@cloud-copilot/iam-data 0.18.202603041 → 0.18.202603071

package/data/actions/connect.json

@@ -604,6 +604,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
       "connect:InstanceId"
@@ -715,6 +716,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
       "connect:InstanceId"
@@ -1112,6 +1114,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:InstanceId"
     ],
     "dependentActions": []
@@ -1135,6 +1138,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:InstanceId"
     ],
     "dependentActions": []
@@ -1604,6 +1608,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
       "connect:InstanceId"
@@ -2299,6 +2304,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:InstanceId",
       "connect:ContactAssociationId",
       "connect:Channel",
@@ -3287,6 +3293,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
       "connect:InstanceId"
@@ -3306,6 +3313,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:InstanceId",
       "connect:ContactAssociationId",
       "connect:Channel",
@@ -3686,6 +3694,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:InstanceId"
     ],
     "dependentActions": []
@@ -3737,6 +3746,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:InstanceId"
     ],
     "dependentActions": []
@@ -3841,6 +3851,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:InstanceId",
       "connect:ContactAssociationId",
       "connect:Channel",
@@ -4310,7 +4321,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "listrealtimecontactanalysissegmentsv2": {
@@ -4326,6 +4339,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:ListRealtimeContactAnalysisSegmentsByOutputType",
       "connect:ListRealtimeContactAnalysisSegmentsBySegmentType"
     ],
@@ -5038,6 +5052,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:ContactAssociationId",
       "connect:Channel",
       "connect:UserArn"
@@ -5155,6 +5170,7 @@
       }
     ],
     "conditionKeys": [
+      "connect:SearchTag/${TagKey}",
       "connect:InstanceId",
       "connect:SearchContactsByContactAnalysis",
       "connect:Channel",
@@ -5618,6 +5634,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
       "connect:InstanceId",
@@ -5673,6 +5690,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:InstanceId"
     ],
     "dependentActions": []
@@ -5713,6 +5731,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:ContactAssociationId",
       "connect:Channel",
       "connect:UserArn"
@@ -5731,7 +5750,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "startemailcontact": {
@@ -5861,6 +5882,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:InstanceId",
       "connect:ContactAssociationId",
       "connect:Channel",
@@ -5978,6 +6000,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:ContactAssociationId",
       "connect:Channel",
       "connect:UserArn"
@@ -5996,7 +6019,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "stopforecastingplanningschedulingintegration": {
@@ -6047,6 +6072,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:ContactAssociationId",
       "connect:Channel",
       "connect:UserArn"
@@ -6066,6 +6092,8 @@
       }
     ],
     "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}",
       "connect:InstanceId",
       "connect:ContactAssociationId",
       "connect:Channel",
@@ -6254,6 +6282,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:InstanceId",
       "connect:ContactAssociationId",
       "connect:Channel",
@@ -6274,6 +6303,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:TagKeys",
       "connect:InstanceId",
       "connect:ContactAssociationId",
       "connect:Channel",
@@ -6484,6 +6514,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:InstanceId",
       "connect:ContactAssociationId",
       "connect:Channel",
@@ -6504,6 +6535,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:InstanceId",
       "connect:ContactAssociationId",
       "connect:Channel",
@@ -6652,6 +6684,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:InstanceId",
       "connect:ContactAssociationId",
       "connect:Channel",
@@ -6672,6 +6705,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:InstanceId",
       "connect:ContactAssociationId",
       "connect:Channel",
@@ -6917,6 +6951,7 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "connect:InstanceId"
     ],
     "dependentActions": []

package/data/actions/health-agent.json

@@ -0,0 +1,854 @@
+{
+  "activatesubscription": {
+    "name": "ActivateSubscription",
+    "description": "Grants permission to activate a subscription to enable billing for a user",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Subscription",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "cancelappointment": {
+    "name": "CancelAppointment",
+    "isPermissionOnly": true,
+    "description": "Grants permission to cancel an appointment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createagent": {
+    "name": "CreateAgent",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create a new agent with an initial version in DRAFT state",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Agent",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createdomain": {
+    "name": "CreateDomain",
+    "description": "Grants permission to create a new domain for managing HealthAgent resources",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": [
+      "health-agent:TagResource",
+      "iam:PassRole"
+    ]
+  },
+  "createintegration": {
+    "name": "CreateIntegration",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create a new integration for a domain",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createsession": {
+    "name": "CreateSession",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create a new session with specified agent configurations",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Agent",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createsubscription": {
+    "name": "CreateSubscription",
+    "description": "Grants permission to create a new subscription within a domain for billing and user management",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Subscription",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deactivatesubscription": {
+    "name": "DeactivateSubscription",
+    "description": "Grants permission to deactivate a subscription to stop billing for a user",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Subscription",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteagent": {
+    "name": "DeleteAgent",
+    "description": "Grants permission to delete an agent configuration and all its versions",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Agent",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedomain": {
+    "name": "DeleteDomain",
+    "description": "Grants permission to delete a domain and all associated resources",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteintegration": {
+    "name": "DeleteIntegration",
+    "isPermissionOnly": true,
+    "description": "Grants permission to delete an integration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getagent": {
+    "name": "GetAgent",
+    "isPermissionOnly": true,
+    "description": "Grants permission to retrieve an agent configuration, defaulting to the most recent version if not specified",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Agent",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getcareteamprovider": {
+    "name": "GetCareTeamProvider",
+    "isPermissionOnly": true,
+    "description": "Grants permission to retrieve the care team provider of a patient",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getdomain": {
+    "name": "GetDomain",
+    "description": "Grants permission to retrieve information about a domain",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getintegration": {
+    "name": "GetIntegration",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get an existing integration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmedicalscribelisteningsession": {
+    "name": "GetMedicalScribeListeningSession",
+    "description": "Grants permission to retrieve details about an existing Medical Scribe listening session",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Subscription",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getpatient": {
+    "name": "GetPatient",
+    "isPermissionOnly": true,
+    "description": "Grants permission to retrieve patient information",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getpatientinsightsjob": {
+    "name": "GetPatientInsightsJob",
+    "description": "Grants permission to get details of a started patient insights job",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "PatientInsightsJob",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getpractitioner": {
+    "name": "GetPractitioner",
+    "isPermissionOnly": true,
+    "description": "Grants permission to retrieve practitioner information",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getsessioncontext": {
+    "name": "GetSessionContext",
+    "isPermissionOnly": true,
+    "description": "Grants permission to retrieve structured session context including attributes and collected data",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getsubscription": {
+    "name": "GetSubscription",
+    "description": "Grants permission to retrieve information about a subscription",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Subscription",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invokeagent": {
+    "name": "InvokeAgent",
+    "isPermissionOnly": true,
+    "description": "Grants permission to invoke an agent within a session with streaming response support",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listagents": {
+    "name": "ListAgents",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list all agents in a domain",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listappointmentslots": {
+    "name": "ListAppointmentSlots",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list available appointment slots",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listdomains": {
+    "name": "ListDomains",
+    "description": "Grants permission to list domains for a given account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listintegrations": {
+    "name": "ListIntegrations",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list integrations for a domain",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listpatientappointments": {
+    "name": "ListPatientAppointments",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list patient appointments",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listpatientinsurancecoverages": {
+    "name": "ListPatientInsuranceCoverages",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list patient insurance coverages",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listproviders": {
+    "name": "ListProviders",
+    "isPermissionOnly": true,
+    "description": "Grants permission to retrieve active providers available for scheduling appointments with a patient",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listsubscriptions": {
+    "name": "ListSubscriptions",
+    "description": "Grants permission to list all subscriptions within a domain",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list the tags for the specified resource",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "matchpatient": {
+    "name": "MatchPatient",
+    "isPermissionOnly": true,
+    "description": "Grants permission to match a patient",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "publishagent": {
+    "name": "PublishAgent",
+    "isPermissionOnly": true,
+    "description": "Grants permission to publish an agent configuration version",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Agent",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "rescheduleappointment": {
+    "name": "RescheduleAppointment",
+    "isPermissionOnly": true,
+    "description": "Grants permission to reschedule an appointment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "scheduleappointment": {
+    "name": "ScheduleAppointment",
+    "isPermissionOnly": true,
+    "description": "Grants permission to schedule an appointment for a patient",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startmedicalscribelisteningsession": {
+    "name": "StartMedicalScribeListeningSession",
+    "description": "Grants permission to start a new Medical Scribe listening session for real-time audio transcription",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Subscription",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startpatientinsightsjob": {
+    "name": "StartPatientInsightsJob",
+    "description": "Grants permission to start a new patient insights job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "PatientInsightsJob",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to add the specified tags to the specified resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove the tags identified by the TagKeys list from a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updateagent": {
+    "name": "UpdateAgent",
+    "isPermissionOnly": true,
+    "description": "Grants permission to update a draft agent configuration, creating a new draft version if none exists",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Agent",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateintegration": {
+    "name": "UpdateIntegration",
+    "isPermissionOnly": true,
+    "description": "Grants permission to update an existing integration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatesession": {
+    "name": "UpdateSession",
+    "isPermissionOnly": true,
+    "description": "Grants permission to update session attributes such as departmentId and appointmentType",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/mpa.json

@@ -250,6 +250,23 @@
     ],
     "dependentActions": []
   },
+  "startapprovalteambaseline": {
+    "name": "StartApprovalTeamBaseline",
+    "description": "Grants permission to start a baseline for an active approval team",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "approval-team",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "startsession": {
     "name": "StartSession",
     "isPermissionOnly": true,

package/data/actions/securityagent.json

@@ -179,6 +179,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "batchgettargetdomains": {
+    "name": "BatchGetTargetDomains",
+    "description": "Grants permission to retrieve multiple target domains in a single request",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "TargetDomain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchgettasks": {
     "name": "BatchGetTasks",
     "description": "Grants permission to retrieve multiple security testing tasks in a single request",
@@ -333,6 +348,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createtargetdomain": {
+    "name": "CreateTargetDomain",
+    "description": "Grants permission to create a target domain record",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteagentinstance": {
     "name": "DeleteAgentInstance",
     "description": "Grants permission to delete an agent instance record",
@@ -483,6 +506,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletetargetdomain": {
+    "name": "DeleteTargetDomain",
+    "description": "Grants permission to delete a target domain record",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "TargetDomain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describefindings": {
     "name": "DescribeFindings",
     "description": "Grants permission to retrieve security findings for a penetration test or security testing tasks in a penetration test",
@@ -588,6 +626,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdesignreviewfeedback": {
+    "name": "GetDesignReviewFeedback",
+    "description": "Grants permission to get feedback for a design review comment",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdocreviewtask": {
     "name": "GetDocReviewTask",
     "description": "Grants permission to retrieve a document review task",
@@ -952,6 +1005,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listtargetdomains": {
+    "name": "ListTargetDomains",
+    "description": "Grants permission to list target domains",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtasks": {
     "name": "ListTasks",
     "description": "Grants permission to list security testing tasks associated with a pentest job",
@@ -967,6 +1028,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putdesignreviewfeedback": {
+    "name": "PutDesignReviewFeedback",
+    "description": "Grants permission to submit feedback for a design review comment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startcoderemediation": {
     "name": "StartCodeRemediation",
     "description": "Grants permission to start code remediation for the findings",
@@ -1194,13 +1270,28 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatetargetdomain": {
+    "name": "UpdateTargetDomain",
+    "description": "Grants permission to update a target domain record",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "TargetDomain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "verifytargetdomain": {
     "name": "VerifyTargetDomain",
-    "description": "Grants permission to verify ownership for a registered target domain in an agent instance",
+    "description": "Grants permission to verify ownership for a registered target domain",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "AgentSpace",
+        "name": "TargetDomain",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []

package/data/conditionKeys/health-agent.json

@@ -0,0 +1,17 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/resourceTypes/health-agent.json

@@ -0,0 +1,29 @@
+{
+  "domain": {
+    "key": "Domain",
+    "arn": "arn:${Partition}:health-agent:${Region}:${Account}:domain/${DomainId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "patientinsightsjob": {
+    "key": "PatientInsightsJob",
+    "arn": "arn:${Partition}:health-agent:${Region}:${Account}:domain/${DomainId}/patient-insights-job/${JobId}"
+  },
+  "subscription": {
+    "key": "Subscription",
+    "arn": "arn:${Partition}:health-agent:${Region}:${Account}:domain/${DomainId}/subscription/${SubscriptionId}"
+  },
+  "integration": {
+    "key": "Integration",
+    "arn": "arn:${Partition}:health-agent:${Region}:${Account}:domain/${DomainId}/integration/${IntegrationId}"
+  },
+  "agent": {
+    "key": "Agent",
+    "arn": "arn:${Partition}:health-agent:${Region}:${Account}:domain/${DomainId}/agent/${AgentId}"
+  },
+  "session": {
+    "key": "Session",
+    "arn": "arn:${Partition}:health-agent:${Region}:${Account}:domain/${DomainId}/session/${SessionId}"
+  }
+}

package/data/resourceTypes/securityagent.json

@@ -23,6 +23,10 @@
     "key": "AgentSpace",
     "arn": "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/${AgentId}"
   },
+  "targetdomain": {
+    "key": "TargetDomain",
+    "arn": "arn:${Partition}:securityagent:${Region}:${Account}:target-domain/${TargetDomainId}"
+  },
   "artifact": {
     "key": "Artifact",
     "arn": "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/${AgentId}/artifact/${ArtifactId}"

package/data/serviceNames.json

@@ -190,6 +190,7 @@
   "groundtruthlabeling": "Amazon GroundTruth Labeling",
   "guardduty": "Amazon GuardDuty",
   "health": "AWS Health APIs and Notifications",
+  "health-agent": "Amazon Connect Health",
   "healthlake": "AWS HealthLake",
   "honeycode": "Amazon Honeycode",
   "iam": "AWS Identity and Access Management (IAM)",

package/data/services.json

@@ -190,6 +190,7 @@
   "groundtruthlabeling",
   "guardduty",
   "health",
+  "health-agent",
   "healthlake",
   "honeycode",
   "iam",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.18.202603041",
+  "version": "0.18.202603071",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-03-04T05:33:00.308Z",
+  "updatedAt": "2026-03-07T05:24:30.572Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",