@cloud-copilot/iam-data 0.18.202603071 → 0.18.202603101

package/data/actions/cognito-idp.json

@@ -14,6 +14,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "adduserpoolclientsecret": {
+    "name": "AddUserPoolClientSecret",
+    "description": "Grants permission to add a new secret to a confidential client",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "adminaddusertogroup": {
     "name": "AdminAddUserToGroup",
     "description": "Grants permission to add any user to any group",
@@ -719,6 +734,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteuserpoolclientsecret": {
+    "name": "DeleteUserPoolClientSecret",
+    "description": "Grants permission to delete a secret from a list of secrets associated with a client",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteuserpooldomain": {
     "name": "DeleteUserPoolDomain",
     "description": "Grants permission to delete any user pool domain",
@@ -1192,6 +1222,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listuserpoolclientsecrets": {
+    "name": "ListUserPoolClientSecrets",
+    "description": "Grants permission to list all secrets associated with a client",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listuserpoolclients": {
     "name": "ListUserPoolClients",
     "description": "Grants permission to list all app clients in user pools",

package/data/actions/es.json

@@ -1236,6 +1236,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "rollbackelasticsearchservicesoftwareupdate": {
+    "name": "RollbackElasticsearchServiceSoftwareUpdate",
+    "description": "Grants permission to rollback a service software update of an elasticsearch domain to its previous version",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "rollbackservicesoftwareupdate": {
+    "name": "RollbackServiceSoftwareUpdate",
+    "description": "Grants permission to rollback a service software update of an opensearch domain to its previous version",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startdomainmaintenance": {
     "name": "StartDomainMaintenance",
     "description": "Grants permission to initiate the maintenance on the node",

package/data/actions/ram.json

@@ -36,7 +36,8 @@
       "ram:AllowsExternalPrincipals",
       "ram:Principal",
       "ram:RequestedResourceType",
-      "ram:ResourceArn"
+      "ram:ResourceArn",
+      "ram:RetainSharingOnAccountLeaveOrganization"
     ],
     "dependentActions": []
   },
@@ -113,7 +114,8 @@
       "ram:ResourceArn",
       "ram:RequestedAllowsExternalPrincipals",
       "ram:Principal",
-      "ram:AllowsExternalPrincipals"
+      "ram:AllowsExternalPrincipals",
+      "ram:RetainSharingOnAccountLeaveOrganization"
     ],
     "dependentActions": []
   },
@@ -170,7 +172,8 @@
       "aws:ResourceTag/${TagKey}",
       "ram:ResourceTag/${TagKey}",
       "ram:ResourceShareName",
-      "ram:AllowsExternalPrincipals"
+      "ram:AllowsExternalPrincipals",
+      "ram:RetainSharingOnAccountLeaveOrganization"
     ],
     "dependentActions": []
   },
@@ -193,7 +196,8 @@
       "ram:AllowsExternalPrincipals",
       "ram:Principal",
       "ram:RequestedResourceType",
-      "ram:ResourceArn"
+      "ram:ResourceArn",
+      "ram:RetainSharingOnAccountLeaveOrganization"
     ],
     "dependentActions": []
   },
@@ -382,7 +386,8 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
       "ram:ResourceShareName",
-      "ram:AllowsExternalPrincipals"
+      "ram:AllowsExternalPrincipals",
+      "ram:RetainSharingOnAccountLeaveOrganization"
     ],
     "dependentActions": []
   },
@@ -402,6 +407,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listsourceassociations": {
+    "name": "ListSourceAssociations",
+    "description": "Grants permission to list source associations for resource shares",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "promotepermissioncreatedfrompolicy": {
     "name": "PromotePermissionCreatedFromPolicy",
     "description": "Grants permission to create a separate, fully manageable customer managed permission",
@@ -559,7 +572,8 @@
       "ram:ResourceTag/${TagKey}",
       "ram:ResourceShareName",
       "ram:AllowsExternalPrincipals",
-      "ram:RequestedAllowsExternalPrincipals"
+      "ram:RequestedAllowsExternalPrincipals",
+      "ram:RetainSharingOnAccountLeaveOrganization"
     ],
     "dependentActions": []
   }

package/data/conditionKeys/ram.json

@@ -59,6 +59,11 @@
     "description": "Filters access by the tags associated with the resource",
     "type": "String"
   },
+  "ram:retainsharingonaccountleaveorganization": {
+    "key": "ram:RetainSharingOnAccountLeaveOrganization",
+    "description": "Filters access by RetainSharingOnAccountLeaveOrganization value within ResourceShareConfiguration that is set on resource share",
+    "type": "Bool"
+  },
   "ram:shareowneraccountid": {
     "key": "ram:ShareOwnerAccountId",
     "description": "Filters access by resource shares owned by a specific account. For example, you can use this condition key to specify which resource share invitations can be accepted or rejected based on the resource share owner's account ID",

package/data/resourceTypes/chime.json

@@ -1,7 +1,7 @@
 {
   "meeting": {
     "key": "meeting",
-    "arn": "arn:${Partition}:chime::${AccountId}:meeting/${MeetingId}",
+    "arn": "arn:${Partition}:chime:${Region}:${AccountId}:meeting/${MeetingId}",
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.18.202603071",
+  "version": "0.18.202603101",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-03-07T05:24:30.572Z",
+  "updatedAt": "2026-03-10T05:36:13.427Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",