@cloud-copilot/iam-data 0.18.202604031 → 0.18.202604081

package/data/actions/bedrock.json

@@ -299,6 +299,17 @@
     ],
     "dependentActions": []
   },
+  "createdataautomationlibrary": {
+    "name": "CreateDataAutomationLibrary",
+    "description": "Grants permission to create a Data Automation Library",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createdataautomationproject": {
     "name": "CreateDataAutomationProject",
     "description": "Grants permission to create a data automation project",
@@ -309,6 +320,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "data-automation-library",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -901,6 +918,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletedataautomationlibrary": {
+    "name": "DeleteDataAutomationLibrary",
+    "description": "Grants permission to delete a Data Automation Library",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "data-automation-library",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletedataautomationproject": {
     "name": "DeleteDataAutomationProject",
     "description": "Grants permission to delete a data automation project",
@@ -1608,6 +1640,57 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdataautomationlibrary": {
+    "name": "GetDataAutomationLibrary",
+    "description": "Grants permission to retrieve an existing Data Automation Library",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "data-automation-library",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getdataautomationlibraryentity": {
+    "name": "GetDataAutomationLibraryEntity",
+    "description": "Grants permission to get a Data Automation Library entity",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "data-automation-library",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getdataautomationlibraryingestionjob": {
+    "name": "GetDataAutomationLibraryIngestionJob",
+    "description": "Grants permission to get details about a Data Automation Library ingestion job",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "data-automation-library",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "data-automation-library-ingestion-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdataautomationproject": {
     "name": "GetDataAutomationProject",
     "description": "Grants permission to retrieve an existing data automation project",
@@ -2265,6 +2348,24 @@
     ],
     "dependentActions": []
   },
+  "invokedataautomationlibraryingestionjob": {
+    "name": "InvokeDataAutomationLibraryIngestionJob",
+    "description": "Grants permission to invoke a Data Automation Library ingestion job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "data-automation-library",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "invokeflow": {
     "name": "InvokeFlow",
     "description": "Grants permission to invoke a prompt flow with user input",
@@ -2631,6 +2732,51 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdataautomationlibraries": {
+    "name": "ListDataAutomationLibraries",
+    "description": "Grants permission to list Data Automation Libraries",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "data-automation-project",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listdataautomationlibraryentities": {
+    "name": "ListDataAutomationLibraryEntities",
+    "description": "Grants permission to list Data Automation Library entities",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "data-automation-library",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listdataautomationlibraryingestionjobs": {
+    "name": "ListDataAutomationLibraryIngestionJobs",
+    "description": "Grants permission to list Data Automation Library ingestion jobs",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "data-automation-library",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdataautomationprojects": {
     "name": "ListDataAutomationProjects",
     "description": "Grants permission to list existing data automation projects",
@@ -2641,6 +2787,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "data-automation-project",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -3036,6 +3188,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "data-automation-library",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "data-automation-library-ingestion-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "data-automation-project",
         "required": true,
@@ -3550,6 +3714,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "data-automation-library",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "data-automation-library-ingestion-job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "data-automation-project",
         "required": false,
@@ -3730,6 +3906,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "data-automation-library",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "data-automation-library-ingestion-job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "data-automation-project",
         "required": false,
@@ -4000,6 +4188,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatedataautomationlibrary": {
+    "name": "UpdateDataAutomationLibrary",
+    "description": "Grants permission to update a Data Automation Library",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "data-automation-library",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatedataautomationproject": {
     "name": "UpdateDataAutomationProject",
     "description": "Grants permission to update a data automation project",
@@ -4016,6 +4219,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "data-automation-project",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],

package/data/actions/glue.json

@@ -3941,6 +3941,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "managedconnector": {
+    "name": "ManagedConnector",
+    "description": "Grants permission to use Glue managed connectors to query data",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "modifyintegration": {
     "name": "ModifyIntegration",
     "description": "Grants permission to modify a zero-ETL integration",

package/data/actions/lightsail.json

@@ -1468,7 +1468,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "putinstancepublicports": {
@@ -1729,6 +1732,12 @@
     "description": "Grants permission to tag a resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "Alarm",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "Bucket",
         "required": false,
@@ -1854,6 +1863,12 @@
     "description": "Grants permission to untag a resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "Alarm",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "Bucket",
         "required": false,

package/data/actions/s3files.json

@@ -0,0 +1,394 @@
+{
+  "clientmount": {
+    "name": "ClientMount",
+    "isPermissionOnly": true,
+    "description": "Grants permission to allow an NFS client read-access to a file system",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "file-system",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3files:AccessPointArn"
+    ],
+    "dependentActions": []
+  },
+  "clientrootaccess": {
+    "name": "ClientRootAccess",
+    "isPermissionOnly": true,
+    "description": "Grants permission to allow an NFS client root-access to a file system",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "file-system",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3files:AccessPointArn"
+    ],
+    "dependentActions": []
+  },
+  "clientwrite": {
+    "name": "ClientWrite",
+    "isPermissionOnly": true,
+    "description": "Grants permission to allow an NFS client write-access to a file system",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "file-system",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3files:AccessPointArn"
+    ],
+    "dependentActions": []
+  },
+  "createaccesspoint": {
+    "name": "CreateAccessPoint",
+    "description": "Grants permission to create an access point for the specified file system",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "file-system",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createfilesystem": {
+    "name": "CreateFileSystem",
+    "description": "Grants permission to create a new file system",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createmounttarget": {
+    "name": "CreateMountTarget",
+    "description": "Grants permission to create a mount target for a file system",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "file-system",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteaccesspoint": {
+    "name": "DeleteAccessPoint",
+    "description": "Grants permission to delete a specified access point",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "access-point",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletefilesystem": {
+    "name": "DeleteFileSystem",
+    "description": "Grants permission to delete a specified file system",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "file-system",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletefilesystempolicy": {
+    "name": "DeleteFileSystemPolicy",
+    "description": "Grants permission to delete the IAM resource policy for a specified file system",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "file-system",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletemounttarget": {
+    "name": "DeleteMountTarget",
+    "description": "Grants permission to delete a specified mount target",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "file-system",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getaccesspoint": {
+    "name": "GetAccessPoint",
+    "description": "Grants permission to get resource information for a specified access point",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "access-point",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getfilesystem": {
+    "name": "GetFileSystem",
+    "description": "Grants permission to get resource information for a specified file system",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "file-system",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getfilesystempolicy": {
+    "name": "GetFileSystemPolicy",
+    "description": "Grants permission to get the IAM resource policy for a specified file system",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "file-system",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmounttarget": {
+    "name": "GetMountTarget",
+    "description": "Grants permission to get resource information for a specified mount target",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "file-system",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getsynchronizationconfiguration": {
+    "name": "GetSynchronizationConfiguration",
+    "description": "Grants permission to get a synchronization configuration for a specified file system",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "file-system",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listaccesspoints": {
+    "name": "ListAccessPoints",
+    "description": "Grants permission to get a paginated list of all access points in the account",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "access-point",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listfilesystems": {
+    "name": "ListFileSystems",
+    "description": "Grants permission to get a paginated list of all file systems in the account",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "file-system",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listmounttargets": {
+    "name": "ListMountTargets",
+    "description": "Grants permission to get a paginated list of all mount targets in the account",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "file-system",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list tags for a specified S3 Files resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "access-point",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "file-system",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putfilesystempolicy": {
+    "name": "PutFileSystemPolicy",
+    "description": "Grants permission to add an IAM resource policy to a specified file system",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "file-system",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putsynchronizationconfiguration": {
+    "name": "PutSynchronizationConfiguration",
+    "description": "Grants permission to add a synchronization configuration to a specified file system",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "file-system",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to tag a specified S3 Files resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "access-point",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "file-system",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "s3files:CreateAction"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to untag a specified S3 Files resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "access-point",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "file-system",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updatemounttarget": {
+    "name": "UpdateMountTarget",
+    "description": "Grants permission to update resource information for a specified mount target",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "file-system",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/ses.json

@@ -1558,13 +1558,17 @@
       {
         "name": "mailmanager-ingress-point",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "mailmanager-rule-set",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -1575,7 +1579,16 @@
     "name": "CreateAddonInstance",
     "description": "Grants permission to create an addon instance",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "addon-instance",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
@@ -1587,7 +1600,16 @@
     "name": "CreateAddonSubscription",
     "description": "Grants permission to create an addon subscription",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "addon-subscription",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -1598,7 +1620,16 @@
     "name": "CreateAddressList",
     "description": "Grants permission to create an address list",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "mailmanager-address-list",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -1626,7 +1657,16 @@
     "name": "CreateArchive",
     "description": "Grants permission to create an archive",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "mailmanager-archive",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -1637,23 +1677,42 @@
     "name": "CreateIngressPoint",
     "description": "Grants permission to create an ingress point",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "mailmanager-ingress-point",
+        "required": true,
+        "conditionKeys": [
+          "ses:MailManagerIngressPointType",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": [
+          "ec2:DescribeVpcEndpoints",
+          "iam:CreateServiceLinkedRole"
+        ]
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
       "ses:MailManagerRuleSetArn",
       "ses:MailManagerTrafficPolicyArn"
     ],
-    "dependentActions": [
-      "ec2:DescribeVpcEndpoints",
-      "iam:CreateServiceLinkedRole"
-    ]
+    "dependentActions": []
   },
   "createrelay": {
     "name": "CreateRelay",
     "description": "Grants permission to create a SMTP relay",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "mailmanager-smtp-relay",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -1664,7 +1723,18 @@
     "name": "CreateRuleSet",
     "description": "Grants permission to create a rule set",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "mailmanager-rule-set",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": [
+          "iam:PassRole"
+        ]
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -1675,7 +1745,16 @@
     "name": "CreateTrafficPolicy",
     "description": "Grants permission to create a traffic policy",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "mailmanager-traffic-policy",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -1695,7 +1774,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1712,7 +1791,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1746,7 +1825,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1763,7 +1842,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1780,7 +1859,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1797,7 +1876,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1814,7 +1893,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1848,7 +1927,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1865,7 +1944,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1916,7 +1995,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -1932,7 +2011,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getarchivemessage": {
@@ -1947,7 +2028,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getarchivemessagecontent": {
@@ -1962,7 +2045,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getarchivesearch": {
@@ -1977,7 +2062,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getarchivesearchresults": {
@@ -1992,7 +2079,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getingresspoint": {
@@ -2008,7 +2097,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -2042,7 +2131,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -2059,7 +2148,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -2076,7 +2165,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -2240,7 +2329,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "startarchivesearch": {
@@ -2255,7 +2346,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "stopaddresslistimportjob": {
@@ -2287,7 +2380,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "stoparchivesearch": {
@@ -2302,7 +2397,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "updatearchive": {
@@ -2318,7 +2415,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -2330,12 +2427,13 @@
       {
         "name": "mailmanager-ingress-point",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
       "ses:MailManagerTrafficPolicyArn",
       "ses:MailManagerRuleSetArn"
     ],
@@ -2354,7 +2452,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -2371,9 +2469,11 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
-    "dependentActions": []
+    "dependentActions": [
+      "iam:PassRole"
+    ]
   },
   "updatetrafficpolicy": {
     "name": "UpdateTrafficPolicy",
@@ -2388,7 +2488,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },

package/data/actions/transform.json

@@ -115,6 +115,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getwebappurl": {
+    "name": "GetWebAppUrl",
+    "isPermissionOnly": true,
+    "description": "Grants permission to invoke GetWebAppUrl on AWS Transform",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listagents": {
     "name": "ListAgents",
     "isPermissionOnly": true,

package/data/conditionKeys/s3files.json

@@ -0,0 +1,27 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  },
+  "s3files:accesspointarn": {
+    "key": "s3files:AccessPointArn",
+    "description": "Filters access by the ARN of the access point used to mount the file system",
+    "type": "ARN"
+  },
+  "s3files:createaction": {
+    "key": "s3files:CreateAction",
+    "description": "Filters access by the name of a resource-creating API action",
+    "type": "String"
+  }
+}

package/data/resourceTypes/bedrock.json

@@ -213,6 +213,20 @@
     "key": "data-automation-profile",
     "arn": "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-profile/${ProfileId}"
   },
+  "data-automation-library": {
+    "key": "data-automation-library",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library/${DataAutomationLibraryId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "data-automation-library-ingestion-job": {
+    "key": "data-automation-library-ingestion-job",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library-ingestion-job/${IngestionJobId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "session": {
     "key": "session",
     "arn": "arn:${Partition}:bedrock:${Region}:${Account}:session/${SessionId}",

package/data/resourceTypes/lightsail.json

@@ -83,7 +83,10 @@
   },
   "alarm": {
     "key": "Alarm",
-    "arn": "arn:${Partition}:lightsail:${Region}:${Account}:Alarm/${Id}"
+    "arn": "arn:${Partition}:lightsail:${Region}:${Account}:Alarm/${Id}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "certificate": {
     "key": "Certificate",

package/data/resourceTypes/s3files.json

@@ -0,0 +1,16 @@
+{
+  "file-system": {
+    "key": "file-system",
+    "arn": "arn:${Partition}:s3files:${Region}:${Account}:file-system/${FileSystemId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "access-point": {
+    "key": "access-point",
+    "arn": "arn:${Partition}:s3files:${Region}:${Account}:file-system/${FileSystemId}/access-point/${AccessPointId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

package/data/serviceNames.json

@@ -351,6 +351,7 @@
   "s3-object-lambda": "Amazon S3 Object Lambda",
   "s3-outposts": "Amazon S3 on Outposts",
   "s3express": "Amazon S3 Express",
+  "s3files": "Amazon S3 Files",
   "s3tables": "Amazon S3 Tables",
   "s3vectors": "Amazon S3 Vectors",
   "sagemaker": "Amazon SageMaker",

package/data/services.json

@@ -351,6 +351,7 @@
   "s3-object-lambda",
   "s3-outposts",
   "s3express",
+  "s3files",
   "s3tables",
   "s3vectors",
   "sagemaker",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.18.202604031",
+  "version": "0.18.202604081",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-04-03T05:18:56.472Z",
+  "updatedAt": "2026-04-08T05:21:59.510Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",