@cloud-copilot/iam-data 0.15.202602101 → 0.15.202602121

package/data/actions/bcm-pricing-calculator.json

@@ -19,7 +19,10 @@
     "description": "Grants permission to create a new bill scenario",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createbillscenariocommitmentmodification": {
@@ -57,7 +60,10 @@
     "description": "Grants permission to create a new Workload estimate",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createworkloadestimateusage": {
@@ -359,7 +365,24 @@
     "name": "TagResource",
     "description": "Grants permission to add a tag to a resource",
     "accessLevel": "Tagging",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "bill-scenario",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "workload-estimate",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -370,7 +393,24 @@
     "name": "UntagResource",
     "description": "Grants permission to remove a tag from a resource",
     "accessLevel": "Tagging",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "bill-scenario",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "workload-estimate",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:TagKeys"
     ],

package/data/actions/kafka.json

@@ -136,6 +136,24 @@
     ],
     "dependentActions": []
   },
+  "createtopic": {
+    "name": "CreateTopic",
+    "description": "Grants permission to create a Kafka topic in an MSK cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "topic",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kafka-cluster:Connect",
+      "kafka-cluster:CreateTopic"
+    ]
+  },
   "createvpcconnection": {
     "name": "CreateVpcConnection",
     "description": "Grants permission to create a MSK VPC connection",
@@ -235,6 +253,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletetopic": {
+    "name": "DeleteTopic",
+    "description": "Grants permission to delete a Kafka topic from an MSK cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "topic",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kafka-cluster:Connect",
+      "kafka-cluster:DeleteTopic",
+      "kafka-cluster:DescribeTopic"
+    ]
+  },
   "deletevpcconnection": {
     "name": "DeleteVpcConnection",
     "description": "Grants permission to delete a MSK VPC connection",
@@ -889,5 +926,25 @@
     ],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "updatetopic": {
+    "name": "UpdateTopic",
+    "description": "Grants permission to update the configuration of a Kafka topic in an MSK cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "topic",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kafka-cluster:AlterTopic",
+      "kafka-cluster:AlterTopicDynamicConfiguration",
+      "kafka-cluster:Connect",
+      "kafka-cluster:DescribeTopic"
+    ]
   }
 }

package/data/actions/securityagent.json

@@ -213,14 +213,7 @@
     "name": "CreateAgentSpace",
     "description": "Grants permission to create an agent space record",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "Application",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -301,7 +294,7 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "Application",
+        "name": "AgentSpace",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -659,14 +652,7 @@
     "name": "GetLoginSessionCredentials",
     "description": "Grants permission to retrieve credentials for a one time login session",
     "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "Application",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -689,14 +675,7 @@
     "name": "HandleOneTimeLoginSession",
     "description": "Grants permission to process and invalidate a one time login session",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "Application",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },

package/data/actions/signin.json

@@ -3,7 +3,20 @@
     "name": "AuthorizeOAuth2Access",
     "description": "Grants permission to authenticate through a browser and obtain an OAuth 2.0 authorization code for credential exchange",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "oauth2-public-client-localhost",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "oauth2-public-client-remote",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -11,7 +24,20 @@
     "name": "CreateOAuth2Token",
     "description": "Grants permission to exchange an authorization code for OAuth 2.0 access token and refresh token that can be used to access AWS services from developer tools and applications",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "oauth2-public-client-localhost",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "oauth2-public-client-remote",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },

package/data/actions/workspaces.json

@@ -275,19 +275,26 @@
       {
         "name": "directoryid",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "workspacebundle",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "workspaceid",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],

package/data/resourceTypes/bcm-pricing-calculator.json

@@ -1,14 +1,20 @@
 {
   "bill-estimate": {
     "key": "bill-estimate",
-    "arn": "arn:${Partition}:bcm-pricing-calculator:${Region}:${Account}:bill-estimate/${BillEstimateId}"
+    "arn": "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-estimate/${BillEstimateId}"
   },
   "bill-scenario": {
     "key": "bill-scenario",
-    "arn": "arn:${Partition}:bcm-pricing-calculator:${Region}:${Account}:bill-scenario/${BillScenarioId}"
+    "arn": "arn:${Partition}:bcm-pricing-calculator::${Account}:bill-scenario/${BillScenarioId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "workload-estimate": {
     "key": "workload-estimate",
-    "arn": "arn:${Partition}:bcm-pricing-calculator:${Region}:${Account}:workload-estimate/${WorkloadEstimateId}"
+    "arn": "arn:${Partition}:bcm-pricing-calculator::${Account}:workload-estimate/${WorkloadEstimateId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/signin.json

@@ -1 +1,10 @@
-{}
+{
+  "oauth2-public-client-localhost": {
+    "key": "oauth2-public-client-localhost",
+    "arn": "arn:${Partition}:signin:${Region}:${Account}:oauth2/public-client/localhost"
+  },
+  "oauth2-public-client-remote": {
+    "key": "oauth2-public-client-remote",
+    "arn": "arn:${Partition}:signin:${Region}:${Account}:oauth2/public-client/remote"
+  }
+}

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.15.202602101",
+  "version": "0.15.202602121",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-02-10T06:00:46.199Z",
+  "updatedAt": "2026-02-12T05:50:30.429Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",