific TokenVault",
@@ -1864,6 +1967,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "browser-profile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -2020,12 +2129,24 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "browser-profile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "code-interpreter-custom",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "evaluator",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "gateway",
         "required": false,
@@ -2044,6 +2165,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "online-evaluation-config",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "runtime",
         "required": false,
@@ -2098,12 +2225,24 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "browser-profile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "code-interpreter-custom",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "evaluator",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "gateway",
         "required": false,
@@ -2122,6 +2261,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "online-evaluation-config",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "runtime",
         "required": false,

package/data/actions/dynamodb.json

@@ -630,15 +630,11 @@
     "isPermissionOnly": true,
     "description": "Grants permission to start experiments on a Global Table",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "table",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
+    "resourceTypes": [],
+    "conditionKeys": [
+      "dynamodb:FisActionId",
+      "dynamodb:FisTargetArns"
     ],
-    "conditionKeys": [],
     "dependentActions": []
   },
   "listbackups": {

package/data/actions/glue.json

@@ -553,6 +553,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "connectionType",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1242,6 +1248,21 @@
     ],
     "dependentActions": []
   },
+  "deleteconnectiontype": {
+    "name": "DeleteConnectionType",
+    "description": "Grants permission to delete connection type",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connectionType",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletecrawler": {
     "name": "DeleteCrawler",
     "description": "Grants permission to delete a crawler",
@@ -1774,9 +1795,16 @@
   },
   "describeconnectiontype": {
     "name": "DescribeConnectionType",
-    "description": "Grants permission to describe connection type in glue studio",
+    "description": "Grants permission to describe connection type in glue",
     "accessLevel": "Permissions management",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "connectionType",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -1796,6 +1824,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "connectionType",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -2419,6 +2453,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "connectionType",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -3502,7 +3542,7 @@
   },
   "listconnectiontypes": {
     "name": "ListConnectionTypes",
-    "description": "Grants permission to list connection types in glue studio",
+    "description": "Grants permission to list connection types in glue",
     "accessLevel": "Permissions management",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -3623,6 +3663,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "connectionType",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -3995,11 +4041,34 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "connectionType",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
     "dependentActions": []
   },
+  "registerconnectiontype": {
+    "name": "RegisterConnectionType",
+    "description": "Grants permission to register connection type",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connectionType",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "registerschemaversion": {
     "name": "RegisterSchemaVersion",
     "description": "Grants permission to create a new schema version",
@@ -4696,7 +4765,20 @@
     "name": "TestConnection",
     "description": "Grants permission to test connection in Glue Studio",
     "accessLevel": "Permissions management",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "connection",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "connectionType",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -4962,6 +5044,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "connectionType",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [

package/data/actions/sts.json

@@ -110,6 +110,45 @@
       "accounts.google.com:aud",
       "accounts.google.com:oaud",
       "accounts.google.com:sub",
+      "accounts.google.com:organization_number",
+      "token.actions.githubusercontent.com:actor",
+      "token.actions.githubusercontent.com:actor_id",
+      "token.actions.githubusercontent.com:enterprise_id",
+      "token.actions.githubusercontent.com:environment",
+      "token.actions.githubusercontent.com:job_workflow_ref",
+      "token.actions.githubusercontent.com:ref",
+      "token.actions.githubusercontent.com:repository",
+      "token.actions.githubusercontent.com:repository_id",
+      "token.actions.githubusercontent.com:workflow",
+      "token.actions.githubusercontent.com/${SubPath}:actor",
+      "token.actions.githubusercontent.com/${SubPath}:actor_id",
+      "token.actions.githubusercontent.com/${SubPath}:enterprise_id",
+      "token.actions.githubusercontent.com/${SubPath}:environment",
+      "token.actions.githubusercontent.com/${SubPath}:job_workflow_ref",
+      "token.actions.githubusercontent.com/${SubPath}:ref",
+      "token.actions.githubusercontent.com/${SubPath}:repository",
+      "token.actions.githubusercontent.com/${SubPath}:repository_id",
+      "token.actions.githubusercontent.com/${SubPath}:workflow",
+      "token.actions.${Domain}.ghe.com:actor",
+      "token.actions.${Domain}.ghe.com:actor_id",
+      "token.actions.${Domain}.ghe.com:enterprise_id",
+      "token.actions.${Domain}.ghe.com:environment",
+      "token.actions.${Domain}.ghe.com:job_workflow_ref",
+      "token.actions.${Domain}.ghe.com:ref",
+      "token.actions.${Domain}.ghe.com:repository",
+      "token.actions.${Domain}.ghe.com:repository_id",
+      "token.actions.${Domain}.ghe.com:workflow",
+      "github.com/enterprises/${EnterpriseName}:actor",
+      "github.com/enterprises/${EnterpriseName}:actor_id",
+      "github.com/enterprises/${EnterpriseName}:enterprise_id",
+      "github.com/enterprises/${EnterpriseName}:environment",
+      "github.com/enterprises/${EnterpriseName}:job_workflow_ref",
+      "github.com/enterprises/${EnterpriseName}:ref",
+      "github.com/enterprises/${EnterpriseName}:repository",
+      "github.com/enterprises/${EnterpriseName}:repository_id",
+      "github.com/enterprises/${EnterpriseName}:workflow",
+      "oidc.circleci.com/org/${OrgId}:project_id",
+      "idcs-${OciUniqueIdentifier}.identity.oraclecloud.com:rpst_id",
       "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
       "sts:TransitiveTagKeys",

package/data/conditionKeys/bedrock-agentcore.json

@@ -44,6 +44,11 @@
     "description": "Filters access by the subject claim (sub) in the JWT passed in the request",
     "type": "String"
   },
+  "bedrock-agentcore:kmskeyarn": {
+    "key": "bedrock-agentcore:KmsKeyArn",
+    "description": "Filters access by KMS Key arn provided",
+    "type": "String"
+  },
   "bedrock-agentcore:actorid": {
     "key": "bedrock-agentcore:actorId",
     "description": "Filters access by Actor Id",

package/data/conditionKeys/dynamodb.json

@@ -29,6 +29,16 @@
     "description": "Filters access by the first partition key of the table",
     "type": "ArrayOfString"
   },
+  "dynamodb:fisactionid": {
+    "key": "dynamodb:FisActionId",
+    "description": "Filters access by the ID of an AWS FIS action",
+    "type": "String"
+  },
+  "dynamodb:fistargetarns": {
+    "key": "dynamodb:FisTargetArns",
+    "description": "Filters access by the ARN of an AWS FIS target",
+    "type": "ArrayOfARN"
+  },
   "dynamodb:fourthpartitionkeyvalues": {
     "key": "dynamodb:FourthPartitionKeyValues",
     "description": "Filters access by the forth partition key of the table",

package/data/conditionKeys/sts.json

@@ -9,6 +9,11 @@
     "description": "Filters access by the Google audience",
     "type": "String"
   },
+  "accounts.google.com:organization_number": {
+    "key": "accounts.google.com:organization_number",
+    "description": "Filters access by the organization number that the Google identity belongs to",
+    "type": "String"
+  },
   "accounts.google.com:sub": {
     "key": "accounts.google.com:sub",
     "description": "Filters access by the subject of the claim (the Google user ID)",
@@ -44,6 +49,51 @@
     "description": "Filters access by the subject of the claim (the Amazon Cognito user ID)",
     "type": "String"
   },
+  "github.com/enterprises/${enterprisename}:actor": {
+    "key": "github.com/enterprises/${EnterpriseName}:actor",
+    "description": "Filters access by the personal account that initiated the workflow run",
+    "type": "String"
+  },
+  "github.com/enterprises/${enterprisename}:actor_id": {
+    "key": "github.com/enterprises/${EnterpriseName}:actor_id",
+    "description": "Filters access by the ID of the personal account that initiated the workflow run",
+    "type": "String"
+  },
+  "github.com/enterprises/${enterprisename}:enterprise_id": {
+    "key": "github.com/enterprises/${EnterpriseName}:enterprise_id",
+    "description": "Filters access by the ID of the enterprise that contains the repository from where the workflow is running",
+    "type": "String"
+  },
+  "github.com/enterprises/${enterprisename}:environment": {
+    "key": "github.com/enterprises/${EnterpriseName}:environment",
+    "description": "Filters access by the name of the environment used by the job",
+    "type": "String"
+  },
+  "github.com/enterprises/${enterprisename}:job_workflow_ref": {
+    "key": "github.com/enterprises/${EnterpriseName}:job_workflow_ref",
+    "description": "Filters access by the reference path to the reusable workflow for jobs using a reusable workflow",
+    "type": "String"
+  },
+  "github.com/enterprises/${enterprisename}:ref": {
+    "key": "github.com/enterprises/${EnterpriseName}:ref",
+    "description": "Filters access by the git ref (branch or tag) that triggered the workflow run",
+    "type": "String"
+  },
+  "github.com/enterprises/${enterprisename}:repository": {
+    "key": "github.com/enterprises/${EnterpriseName}:repository",
+    "description": "Filters access by the repository from where the workflow is running",
+    "type": "String"
+  },
+  "github.com/enterprises/${enterprisename}:repository_id": {
+    "key": "github.com/enterprises/${EnterpriseName}:repository_id",
+    "description": "Filters access by the ID of the repository from where the workflow is running",
+    "type": "String"
+  },
+  "github.com/enterprises/${enterprisename}:workflow": {
+    "key": "github.com/enterprises/${EnterpriseName}:workflow",
+    "description": "Filters access by the name of the workflow",
+    "type": "String"
+  },
   "graph.facebook.com:app_id": {
     "key": "graph.facebook.com:app_id",
     "description": "Filters access by the Facebook application ID",
@@ -59,6 +109,16 @@
     "description": "Filters access by the tags that are attached to the role that is being assumed",
     "type": "String"
   },
+  "idcs-${ociuniqueidentifier}.identity.oraclecloud.com:rpst_id": {
+    "key": "idcs-${OciUniqueIdentifier}.identity.oraclecloud.com:rpst_id",
+    "description": "Filters access by the OCI resource principal session token ID",
+    "type": "String"
+  },
+  "oidc.circleci.com/org/${orgid}:project_id": {
+    "key": "oidc.circleci.com/org/${OrgId}:project_id",
+    "description": "Filters access by the CircleCI project ID",
+    "type": "String"
+  },
   "saml:aud": {
     "key": "saml:aud",
     "description": "Filters access by the endpoint URL to which SAML assertions are presented",
@@ -274,6 +334,141 @@
     "description": "Filters access by the transitive tag keys that are passed in the request",
     "type": "ArrayOfString"
   },
+  "token.actions.${domain}.ghe.com:actor": {
+    "key": "token.actions.${Domain}.ghe.com:actor",
+    "description": "Filters access by the personal account that initiated the workflow run",
+    "type": "String"
+  },
+  "token.actions.${domain}.ghe.com:actor_id": {
+    "key": "token.actions.${Domain}.ghe.com:actor_id",
+    "description": "Filters access by the ID of the personal account that initiated the workflow run",
+    "type": "String"
+  },
+  "token.actions.${domain}.ghe.com:enterprise_id": {
+    "key": "token.actions.${Domain}.ghe.com:enterprise_id",
+    "description": "Filters access by the ID of the enterprise that contains the repository from where the workflow is running",
+    "type": "String"
+  },
+  "token.actions.${domain}.ghe.com:environment": {
+    "key": "token.actions.${Domain}.ghe.com:environment",
+    "description": "Filters access by the name of the environment used by the job",
+    "type": "String"
+  },
+  "token.actions.${domain}.ghe.com:job_workflow_ref": {
+    "key": "token.actions.${Domain}.ghe.com:job_workflow_ref",
+    "description": "Filters access by the reference path to the reusable workflow for jobs using a reusable workflow",
+    "type": "String"
+  },
+  "token.actions.${domain}.ghe.com:ref": {
+    "key": "token.actions.${Domain}.ghe.com:ref",
+    "description": "Filters access by the git ref (branch or tag) that triggered the workflow run",
+    "type": "String"
+  },
+  "token.actions.${domain}.ghe.com:repository": {
+    "key": "token.actions.${Domain}.ghe.com:repository",
+    "description": "Filters access by the repository from where the workflow is running",
+    "type": "String"
+  },
+  "token.actions.${domain}.ghe.com:repository_id": {
+    "key": "token.actions.${Domain}.ghe.com:repository_id",
+    "description": "Filters access by the ID of the repository from where the workflow is running",
+    "type": "String"
+  },
+  "token.actions.${domain}.ghe.com:workflow": {
+    "key": "token.actions.${Domain}.ghe.com:workflow",
+    "description": "Filters access by the name of the workflow",
+    "type": "String"
+  },
+  "token.actions.githubusercontent.com/${subpath}:actor": {
+    "key": "token.actions.githubusercontent.com/${SubPath}:actor",
+    "description": "Filters access by the personal account that initiated the workflow run",
+    "type": "String"
+  },
+  "token.actions.githubusercontent.com/${subpath}:actor_id": {
+    "key": "token.actions.githubusercontent.com/${SubPath}:actor_id",
+    "description": "Filters access by the ID of the personal account that initiated the workflow run",
+    "type": "String"
+  },
+  "token.actions.githubusercontent.com/${subpath}:enterprise_id": {
+    "key": "token.actions.githubusercontent.com/${SubPath}:enterprise_id",
+    "description": "Filters access by the ID of the enterprise that contains the repository from where the workflow is running",
+    "type": "String"
+  },
+  "token.actions.githubusercontent.com/${subpath}:environment": {
+    "key": "token.actions.githubusercontent.com/${SubPath}:environment",
+    "description": "Filters access by the name of the environment used by the job",
+    "type": "String"
+  },
+  "token.actions.githubusercontent.com/${subpath}:job_workflow_ref": {
+    "key": "token.actions.githubusercontent.com/${SubPath}:job_workflow_ref",
+    "description": "Filters access by the reference path to the reusable workflow for jobs using a reusable workflow",
+    "type": "String"
+  },
+  "token.actions.githubusercontent.com/${subpath}:ref": {
+    "key": "token.actions.githubusercontent.com/${SubPath}:ref",
+    "description": "Filters access by the git ref (branch or tag) that triggered the workflow run",
+    "type": "String"
+  },
+  "token.actions.githubusercontent.com/${subpath}:repository": {
+    "key": "token.actions.githubusercontent.com/${SubPath}:repository",
+    "description": "Filters access by the repository from where the workflow is running",
+    "type": "String"
+  },
+  "token.actions.githubusercontent.com/${subpath}:repository_id": {
+    "key": "token.actions.githubusercontent.com/${SubPath}:repository_id",
+    "description": "Filters access by the ID of the repository from where the workflow is running",
+    "type": "String"
+  },
+  "token.actions.githubusercontent.com/${subpath}:workflow": {
+    "key": "token.actions.githubusercontent.com/${SubPath}:workflow",
+    "description": "Filters access by the name of the workflow",
+    "type": "String"
+  },
+  "token.actions.githubusercontent.com:actor": {
+    "key": "token.actions.githubusercontent.com:actor",
+    "description": "Filters access by the personal account that initiated the workflow run",
+    "type": "String"
+  },
+  "token.actions.githubusercontent.com:actor_id": {
+    "key": "token.actions.githubusercontent.com:actor_id",
+    "description": "Filters access by the ID of the personal account that initiated the workflow run",
+    "type": "String"
+  },
+  "token.actions.githubusercontent.com:enterprise_id": {
+    "key": "token.actions.githubusercontent.com:enterprise_id",
+    "description": "Filters access by the ID of the enterprise that contains the repository from where the workflow is running",
+    "type": "String"
+  },
+  "token.actions.githubusercontent.com:environment": {
+    "key": "token.actions.githubusercontent.com:environment",
+    "description": "Filters access by the name of the environment used by the job",
+    "type": "String"
+  },
+  "token.actions.githubusercontent.com:job_workflow_ref": {
+    "key": "token.actions.githubusercontent.com:job_workflow_ref",
+    "description": "Filters access by the reference path to the reusable workflow for jobs using a reusable workflow",
+    "type": "String"
+  },
+  "token.actions.githubusercontent.com:ref": {
+    "key": "token.actions.githubusercontent.com:ref",
+    "description": "Filters access by the git ref (branch or tag) that triggered the workflow run",
+    "type": "String"
+  },
+  "token.actions.githubusercontent.com:repository": {
+    "key": "token.actions.githubusercontent.com:repository",
+    "description": "Filters access by the repository from where the workflow is running",
+    "type": "String"
+  },
+  "token.actions.githubusercontent.com:repository_id": {
+    "key": "token.actions.githubusercontent.com:repository_id",
+    "description": "Filters access by the ID of the repository from where the workflow is running",
+    "type": "String"
+  },
+  "token.actions.githubusercontent.com:workflow": {
+    "key": "token.actions.githubusercontent.com:workflow",
+    "description": "Filters access by the name of the workflow",
+    "type": "String"
+  },
   "www.amazon.com:app_id": {
     "key": "www.amazon.com:app_id",
     "description": "Filters access by the Login with Amazon application ID",

package/data/conditionPatterns.json

@@ -63,9 +63,48 @@
     "securityhub:ASFFSyntaxPath/.+?": "securityhub:ASFFSyntaxPath/${ASFFSyntaxPath}",
     "securityhub:OCSFSyntaxPath/.+?": "securityhub:OCSFSyntaxPath/${OCSFSyntaxPath}"
   },
+  "github.com/enterprises/${EnterpriseName}": {
+    "github.com/enterprises/.+?:actor": "github.com/enterprises/${EnterpriseName}:actor",
+    "github.com/enterprises/.+?:actor_id": "github.com/enterprises/${EnterpriseName}:actor_id",
+    "github.com/enterprises/.+?:enterprise_id": "github.com/enterprises/${EnterpriseName}:enterprise_id",
+    "github.com/enterprises/.+?:environment": "github.com/enterprises/${EnterpriseName}:environment",
+    "github.com/enterprises/.+?:job_workflow_ref": "github.com/enterprises/${EnterpriseName}:job_workflow_ref",
+    "github.com/enterprises/.+?:ref": "github.com/enterprises/${EnterpriseName}:ref",
+    "github.com/enterprises/.+?:repository": "github.com/enterprises/${EnterpriseName}:repository",
+    "github.com/enterprises/.+?:repository_id": "github.com/enterprises/${EnterpriseName}:repository_id",
+    "github.com/enterprises/.+?:workflow": "github.com/enterprises/${EnterpriseName}:workflow"
+  },
+  "idcs-${OciUniqueIdentifier}.identity.oraclecloud.com": {
+    "idcs-.+?.identity.oraclecloud.com:rpst_id": "idcs-${OciUniqueIdentifier}.identity.oraclecloud.com:rpst_id"
+  },
+  "oidc.circleci.com/org/${OrgId}": {
+    "oidc.circleci.com/org/.+?:project_id": "oidc.circleci.com/org/${OrgId}:project_id"
+  },
   "sts": {
     "sts:RequestContext/.+?": "sts:RequestContext/${ContextKey}"
   },
+  "token.actions.${Domain}.ghe.com": {
+    "token.actions..+?.ghe.com:actor": "token.actions.${Domain}.ghe.com:actor",
+    "token.actions..+?.ghe.com:actor_id": "token.actions.${Domain}.ghe.com:actor_id",
+    "token.actions..+?.ghe.com:enterprise_id": "token.actions.${Domain}.ghe.com:enterprise_id",
+    "token.actions..+?.ghe.com:environment": "token.actions.${Domain}.ghe.com:environment",
+    "token.actions..+?.ghe.com:job_workflow_ref": "token.actions.${Domain}.ghe.com:job_workflow_ref",
+    "token.actions..+?.ghe.com:ref": "token.actions.${Domain}.ghe.com:ref",
+    "token.actions..+?.ghe.com:repository": "token.actions.${Domain}.ghe.com:repository",
+    "token.actions..+?.ghe.com:repository_id": "token.actions.${Domain}.ghe.com:repository_id",
+    "token.actions..+?.ghe.com:workflow": "token.actions.${Domain}.ghe.com:workflow"
+  },
+  "token.actions.githubusercontent.com/${SubPath}": {
+    "token.actions.githubusercontent.com/.+?:actor": "token.actions.githubusercontent.com/${SubPath}:actor",
+    "token.actions.githubusercontent.com/.+?:actor_id": "token.actions.githubusercontent.com/${SubPath}:actor_id",
+    "token.actions.githubusercontent.com/.+?:enterprise_id": "token.actions.githubusercontent.com/${SubPath}:enterprise_id",
+    "token.actions.githubusercontent.com/.+?:environment": "token.actions.githubusercontent.com/${SubPath}:environment",
+    "token.actions.githubusercontent.com/.+?:job_workflow_ref": "token.actions.githubusercontent.com/${SubPath}:job_workflow_ref",
+    "token.actions.githubusercontent.com/.+?:ref": "token.actions.githubusercontent.com/${SubPath}:ref",
+    "token.actions.githubusercontent.com/.+?:repository": "token.actions.githubusercontent.com/${SubPath}:repository",
+    "token.actions.githubusercontent.com/.+?:repository_id": "token.actions.githubusercontent.com/${SubPath}:repository_id",
+    "token.actions.githubusercontent.com/.+?:workflow": "token.actions.githubusercontent.com/${SubPath}:workflow"
+  },
   "ssm": {
     "ssm:resourceTag/.+?": "ssm:resourceTag/${TagKey}"
   },

package/data/resourceTypes/bedrock-agentcore.json

@@ -1,11 +1,17 @@
 {
   "evaluator": {
     "key": "evaluator",
-    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:evaluator/${EvaluatorId}"
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:evaluator/${EvaluatorId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "online-evaluation-config": {
     "key": "online-evaluation-config",
-    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:online-evaluation-config/${OnlineEvaluationConfigId}"
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:online-evaluation-config/${OnlineEvaluationConfigId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "memory": {
     "key": "memory",
@@ -78,6 +84,13 @@
     "key": "browser",
     "arn": "arn:${Partition}:bedrock-agentcore:${Region}:aws:browser/${BrowserId}"
   },
+  "browser-profile": {
+    "key": "browser-profile",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:aws:browser-profile/${BrowserProfileId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "workload-identity-directory": {
     "key": "workload-identity-directory",
     "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}",

package/data/resourceTypes/glue.json

@@ -131,5 +131,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "connectiontype": {
+    "key": "connectionType",
+    "arn": "arn:${Partition}:glue:${Region}:${Account}:connectionType:${ConnectionTypeName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/unassociatedConditions.json

@@ -11,12 +11,30 @@
   "cognito-identity.amazonaws.com": [
     "sts"
   ],
+  "github.com/enterprises/${EnterpriseName}": [
+    "sts"
+  ],
   "graph.facebook.com": [
     "sts"
   ],
+  "idcs-${OciUniqueIdentifier}.identity.oraclecloud.com": [
+    "sts"
+  ],
+  "oidc.circleci.com/org/${OrgId}": [
+    "sts"
+  ],
   "saml": [
     "sts"
   ],
+  "token.actions.${Domain}.ghe.com": [
+    "sts"
+  ],
+  "token.actions.githubusercontent.com/${SubPath}": [
+    "sts"
+  ],
+  "token.actions.githubusercontent.com": [
+    "sts"
+  ],
   "www.amazon.com": [
     "sts"
   ],

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.15.202602041",
+  "version": "0.15.202602061",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-02-04T05:35:24.009Z",
+  "updatedAt": "2026-02-06T05:41:26.378Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",