@cloud-copilot/iam-data 0.18.202604021 → 0.18.202604081

package/data/actions/ses.json

@@ -1558,13 +1558,17 @@
       {
         "name": "mailmanager-ingress-point",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "mailmanager-rule-set",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -1575,7 +1579,16 @@
     "name": "CreateAddonInstance",
     "description": "Grants permission to create an addon instance",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "addon-instance",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
@@ -1587,7 +1600,16 @@
     "name": "CreateAddonSubscription",
     "description": "Grants permission to create an addon subscription",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "addon-subscription",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -1598,7 +1620,16 @@
     "name": "CreateAddressList",
     "description": "Grants permission to create an address list",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "mailmanager-address-list",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -1626,7 +1657,16 @@
     "name": "CreateArchive",
     "description": "Grants permission to create an archive",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "mailmanager-archive",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -1637,23 +1677,42 @@
     "name": "CreateIngressPoint",
     "description": "Grants permission to create an ingress point",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "mailmanager-ingress-point",
+        "required": true,
+        "conditionKeys": [
+          "ses:MailManagerIngressPointType",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": [
+          "ec2:DescribeVpcEndpoints",
+          "iam:CreateServiceLinkedRole"
+        ]
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
       "ses:MailManagerRuleSetArn",
       "ses:MailManagerTrafficPolicyArn"
     ],
-    "dependentActions": [
-      "ec2:DescribeVpcEndpoints",
-      "iam:CreateServiceLinkedRole"
-    ]
+    "dependentActions": []
   },
   "createrelay": {
     "name": "CreateRelay",
     "description": "Grants permission to create a SMTP relay",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "mailmanager-smtp-relay",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -1664,7 +1723,18 @@
     "name": "CreateRuleSet",
     "description": "Grants permission to create a rule set",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "mailmanager-rule-set",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": [
+          "iam:PassRole"
+        ]
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -1675,7 +1745,16 @@
     "name": "CreateTrafficPolicy",
     "description": "Grants permission to create a traffic policy",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "mailmanager-traffic-policy",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -1695,7 +1774,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1712,7 +1791,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1746,7 +1825,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1763,7 +1842,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1780,7 +1859,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1797,7 +1876,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1814,7 +1893,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1848,7 +1927,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1865,7 +1944,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1916,7 +1995,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1932,7 +2011,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getarchivemessage": {
@@ -1947,7 +2028,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getarchivemessagecontent": {
@@ -1962,7 +2045,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getarchivesearch": {
@@ -1977,7 +2062,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getarchivesearchresults": {
@@ -1992,7 +2079,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getingresspoint": {
@@ -2008,7 +2097,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -2042,7 +2131,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -2059,7 +2148,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -2076,7 +2165,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -2240,7 +2329,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "startarchivesearch": {
@@ -2255,7 +2346,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "stopaddresslistimportjob": {
@@ -2287,7 +2380,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "stoparchivesearch": {
@@ -2302,7 +2397,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "updatearchive": {
@@ -2318,7 +2415,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -2330,12 +2427,13 @@
       {
         "name": "mailmanager-ingress-point",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
       "ses:MailManagerTrafficPolicyArn",
       "ses:MailManagerRuleSetArn"
     ],
@@ -2354,7 +2452,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -2371,9 +2469,11 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
-    "dependentActions": []
+    "dependentActions": [
+      "iam:PassRole"
+    ]
   },
   "updatetrafficpolicy": {
     "name": "UpdateTrafficPolicy",
@@ -2388,7 +2488,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },

package/data/actions/transform.json

@@ -115,6 +115,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getwebappurl": {
+    "name": "GetWebAppUrl",
+    "isPermissionOnly": true,
+    "description": "Grants permission to invoke GetWebAppUrl on AWS Transform",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listagents": {
     "name": "ListAgents",
     "isPermissionOnly": true,

package/data/conditionKeys/bedrock-mantle.json

@@ -19,6 +19,11 @@
     "description": "Filters access by the Short-term or Long-term bearer tokens",
     "type": "String"
   },
+  "bedrock-mantle:customizedmodelarn": {
+    "key": "bedrock-mantle:CustomizedModelArn",
+    "description": "Filters access by the ARN of the customized model being associated or referenced in cross-resource operations",
+    "type": "String"
+  },
   "bedrock-mantle:files": {
     "key": "bedrock-mantle:Files",
     "description": "Filters access by the specified file identifiers",
@@ -34,6 +39,16 @@
     "description": "Filters access by the specified Model",
     "type": "String"
   },
+  "bedrock-mantle:projectarn": {
+    "key": "bedrock-mantle:ProjectArn",
+    "description": "Filters access by the ARN of the project being associated or referenced in cross-resource operations",
+    "type": "String"
+  },
+  "bedrock-mantle:reservationarn": {
+    "key": "bedrock-mantle:ReservationArn",
+    "description": "Filters access by the ARN of the reservation being referenced in cross-resource operations",
+    "type": "String"
+  },
   "bedrock-mantle:servicetier": {
     "key": "bedrock-mantle:ServiceTier",
     "description": "Filters access by the specified ServiceTier",

package/data/conditionKeys/s3files.json

@@ -0,0 +1,27 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  },
+  "s3files:accesspointarn": {
+    "key": "s3files:AccessPointArn",
+    "description": "Filters access by the ARN of the access point used to mount the file system",
+    "type": "ARN"
+  },
+  "s3files:createaction": {
+    "key": "s3files:CreateAction",
+    "description": "Filters access by the name of a resource-creating API action",
+    "type": "String"
+  }
+}

package/data/resourceTypes/bedrock-mantle.json

@@ -5,5 +5,19 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "customized-model": {
+    "key": "customized-model",
+    "arn": "arn:${Partition}:bedrock-mantle:${Region}:${Account}:customized-model/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "reservation": {
+    "key": "reservation",
+    "arn": "arn:${Partition}:bedrock-mantle:${Region}:${Account}:reservation/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/bedrock.json

@@ -213,6 +213,20 @@
     "key": "data-automation-profile",
     "arn": "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-profile/${ProfileId}"
   },
+  "data-automation-library": {
+    "key": "data-automation-library",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library/${DataAutomationLibraryId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "data-automation-library-ingestion-job": {
+    "key": "data-automation-library-ingestion-job",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library-ingestion-job/${IngestionJobId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "session": {
     "key": "session",
     "arn": "arn:${Partition}:bedrock:${Region}:${Account}:session/${SessionId}",

package/data/resourceTypes/dataexchange.json

@@ -30,7 +30,10 @@
   },
   "assets": {
     "key": "assets",
-    "arn": "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/${DataSetId}/revisions/${RevisionId}/assets/${AssetId}"
+    "arn": "arn:${Partition}:dataexchange:${Region}:${Account}:data-sets/${DataSetId}/revisions/${RevisionId}/assets/${AssetId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "entitled-assets": {
     "key": "entitled-assets",

package/data/resourceTypes/lightsail.json

@@ -83,7 +83,10 @@
   },
   "alarm": {
     "key": "Alarm",
-    "arn": "arn:${Partition}:lightsail:${Region}:${Account}:Alarm/${Id}"
+    "arn": "arn:${Partition}:lightsail:${Region}:${Account}:Alarm/${Id}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "certificate": {
     "key": "Certificate",

package/data/resourceTypes/s3files.json

@@ -0,0 +1,16 @@
+{
+  "file-system": {
+    "key": "file-system",
+    "arn": "arn:${Partition}:s3files:${Region}:${Account}:file-system/${FileSystemId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "access-point": {
+    "key": "access-point",
+    "arn": "arn:${Partition}:s3files:${Region}:${Account}:file-system/${FileSystemId}/access-point/${AccessPointId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

package/data/serviceNames.json

@@ -351,6 +351,7 @@
   "s3-object-lambda": "Amazon S3 Object Lambda",
   "s3-outposts": "Amazon S3 on Outposts",
   "s3express": "Amazon S3 Express",
+  "s3files": "Amazon S3 Files",
   "s3tables": "Amazon S3 Tables",
   "s3vectors": "Amazon S3 Vectors",
   "sagemaker": "Amazon SageMaker",

package/data/services.json

@@ -351,6 +351,7 @@
   "s3-object-lambda",
   "s3-outposts",
   "s3express",
+  "s3files",
   "s3tables",
   "s3vectors",
   "sagemaker",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.18.202604021",
+  "version": "0.18.202604081",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-04-02T05:17:12.692Z",
+  "updatedAt": "2026-04-08T05:21:59.510Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",