@cloud-copilot/iam-data 0.18.202603241 → 0.18.202603261

package/data/actions/lightsail.json

@@ -170,7 +170,10 @@
     "description": "Grants permission to create an email or SMS text message contact method",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createcontainerservice": {
@@ -1738,6 +1741,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "ContactMethod",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "ContainerService",
         "required": false,
@@ -1857,6 +1866,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "ContactMethod",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "ContainerService",
         "required": false,

package/data/actions/route53profiles.json

@@ -6,7 +6,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "route53profiles:ResourceIds"
     ],
     "dependentActions": [
       "ec2:DescribeVpcs"
@@ -17,7 +18,13 @@
     "description": "Grants permission to associates a resource, such as DNS Firewall rule group, private hosted zone, resolver rule, etc. to a specified Profile",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "route53profiles:ResourceTypes",
+      "route53profiles:HostedZoneDomains",
+      "route53profiles:ResolverRuleDomains",
+      "route53profiles:FirewallRuleGroupPriority",
+      "route53profiles:ResourceArns"
+    ],
     "dependentActions": []
   },
   "createprofile": {
@@ -44,7 +51,9 @@
     "description": "Grants permission to delete an association between a customer VPC and the specified Profile",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "route53profiles:ResourceIds"
+    ],
     "dependentActions": []
   },
   "disassociateresourcefromprofile": {
@@ -52,7 +61,13 @@
     "description": "Grants permission to delete the asoociation between the resource. such as DNS Firewall rule group, private hosted zone, resolver rule, etc. and the specified Profile",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "route53profiles:ResourceTypes",
+      "route53profiles:HostedZoneDomains",
+      "route53profiles:ResolverRuleDomains",
+      "route53profiles:FirewallRuleGroupPriority",
+      "route53profiles:ResourceArns"
+    ],
     "dependentActions": []
   },
   "getprofile": {
@@ -195,7 +210,12 @@
     "description": "Grants permission to update the Profile resource association name or the resource properties or both, if both name and resource properties are null, the api returns the existing Profile resource association",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "route53profiles:ResourceTypes",
+      "route53profiles:HostedZoneDomains",
+      "route53profiles:ResolverRuleDomains",
+      "route53profiles:FirewallRuleGroupPriority"
+    ],
     "dependentActions": []
   }
 }

package/data/actions/securityagent.json

@@ -1,7 +1,7 @@
 {
   "addartifact": {
     "name": "AddArtifact",
-    "description": "Grants permission to add an Artifact for the given Agent Instance",
+    "description": "Grants permission to add an Artifact for the given Agent Space",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -14,21 +14,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "addcontrol": {
-    "name": "AddControl",
-    "description": "Grants permission to add a customer managed Control",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "Application",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "batchdeletepentests": {
     "name": "BatchDeletePentests",
     "description": "Grants permission to delete multiple penetration tests in a single request",
@@ -44,21 +29,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "batchgetagentinstances": {
-    "name": "BatchGetAgentInstances",
-    "description": "Grants permission to retrieve multiple agent instances in a single request",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "AgentInstance",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "batchgetagentspaces": {
     "name": "BatchGetAgentSpaces",
     "description": "Grants permission to retrieve multiple agent spaces in a single request",
@@ -76,7 +46,7 @@
   },
   "batchgetartifactmetadata": {
     "name": "BatchGetArtifactMetadata",
-    "description": "Grants permission to retrieve one or more Artifact Metadata records for the given Agent Instance",
+    "description": "Grants permission to retrieve one or more Artifact Metadata records for the given Agent Space",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -209,27 +179,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createagentinstance": {
-    "name": "CreateAgentInstance",
-    "description": "Grants permission to create an agent instance record",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "Application",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "createagentspace": {
     "name": "CreateAgentSpace",
     "description": "Grants permission to create an agent space record",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createapplication": {
@@ -237,7 +195,10 @@
     "description": "Grants permission to create a new application",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": [
       "iam:PassRole",
       "sso:CreateApplication"
@@ -258,21 +219,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createdocumentreview": {
-    "name": "CreateDocumentReview",
-    "description": "Grants permission to create a document review",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "AgentSpace",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "createintegration": {
     "name": "CreateIntegration",
     "description": "Grants permission to create a security testing integration",
@@ -285,12 +231,15 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createmembership": {
     "name": "CreateMembership",
-    "description": "Grants permission to add a single member to a agent instance with specified role",
+    "description": "Grants permission to add a single member to a agent space with specified role",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -339,7 +288,7 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "Application",
+        "name": "SecurityRequirementPack",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -356,21 +305,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deleteagentinstance": {
-    "name": "DeleteAgentInstance",
-    "description": "Grants permission to delete an agent instance record",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "AgentInstance",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deleteagentspace": {
     "name": "DeleteAgentSpace",
     "description": "Grants permission to delete an agent space record",
@@ -416,21 +350,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deletecontrol": {
-    "name": "DeleteControl",
-    "description": "Grants permission to delete a customer managed Control",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "Control",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deletedesignreview": {
     "name": "DeleteDesignReview",
     "description": "Grants permission to delete a design review",
@@ -446,21 +365,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deletedocumentreview": {
-    "name": "DeleteDocumentReview",
-    "description": "Grants permission to delete a document review",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "AgentSpace",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deleteintegration": {
     "name": "DeleteIntegration",
     "description": "Grants permission to delete the integration of an application",
@@ -478,7 +382,7 @@
   },
   "deletemembership": {
     "name": "DeleteMembership",
-    "description": "Grants permission to remove a single member associated to an agent instance",
+    "description": "Grants permission to remove a single member associated to an agent space",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -497,7 +401,7 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "SecurityRequirement",
+        "name": "SecurityRequirementPack",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -553,7 +457,7 @@
   },
   "getartifact": {
     "name": "GetArtifact",
-    "description": "Grants permission to retrieve an Artifact for the given Agent Instance",
+    "description": "Grants permission to retrieve an Artifact for the given Agent Space",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -581,21 +485,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getcontrol": {
-    "name": "GetControl",
-    "description": "Grants permission to retrieve a Control",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "Control",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getdesignreview": {
     "name": "GetDesignReview",
     "description": "Grants permission to get the status of the associated agent space design review",
@@ -656,36 +545,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getdocumentreview": {
-    "name": "GetDocumentReview",
-    "description": "Grants permission to get the status of the associated agent instance document review",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "AgentSpace",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getdocumentreviewartifact": {
-    "name": "GetDocumentReviewArtifact",
-    "description": "Grants permission to get document review artifact for a specific document",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "AgentSpace",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getintegration": {
     "name": "GetIntegration",
     "description": "Grants permission to get the integration metadata by ID",
@@ -701,21 +560,13 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getloginsessioncredentials": {
-    "name": "GetLoginSessionCredentials",
-    "description": "Grants permission to retrieve credentials for a one time login session",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getsecurityrequirement": {
     "name": "GetSecurityRequirement",
     "description": "Grants permission to retrieve a Security Requirement",
     "accessLevel": "Read",
     "resourceTypes": [
       {
-        "name": "SecurityRequirement",
+        "name": "SecurityRequirementPack",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -724,14 +575,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "handleonetimeloginsession": {
-    "name": "HandleOneTimeLoginSession",
-    "description": "Grants permission to process and invalidate a one time login session",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "initiateproviderregistration": {
     "name": "InitiateProviderRegistration",
     "description": "Grants permission to initiate the registration of Security Agent App for the given provider (eg: GitHub)",
@@ -747,29 +590,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listagentinstancetasks": {
-    "name": "ListAgentInstanceTasks",
-    "description": "Grants permission to list tasks for a specific agent instance",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "AgentInstance",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listagentinstances": {
-    "name": "ListAgentInstances",
-    "description": "Grants permission to list agent instances",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listagentspaces": {
     "name": "ListAgentSpaces",
     "description": "Grants permission to list agent spaces",
@@ -801,14 +621,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listcontrols": {
-    "name": "ListControls",
-    "description": "Grants permission to list all Controls",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listdesignreviewcomments": {
     "name": "ListDesignReviewComments",
     "description": "Grants permission to list design review comments",
@@ -854,36 +666,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listdocumentreviewcomments": {
-    "name": "ListDocumentReviewComments",
-    "description": "Grants permission to list document review comments",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "AgentSpace",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listdocumentreviews": {
-    "name": "ListDocumentReviews",
-    "description": "Grants permission to list all document reviews for the given project",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "AgentSpace",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listfindings": {
     "name": "ListFindings",
     "description": "Grants permission to list findings with filtering and pagination support",
@@ -901,7 +683,7 @@
   },
   "listintegratedresources": {
     "name": "ListIntegratedResources",
-    "description": "Grants permission to list integrated resources for an agent instance",
+    "description": "Grants permission to list integrated resources for an agent space",
     "accessLevel": "List",
     "resourceTypes": [
       {
@@ -924,7 +706,7 @@
   },
   "listmemberships": {
     "name": "ListMemberships",
-    "description": "Grants permission to list all members associated to an agent instance with pagination support",
+    "description": "Grants permission to list all members associated to an agent space with pagination support",
     "accessLevel": "List",
     "resourceTypes": [
       {
@@ -1001,7 +783,53 @@
     "name": "ListSecurityRequirements",
     "description": "Grants permission to list all Security Requirements",
     "accessLevel": "List",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "SecurityRequirementPack",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list the tags for a resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Application",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "SecurityRequirementPack",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "TargetDomain",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -1118,19 +946,46 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "togglemanagedcontrol": {
-    "name": "ToggleManagedControl",
-    "description": "Grants permission to toggle the status",
-    "accessLevel": "Write",
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to add tags to a resource",
+    "accessLevel": "Tagging",
     "resourceTypes": [
       {
-        "name": "Control",
-        "required": true,
+        "name": "AgentSpace",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Application",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "SecurityRequirementPack",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "TargetDomain",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "togglemanagedsecurityrequirement": {
@@ -1139,7 +994,7 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "SecurityRequirement",
+        "name": "SecurityRequirementPack",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -1148,19 +1003,45 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updateagentinstance": {
-    "name": "UpdateAgentInstance",
-    "description": "Grants permission to update an agent instance record",
-    "accessLevel": "Write",
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove tags from a resource",
+    "accessLevel": "Tagging",
     "resourceTypes": [
       {
-        "name": "AgentInstance",
-        "required": true,
+        "name": "AgentSpace",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Application",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Integration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "SecurityRequirementPack",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "TargetDomain",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "updateagentspace": {
@@ -1195,21 +1076,6 @@
       "iam:PassRole"
     ]
   },
-  "updatecontrol": {
-    "name": "UpdateControl",
-    "description": "Grants permission to update a customer managed Control",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "Control",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "updatefinding": {
     "name": "UpdateFinding",
     "description": "Grants permission to update an existing security finding with new details or status",
@@ -1227,7 +1093,7 @@
   },
   "updateintegratedresources": {
     "name": "UpdateIntegratedResources",
-    "description": "Grants permission to update integrated resources for an agent instance",
+    "description": "Grants permission to update integrated resources for an agent space",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -1261,7 +1127,7 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "SecurityRequirement",
+        "name": "SecurityRequirementPack",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []

package/data/conditionKeys/route53profiles.json

@@ -13,5 +13,35 @@
     "key": "aws:TagKeys",
     "description": "Filters access by the presence of tag keys in the request",
     "type": "ArrayOfString"
+  },
+  "route53profiles:firewallrulegrouppriority": {
+    "key": "route53profiles:FirewallRuleGroupPriority",
+    "description": "Filters access by priority range of a Firewall Rule Group",
+    "type": "Numeric"
+  },
+  "route53profiles:hostedzonedomains": {
+    "key": "route53profiles:HostedZoneDomains",
+    "description": "Filters access by Hosted Zone domains",
+    "type": "String"
+  },
+  "route53profiles:resolverruledomains": {
+    "key": "route53profiles:ResolverRuleDomains",
+    "description": "Filters access by Resolver Rule domains",
+    "type": "String"
+  },
+  "route53profiles:resourcearns": {
+    "key": "route53profiles:ResourceArns",
+    "description": "Filters access by specific resource ARNs",
+    "type": "ARN"
+  },
+  "route53profiles:resourceids": {
+    "key": "route53profiles:ResourceIds",
+    "description": "Filters access by given VPCs",
+    "type": "String"
+  },
+  "route53profiles:resourcetypes": {
+    "key": "route53profiles:ResourceTypes",
+    "description": "Filters access by specific resource type. Possible options include 'HostedZone', 'FirewallRuleGroup', 'ResolverQueryLoggingConfig', 'ResolverRule', and 'VpcEndpoint'",
+    "type": "String"
   }
 }

package/data/conditionKeys/securityagent.json

@@ -1 +1,17 @@
-{}
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/resourceTypes/lightsail.json

@@ -94,7 +94,10 @@
   },
   "contactmethod": {
     "key": "ContactMethod",
-    "arn": "arn:${Partition}:lightsail:${Region}:${Account}:ContactMethod/${Id}"
+    "arn": "arn:${Partition}:lightsail:${Region}:${Account}:ContactMethod/${Id}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "containerservice": {
     "key": "ContainerService",

package/data/resourceTypes/securityagent.json

@@ -1,50 +1,37 @@
 {
   "application": {
     "key": "Application",
-    "arn": "arn:${Partition}:securityagent:${Region}:${Account}:application/${ApplicationId}"
-  },
-  "control": {
-    "key": "Control",
-    "arn": "arn:${Partition}:securityagent:${Region}:${Account}:control/${ControlId}"
-  },
-  "securityrequirement": {
-    "key": "SecurityRequirement",
-    "arn": "arn:${Partition}:securityagent:${Region}:${Account}:security-requirement/${SecurityRequirementId}"
+    "arn": "arn:${Partition}:securityagent:${Region}:${Account}:application/${ApplicationId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "securityrequirementpack": {
+    "key": "SecurityRequirementPack",
+    "arn": "arn:${Partition}:securityagent:${Region}:${Account}:security-requirement-pack/${SecurityRequirementPackId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "integration": {
     "key": "Integration",
-    "arn": "arn:${Partition}:securityagent:${Region}:${Account}:integration/${IntegrationId}"
-  },
-  "agentinstance": {
-    "key": "AgentInstance",
-    "arn": "arn:${Partition}:securityagent:${Region}:${Account}:agent-instance/${AgentId}"
+    "arn": "arn:${Partition}:securityagent:${Region}:${Account}:integration/${IntegrationId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "agentspace": {
     "key": "AgentSpace",
-    "arn": "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/${AgentId}"
+    "arn": "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/${AgentId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "targetdomain": {
     "key": "TargetDomain",
-    "arn": "arn:${Partition}:securityagent:${Region}:${Account}:target-domain/${TargetDomainId}"
-  },
-  "artifact": {
-    "key": "Artifact",
-    "arn": "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/${AgentId}/artifact/${ArtifactId}"
-  },
-  "pentest": {
-    "key": "Pentest",
-    "arn": "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/${AgentId}/pentest/${PentestId}"
-  },
-  "pentestjob": {
-    "key": "PentestJob",
-    "arn": "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/${AgentId}/pentest-job/${JobId}"
-  },
-  "pentesttask": {
-    "key": "PentestTask",
-    "arn": "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/${AgentId}/pentest-task/${TaskId}"
-  },
-  "finding": {
-    "key": "Finding",
-    "arn": "arn:${Partition}:securityagent:${Region}:${Account}:agent-space/${AgentId}/finding/${FindingId}"
+    "arn": "arn:${Partition}:securityagent:${Region}:${Account}:target-domain/${TargetDomainId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.18.202603241",
+  "version": "0.18.202603261",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-03-24T05:13:12.495Z",
+  "updatedAt": "2026-03-26T05:19:19.192Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",