@cloud-copilot/iam-data 0.18.202604011 → 0.18.202604031

package/data/actions/bedrock-mantle.json

@@ -16,6 +16,34 @@
     ],
     "dependentActions": []
   },
+  "associatecustomizedmodel": {
+    "name": "AssociateCustomizedModel",
+    "description": "Grants permission to associate a customized model with a project",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "customized-model",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "project",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "bedrock-mantle:ProjectArn",
+      "bedrock-mantle:CustomizedModelArn"
+    ],
+    "dependentActions": []
+  },
   "callwithbearertoken": {
     "name": "CallWithBearerToken",
     "isPermissionOnly": true,
@@ -63,6 +91,26 @@
     ],
     "dependentActions": []
   },
+  "createcustomizedmodel": {
+    "name": "CreateCustomizedModel",
+    "description": "Grants permission to import a customized model with custom weights",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "customized-model",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createfile": {
     "name": "CreateFile",
     "description": "Grants permission to create a file in a project",
@@ -140,6 +188,53 @@
     ],
     "dependentActions": []
   },
+  "createreservation": {
+    "name": "CreateReservation",
+    "description": "Grants permission to create a capacity reservation for a model",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "project",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "reservation",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "bedrock-mantle:ProjectArn",
+      "bedrock-mantle:ReservationArn"
+    ],
+    "dependentActions": []
+  },
+  "deletecustomizedmodel": {
+    "name": "DeleteCustomizedModel",
+    "description": "Grants permission to delete a customized model",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "customized-model",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deletefile": {
     "name": "DeleteFile",
     "description": "Grants permission to delete a specific file",
@@ -176,6 +271,79 @@
     ],
     "dependentActions": []
   },
+  "deletereservation": {
+    "name": "DeleteReservation",
+    "description": "Grants permission to delete a capacity reservation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "project",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "reservation",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "bedrock-mantle:ProjectArn",
+      "bedrock-mantle:ReservationArn"
+    ],
+    "dependentActions": []
+  },
+  "disassociatecustomizedmodel": {
+    "name": "DisassociateCustomizedModel",
+    "description": "Grants permission to disassociate a customized model from a project",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "customized-model",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "project",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "bedrock-mantle:ProjectArn",
+      "bedrock-mantle:CustomizedModelArn"
+    ],
+    "dependentActions": []
+  },
+  "getcustomizedmodel": {
+    "name": "GetCustomizedModel",
+    "description": "Grants permission to get customized model",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "customized-model",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "getfile": {
     "name": "GetFile",
     "description": "Grants permission to retrieve information about a specific file",
@@ -265,6 +433,53 @@
     ],
     "dependentActions": []
   },
+  "getreservation": {
+    "name": "GetReservation",
+    "description": "Grants permission to get reservation",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "reservation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "listcustomizedmodelassociations": {
+    "name": "ListCustomizedModelAssociations",
+    "description": "Grants permission to list project associations for a customized model",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "customized-model",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcustomizedmodels": {
+    "name": "ListCustomizedModels",
+    "description": "Grants permission to list customized models",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "customized-model",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listfiles": {
     "name": "ListFiles",
     "description": "Grants permission to list all available files in a project",
@@ -331,21 +546,52 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listreservations": {
+    "name": "ListReservations",
+    "description": "Grants permission to list reservations",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "reservation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list tags for a resource",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "customized-model",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "project",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "reservation",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "tagresource": {
@@ -353,6 +599,14 @@
     "description": "Grants permission to tag a resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "customized-model",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "project",
         "required": false,
@@ -360,6 +614,14 @@
           "aws:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
+      },
+      {
+        "name": "reservation",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -373,6 +635,14 @@
     "description": "Grants permission to untag a resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "customized-model",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "project",
         "required": false,
@@ -380,6 +650,14 @@
           "aws:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
+      },
+      {
+        "name": "reservation",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -403,5 +681,33 @@
       "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
+  },
+  "updatereservation": {
+    "name": "UpdateReservation",
+    "description": "Grants permission to update reservation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "project",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "reservation",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "bedrock-mantle:ProjectArn",
+      "bedrock-mantle:ReservationArn"
+    ],
+    "dependentActions": []
   }
 }

package/data/actions/dataexchange.json

@@ -42,7 +42,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createdatagrant": {
@@ -427,6 +430,12 @@
     "description": "Grants permission to list the tags that you associated with the specified resource",
     "accessLevel": "List",
     "resourceTypes": [
+      {
+        "name": "assets",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "data-grants",
         "required": false,
@@ -569,6 +578,12 @@
     "description": "Grants permission to add one or more tags to a specified resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "assets",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "data-grants",
         "required": false,
@@ -605,6 +620,12 @@
     "description": "Grants permission to remove one or more tags from a specified resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "assets",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "data-grants",
         "required": false,

package/data/actions/ecs.json

@@ -43,6 +43,34 @@
     ],
     "dependentActions": []
   },
+  "createdaemon": {
+    "name": "CreateDaemon",
+    "description": "Grants permission to create a new daemon in a specified cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "ecs:capacity-provider",
+      "ecs:daemon-task-definition",
+      "ecs:enable-ecs-managed-tags",
+      "ecs:enable-execute-command",
+      "ecs:propagate-tags",
+      "ecs:task-cpu",
+      "ecs:task-memory"
+    ],
+    "dependentActions": []
+  },
   "createexpressgatewayservice": {
     "name": "CreateExpressGatewayService",
     "description": "Grants permission to create a new Amazon ECS Express Gateway service with cluster and task definition",
@@ -191,6 +219,41 @@
     ],
     "dependentActions": []
   },
+  "deletedaemon": {
+    "name": "DeleteDaemon",
+    "description": "Grants permission to delete a specified daemon within a cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ecs:cluster",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "deletedaemontaskdefinition": {
+    "name": "DeleteDaemonTaskDefinition",
+    "description": "Grants permission to delete the specified daemon task definition",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "daemon-task-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deleteexpressgatewayservice": {
     "name": "DeleteExpressGatewayService",
     "description": "Grants permission to delete a specified Express Gateway service",
@@ -340,6 +403,97 @@
     ],
     "dependentActions": []
   },
+  "describedaemon": {
+    "name": "DescribeDaemon",
+    "description": "Grants permission to describe the specified daemon running in your cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ecs:cluster",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "describedaemondeployments": {
+    "name": "DescribeDaemonDeployments",
+    "description": "Grants permission to describe one or more of your daemon deployments",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "daemon-deployment",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "ecs:daemon",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedaemonrevisions": {
+    "name": "DescribeDaemonRevisions",
+    "description": "Grants permission to describe one or more of your daemon revisions",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "daemon-revision",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "ecs:daemon",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedaemontaskdefinition": {
+    "name": "DescribeDaemonTaskDefinition",
+    "description": "Grants permission to describe a daemon task definition",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "daemon-task-definition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "describeexpressgatewayservice": {
     "name": "DescribeExpressGatewayService",
     "description": "Grants permission to describe the specified Express Gateway service",
@@ -579,6 +733,42 @@
     ],
     "dependentActions": []
   },
+  "listdaemondeployments": {
+    "name": "ListDaemonDeployments",
+    "description": "Grants permission to get a list of daemon deployments for a specified daemon",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster"
+    ],
+    "dependentActions": []
+  },
+  "listdaemontaskdefinitions": {
+    "name": "ListDaemonTaskDefinitions",
+    "description": "Grants permission to get a list of daemon task definitions that are registered to your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listdaemons": {
+    "name": "ListDaemons",
+    "description": "Grants permission to get a list of daemons that are running in a specified cluster",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ecs:cluster"
+    ],
+    "dependentActions": []
+  },
   "listservicedeployments": {
     "name": "ListServiceDeployments",
     "description": "Grants permission to get a list of service deployments for a specified service",
@@ -826,6 +1016,29 @@
     ],
     "dependentActions": []
   },
+  "registerdaemontaskdefinition": {
+    "name": "RegisterDaemonTaskDefinition",
+    "description": "Grants permission to register a new daemon task definition from the supplied family and containerDefinitions",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "daemon-task-definition",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "ecs:privileged",
+      "ecs:task-cpu",
+      "ecs:task-memory"
+    ],
+    "dependentActions": []
+  },
   "registertaskdefinition": {
     "name": "RegisterTaskDefinition",
     "description": "Grants permission to register a new task definition from the supplied family and containerDefinitions",
@@ -1037,6 +1250,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "daemon",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "daemon-task-definition",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "service",
         "required": false,
@@ -1093,6 +1318,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "daemon",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "daemon-task-definition",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "service",
         "required": false,
@@ -1215,6 +1452,32 @@
     ],
     "dependentActions": []
   },
+  "updatedaemon": {
+    "name": "UpdateDaemon",
+    "description": "Grants permission to modify the parameters of a daemon",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "daemon",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ecs:capacity-provider",
+      "ecs:daemon-task-definition",
+      "ecs:enable-ecs-managed-tags",
+      "ecs:enable-execute-command",
+      "ecs:propagate-tags",
+      "ecs:task-cpu",
+      "ecs:task-memory"
+    ],
+    "dependentActions": []
+  },
   "updateexpressgatewayservice": {
     "name": "UpdateExpressGatewayService",
     "description": "Grants permission to modify the parameters of an Express Gateway service",

package/data/actions/healthlake.json

@@ -101,6 +101,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describefhirbulkmembermatchjob": {
+    "name": "DescribeFHIRBulkMemberMatchJob",
+    "description": "Grants permission to describe a FHIR Bulk Member Match Job",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "datastore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describefhirdatastore": {
     "name": "DescribeFHIRDatastore",
     "description": "Grants permission to get the properties associated with the FHIR datastore, including the datastore ID, datastore ARN, datastore name, datastore status, created at, datastore type version, and datastore endpoint",
@@ -544,6 +559,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startfhirbulkmembermatchjob": {
+    "name": "StartFHIRBulkMemberMatchJob",
+    "description": "Grants permission to begin a FHIR Bulk Member Match Job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "datastore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startfhirexportjob": {
     "name": "StartFHIRExportJob",
     "description": "Grants permission to begin a FHIR Export job",

package/data/actions/s3express.json

@@ -334,6 +334,27 @@
     ],
     "dependentActions": []
   },
+  "getmetricsconfiguration": {
+    "name": "GetMetricsConfiguration",
+    "description": "Grants permission to get a metrics configuration of a directory bucket",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "listaccesspointsfordirectorybuckets": {
     "name": "ListAccessPointsForDirectoryBuckets",
     "description": "Grants permission to list access points",
@@ -500,6 +521,27 @@
     ],
     "dependentActions": []
   },
+  "putmetricsconfiguration": {
+    "name": "PutMetricsConfiguration",
+    "description": "Grants permission to set or update a metrics configuration for the CloudWatch request metrics of a directory bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to create a new user-defined tag or update an existing tag",

package/data/conditionKeys/bedrock-mantle.json

@@ -19,6 +19,11 @@
     "description": "Filters access by the Short-term or Long-term bearer tokens",
     "type": "String"
   },
+  "bedrock-mantle:customizedmodelarn": {
+    "key": "bedrock-mantle:CustomizedModelArn",
+    "description": "Filters access by the ARN of the customized model being associated or referenced in cross-resource operations",
+    "type": "String"
+  },
   "bedrock-mantle:files": {
     "key": "bedrock-mantle:Files",
     "description": "Filters access by the specified file identifiers",
@@ -34,6 +39,16 @@
     "description": "Filters access by the specified Model",
     "type": "String"
   },
+  "bedrock-mantle:projectarn": {
+    "key": "bedrock-mantle:ProjectArn",
+    "description": "Filters access by the ARN of the project being associated or referenced in cross-resource operations",
+    "type": "String"
+  },
+  "bedrock-mantle:reservationarn": {
+    "key": "bedrock-mantle:ReservationArn",
+    "description": "Filters access by the ARN of the reservation being referenced in cross-resource operations",
+    "type": "String"
+  },
   "bedrock-mantle:servicetier": {
     "key": "bedrock-mantle:ServiceTier",
     "description": "Filters access by the specified ServiceTier",

package/data/conditionKeys/ecs.json

@@ -59,6 +59,16 @@
     "description": "Filters access by the name of an Amazon ECS container which is defined in the ECS task definition",
     "type": "String"
   },
+  "ecs:daemon": {
+    "key": "ecs:daemon",
+    "description": "Filters access by the ARN of an Amazon ECS daemon",
+    "type": "ARN"
+  },
+  "ecs:daemon-task-definition": {
+    "key": "ecs:daemon-task-definition",
+    "description": "Filters access by the ARN of an Amazon ECS daemon task definition",
+    "type": "ARN"
+  },
   "ecs:enable-ebs-volumes": {
     "key": "ecs:enable-ebs-volumes",
     "description": "Filters access by the Amazon ECS managed Amazon EBS volume capability of your ECS task or service",

package/data/resourceTypes/bedrock-mantle.json

@@ -5,5 +5,19 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "customized-model": {
+    "key": "customized-model",
+    "arn": "arn:${Partition}:bedrock-mantle:${Region}:${Account}:customized-model/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "reservation": {
+    "key": "reservation",
+    "arn": "arn:${Partition}:bedrock-mantle:${Region}:${Account}:reservation/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/dataexchange.json

@@ -30,7 +30,10 @@
   },
   "assets": {
     "key": "assets",
-    "arn": "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/${DataSetId}/revisions/${RevisionId}/assets/${AssetId}"
+    "arn": "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/${DataSetId}/revisions/${RevisionId}/assets/${AssetId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "entitled-assets": {
     "key": "entitled-assets",

package/data/resourceTypes/ecs.json

@@ -41,6 +41,39 @@
       "ecs:service"
     ]
   },
+  "daemon": {
+    "key": "daemon",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:daemon/${ClusterName}/${DaemonName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster"
+    ]
+  },
+  "daemon-deployment": {
+    "key": "daemon-deployment",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:daemon-deployment/${ClusterName}/${DaemonName}/${DaemonDeploymentId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster",
+      "ecs:daemon"
+    ]
+  },
+  "daemon-revision": {
+    "key": "daemon-revision",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:daemon-revision/${ClusterName}/${DaemonName}/${DaemonRevisionId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster",
+      "ecs:daemon"
+    ]
+  },
+  "daemon-task-definition": {
+    "key": "daemon-task-definition",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:daemon-task-definition/${DaemonTaskDefinitionFamilyName}:${DaemonTaskDefinitionRevisionNumber}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "task": {
     "key": "task",
     "arn": "arn:${Partition}:ecs:${Region}:${Account}:task/${ClusterName}/${TaskId}",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.18.202604011",
+  "version": "0.18.202604031",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-04-01T05:28:42.856Z",
+  "updatedAt": "2026-04-03T05:18:56.472Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",