@cloud-copilot/iam-data 0.18.202604011 → 0.18.202604021

package/data/actions/ecs.json

@@ -43,6 +43,34 @@
     ],
     "dependentActions": []
   },
+  "createdaemon": {
+    "name": "CreateDaemon",
+    "description": "Grants permission to create a new daemon in a specified cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "ecs:capacity-provider",
+      "ecs:daemon-task-definition",
+      "ecs:enable-ecs-managed-tags",
+      "ecs:enable-execute-command",
+      "ecs:propagate-tags",
+      "ecs:task-cpu",
+      "ecs:task-memory"
+    ],
+    "dependentActions": []
+  },
   "createexpressgatewayservice": {
     "name": "CreateExpressGatewayService",
     "description": "Grants permission to create a new Amazon ECS Express Gateway service with cluster and task definition",
@@ -191,6 +219,41 @@
     ],
     "dependentActions": []
   },
+  "deletedaemon": {
+    "name": "DeleteDaemon",
+    "description": "Grants permission to delete a specified daemon within a cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ecs:cluster",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "deletedaemontaskdefinition": {
+    "name": "DeleteDaemonTaskDefinition",
+    "description": "Grants permission to delete the specified daemon task definition",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "daemon-task-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deleteexpressgatewayservice": {
     "name": "DeleteExpressGatewayService",
     "description": "Grants permission to delete a specified Express Gateway service",
@@ -340,6 +403,97 @@
     ],
     "dependentActions": []
   },
+  "describedaemon": {
+    "name": "DescribeDaemon",
+    "description": "Grants permission to describe the specified daemon running in your cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ecs:cluster",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "describedaemondeployments": {
+    "name": "DescribeDaemonDeployments",
+    "description": "Grants permission to describe one or more of your daemon deployments",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "daemon-deployment",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "ecs:daemon",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedaemonrevisions": {
+    "name": "DescribeDaemonRevisions",
+    "description": "Grants permission to describe one or more of your daemon revisions",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "daemon-revision",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "ecs:daemon",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedaemontaskdefinition": {
+    "name": "DescribeDaemonTaskDefinition",
+    "description": "Grants permission to describe a daemon task definition",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "daemon-task-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "describeexpressgatewayservice": {
     "name": "DescribeExpressGatewayService",
     "description": "Grants permission to describe the specified Express Gateway service",
@@ -579,6 +733,42 @@
     ],
     "dependentActions": []
   },
+  "listdaemondeployments": {
+    "name": "ListDaemonDeployments",
+    "description": "Grants permission to get a list of daemon deployments for a specified daemon",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster"
+    ],
+    "dependentActions": []
+  },
+  "listdaemontaskdefinitions": {
+    "name": "ListDaemonTaskDefinitions",
+    "description": "Grants permission to get a list of daemon task definitions that are registered to your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listdaemons": {
+    "name": "ListDaemons",
+    "description": "Grants permission to get a list of daemons that are running in a specified cluster",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ecs:cluster"
+    ],
+    "dependentActions": []
+  },
   "listservicedeployments": {
     "name": "ListServiceDeployments",
     "description": "Grants permission to get a list of service deployments for a specified service",
@@ -826,6 +1016,29 @@
     ],
     "dependentActions": []
   },
+  "registerdaemontaskdefinition": {
+    "name": "RegisterDaemonTaskDefinition",
+    "description": "Grants permission to register a new daemon task definition from the supplied family and containerDefinitions",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "daemon-task-definition",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "ecs:privileged",
+      "ecs:task-cpu",
+      "ecs:task-memory"
+    ],
+    "dependentActions": []
+  },
   "registertaskdefinition": {
     "name": "RegisterTaskDefinition",
     "description": "Grants permission to register a new task definition from the supplied family and containerDefinitions",
@@ -1037,6 +1250,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "daemon",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "daemon-task-definition",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "service",
         "required": false,
@@ -1093,6 +1318,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "daemon",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "daemon-task-definition",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "service",
         "required": false,
@@ -1215,6 +1452,32 @@
     ],
     "dependentActions": []
   },
+  "updatedaemon": {
+    "name": "UpdateDaemon",
+    "description": "Grants permission to modify the parameters of a daemon",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ecs:capacity-provider",
+      "ecs:daemon-task-definition",
+      "ecs:enable-ecs-managed-tags",
+      "ecs:enable-execute-command",
+      "ecs:propagate-tags",
+      "ecs:task-cpu",
+      "ecs:task-memory"
+    ],
+    "dependentActions": []
+  },
   "updateexpressgatewayservice": {
     "name": "UpdateExpressGatewayService",
     "description": "Grants permission to modify the parameters of an Express Gateway service",

package/data/actions/healthlake.json

@@ -101,6 +101,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describefhirbulkmembermatchjob": {
+    "name": "DescribeFHIRBulkMemberMatchJob",
+    "description": "Grants permission to describe a FHIR Bulk Member Match Job",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "datastore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describefhirdatastore": {
     "name": "DescribeFHIRDatastore",
     "description": "Grants permission to get the properties associated with the FHIR datastore, including the datastore ID, datastore ARN, datastore name, datastore status, created at, datastore type version, and datastore endpoint",
@@ -544,6 +559,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startfhirbulkmembermatchjob": {
+    "name": "StartFHIRBulkMemberMatchJob",
+    "description": "Grants permission to begin a FHIR Bulk Member Match Job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "datastore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startfhirexportjob": {
     "name": "StartFHIRExportJob",
     "description": "Grants permission to begin a FHIR Export job",

package/data/actions/s3express.json

@@ -334,6 +334,27 @@
     ],
     "dependentActions": []
   },
+  "getmetricsconfiguration": {
+    "name": "GetMetricsConfiguration",
+    "description": "Grants permission to get a metrics configuration of a directory bucket",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "listaccesspointsfordirectorybuckets": {
     "name": "ListAccessPointsForDirectoryBuckets",
     "description": "Grants permission to list access points",
@@ -500,6 +521,27 @@
     ],
     "dependentActions": []
   },
+  "putmetricsconfiguration": {
+    "name": "PutMetricsConfiguration",
+    "description": "Grants permission to set or update a metrics configuration for the CloudWatch request metrics of a directory bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to create a new user-defined tag or update an existing tag",

package/data/conditionKeys/ecs.json

@@ -59,6 +59,16 @@
     "description": "Filters access by the name of an Amazon ECS container which is defined in the ECS task definition",
     "type": "String"
   },
+  "ecs:daemon": {
+    "key": "ecs:daemon",
+    "description": "Filters access by the ARN of an Amazon ECS daemon",
+    "type": "ARN"
+  },
+  "ecs:daemon-task-definition": {
+    "key": "ecs:daemon-task-definition",
+    "description": "Filters access by the ARN of an Amazon ECS daemon task definition",
+    "type": "ARN"
+  },
   "ecs:enable-ebs-volumes": {
     "key": "ecs:enable-ebs-volumes",
     "description": "Filters access by the Amazon ECS managed Amazon EBS volume capability of your ECS task or service",

package/data/resourceTypes/ecs.json

@@ -41,6 +41,39 @@
       "ecs:service"
     ]
   },
+  "daemon": {
+    "key": "daemon",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:daemon/${ClusterName}/${DaemonName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster"
+    ]
+  },
+  "daemon-deployment": {
+    "key": "daemon-deployment",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:daemon-deployment/${ClusterName}/${DaemonName}/${DaemonDeploymentId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster",
+      "ecs:daemon"
+    ]
+  },
+  "daemon-revision": {
+    "key": "daemon-revision",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:daemon-revision/${ClusterName}/${DaemonName}/${DaemonRevisionId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster",
+      "ecs:daemon"
+    ]
+  },
+  "daemon-task-definition": {
+    "key": "daemon-task-definition",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:daemon-task-definition/${DaemonTaskDefinitionFamilyName}:${DaemonTaskDefinitionRevisionNumber}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "task": {
     "key": "task",
     "arn": "arn:${Partition}:ecs:${Region}:${Account}:task/${ClusterName}/${TaskId}",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.18.202604011",
+  "version": "0.18.202604021",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-04-01T05:28:42.856Z",
+  "updatedAt": "2026-04-02T05:17:12.692Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",