@cloud-copilot/iam-data 0.18.202604081 → 0.18.202604101

package/data/actions/aws-marketplace.json

@@ -234,6 +234,96 @@
     ],
     "dependentActions": []
   },
+  "getlisting": {
+    "name": "GetListing",
+    "description": "Grants permission to retrieve information about a listing",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Listing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getoffer": {
+    "name": "GetOffer",
+    "description": "Grants permission to retrieve information about an offer",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Offer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getofferset": {
+    "name": "GetOfferSet",
+    "description": "Grants permission to retrieve information about an offer set",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "OfferSet",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getofferterms": {
+    "name": "GetOfferTerms",
+    "description": "Grants permission to retrieve terms for an offer",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Offer",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getproduct": {
+    "name": "GetProduct",
+    "description": "Grants permission to retrieve information about a product",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listfulfillmentoptions": {
+    "name": "ListFulfillmentOptions",
+    "description": "Grants permission to list fulfillment options for a product",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Product",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listprivatelistings": {
     "name": "ListPrivateListings",
     "description": "Grants permission to users to list their private offers",
@@ -242,6 +332,51 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listpurchaseoptions": {
+    "name": "ListPurchaseOptions",
+    "description": "Grants permission to list purchase options available to the buyer",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "PurchaseOption",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "searchfacets": {
+    "name": "SearchFacets",
+    "description": "Grants permission to retrieve facet values for filtering listings",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Listing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "searchlistings": {
+    "name": "SearchListings",
+    "description": "Grants permission to search for product listings",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Listing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getentitlements": {
     "name": "GetEntitlements",
     "description": "Grants permission to retrieve entitlement values for a given product. The results can be filtered based on customer identifier or product dimensions",

package/data/actions/bedrock-agentcore.json

@@ -369,6 +369,29 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createregistry": {
+    "name": "CreateRegistry",
+    "description": "Grants permission to create a new registry",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createregistryrecord": {
+    "name": "CreateRegistryRecord",
+    "description": "Grants permission to create a new registry record",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "registry",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createworkloadidentity": {
     "name": "CreateWorkloadIdentity",
     "description": "Grants permission to create a new Workload Identity",
@@ -660,6 +683,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteregistry": {
+    "name": "DeleteRegistry",
+    "description": "Grants permission to delete an existing registry",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "registry",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteregistryrecord": {
+    "name": "DeleteRegistryRecord",
+    "description": "Grants permission to delete an existing registry record",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "registry-record",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteresourcepolicy": {
     "name": "DeleteResourcePolicy",
     "description": "Grants permission to delete the resource-based policy for a Bedrock resource",
@@ -1074,6 +1127,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getregistry": {
+    "name": "GetRegistry",
+    "description": "Grants permission to retrieve an existing registry",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "registry",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getregistryrecord": {
+    "name": "GetRegistryRecord",
+    "description": "Grants permission to retrieve an existing registry record",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "registry-record",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getresourceapikey": {
     "name": "GetResourceApiKey",
     "description": "Grants permission to retrieve an API Key associated with an Api Key Credential Provider",
@@ -1416,6 +1499,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "invokeregistrymcp": {
+    "name": "InvokeRegistryMcp",
+    "description": "Grants permission to invoke an MCP operation against an existing registry",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "registry",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listactors": {
     "name": "ListActors",
     "description": "Grants permission to list Actors",
@@ -1707,6 +1805,29 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listregistries": {
+    "name": "ListRegistries",
+    "description": "Grants permission to list existing registries",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listregistryrecords": {
+    "name": "ListRegistryRecords",
+    "description": "Grants permission to list existing registry records in a registry",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "registry",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listsessions": {
     "name": "ListSessions",
     "description": "Grants permission to list sessions",
@@ -1957,6 +2078,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "searchregistryrecords": {
+    "name": "SearchRegistryRecords",
+    "description": "Grants permission to search for registry records",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "registry",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "settokenvaultcmk": {
     "name": "SetTokenVaultCMK",
     "description": "Grants permission to associate a Customer Managed Key (CMK) or a Service Managed Key with a specific TokenVault",
@@ -2117,6 +2253,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "submitregistryrecordforapproval": {
+    "name": "SubmitRegistryRecordForApproval",
+    "description": "Grants permission to submit a registry record for approval",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "registry-record",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "synchronizegatewaytargets": {
     "name": "SynchronizeGatewayTargets",
     "isPermissionOnly": true,
@@ -2545,6 +2696,51 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateregistry": {
+    "name": "UpdateRegistry",
+    "description": "Grants permission to update an existing registry",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "registry",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateregistryrecord": {
+    "name": "UpdateRegistryRecord",
+    "description": "Grants permission to update an existing registry record",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "registry-record",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateregistryrecordstatus": {
+    "name": "UpdateRegistryRecordStatus",
+    "description": "Grants permission to update the status of a registry record",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "registry-record",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateworkloadidentity": {
     "name": "UpdateWorkloadIdentity",
     "description": "Grants permission to update the metadata of an existing Workload Identity",

package/data/actions/deadline.json

@@ -939,6 +939,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getmonitorsettings": {
+    "name": "GetMonitorSettings",
+    "description": "Grants permission to get settings for a monitor",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getqueue": {
     "name": "GetQueue",
     "description": "Grants permission to get a queue",
@@ -2064,6 +2079,21 @@
       "sso:UpdateApplication"
     ]
   },
+  "updatemonitorsettings": {
+    "name": "UpdateMonitorSettings",
+    "description": "Grants permission to update settings for a monitor",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatequeue": {
     "name": "UpdateQueue",
     "description": "Grants permission to update a queue",

package/data/actions/ecs.json

@@ -14,10 +14,10 @@
       }
     ],
     "conditionKeys": [
-      "ecs:propagate-tags",
-      "ecs:instance-metadata-tags-propagation",
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "ecs:instance-metadata-tags-propagation",
+      "ecs:propagate-tags"
     ],
     "dependentActions": []
   },
@@ -52,8 +52,8 @@
         "name": "daemon",
         "required": true,
         "conditionKeys": [
-          "ecs:cluster",
-          "aws:ResourceTag/${TagKey}"
+          "aws:ResourceTag/${TagKey}",
+          "ecs:cluster"
         ],
         "dependentActions": []
       }
@@ -80,8 +80,8 @@
         "name": "service",
         "required": true,
         "conditionKeys": [
-          "ecs:cluster",
-          "aws:ResourceTag/${TagKey}"
+          "aws:ResourceTag/${TagKey}",
+          "ecs:cluster"
         ],
         "dependentActions": [
           "ecs:RegisterTaskDefinition",
@@ -92,11 +92,11 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "ecs:task-definition",
-      "ecs:subnet",
       "ecs:enable-ecs-managed-tags",
       "ecs:propagate-tags",
+      "ecs:subnet",
       "ecs:task-cpu",
+      "ecs:task-definition",
       "ecs:task-memory"
     ],
     "dependentActions": []
@@ -110,8 +110,8 @@
         "name": "service",
         "required": true,
         "conditionKeys": [
-          "ecs:cluster",
-          "aws:ResourceTag/${TagKey}"
+          "aws:ResourceTag/${TagKey}",
+          "ecs:cluster"
         ],
         "dependentActions": []
       }
@@ -119,18 +119,18 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
+      "ecs:auto-assign-public-ip",
       "ecs:capacity-provider",
-      "ecs:task-definition",
       "ecs:enable-ebs-volumes",
+      "ecs:enable-ecs-managed-tags",
       "ecs:enable-execute-command",
       "ecs:enable-service-connect",
-      "ecs:namespace",
       "ecs:enable-vpc-lattice",
-      "ecs:enable-ecs-managed-tags",
+      "ecs:namespace",
       "ecs:propagate-tags",
-      "ecs:auto-assign-public-ip",
       "ecs:subnet",
       "ecs:task-cpu",
+      "ecs:task-definition",
       "ecs:task-memory"
     ],
     "dependentActions": []
@@ -150,8 +150,8 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "ecs:cluster",
       "ecs:capacity-provider",
+      "ecs:cluster",
       "ecs:service",
       "ecs:task-definition"
     ],
@@ -232,8 +232,8 @@
       }
     ],
     "conditionKeys": [
-      "ecs:cluster",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster"
     ],
     "dependentActions": []
   },
@@ -267,8 +267,8 @@
       }
     ],
     "conditionKeys": [
-      "ecs:cluster",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster"
     ],
     "dependentActions": []
   },
@@ -416,8 +416,8 @@
       }
     ],
     "conditionKeys": [
-      "ecs:cluster",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster"
     ],
     "dependentActions": []
   },
@@ -430,8 +430,8 @@
         "name": "daemon",
         "required": true,
         "conditionKeys": [
-          "ecs:cluster",
-          "aws:ResourceTag/${TagKey}"
+          "aws:ResourceTag/${TagKey}",
+          "ecs:cluster"
         ],
         "dependentActions": []
       },
@@ -439,9 +439,9 @@
         "name": "daemon-deployment",
         "required": true,
         "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
           "ecs:cluster",
-          "ecs:daemon",
-          "aws:ResourceTag/${TagKey}"
+          "ecs:daemon"
         ],
         "dependentActions": []
       }
@@ -458,8 +458,8 @@
         "name": "daemon",
         "required": true,
         "conditionKeys": [
-          "ecs:cluster",
-          "aws:ResourceTag/${TagKey}"
+          "aws:ResourceTag/${TagKey}",
+          "ecs:cluster"
         ],
         "dependentActions": []
       },
@@ -467,9 +467,9 @@
         "name": "daemon-revision",
         "required": true,
         "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
           "ecs:cluster",
-          "ecs:daemon",
-          "aws:ResourceTag/${TagKey}"
+          "ecs:daemon"
         ],
         "dependentActions": []
       }
@@ -507,8 +507,8 @@
       }
     ],
     "conditionKeys": [
-      "ecs:cluster",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster"
     ],
     "dependentActions": []
   },
@@ -521,8 +521,8 @@
         "name": "service",
         "required": true,
         "conditionKeys": [
-          "ecs:cluster",
-          "aws:ResourceTag/${TagKey}"
+          "aws:ResourceTag/${TagKey}",
+          "ecs:cluster"
         ],
         "dependentActions": []
       },
@@ -530,9 +530,9 @@
         "name": "service-deployment",
         "required": true,
         "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
           "ecs:cluster",
-          "ecs:service",
-          "aws:ResourceTag/${TagKey}"
+          "ecs:service"
         ],
         "dependentActions": []
       }
@@ -549,8 +549,8 @@
         "name": "service",
         "required": true,
         "conditionKeys": [
-          "ecs:cluster",
-          "aws:ResourceTag/${TagKey}"
+          "aws:ResourceTag/${TagKey}",
+          "ecs:cluster"
         ],
         "dependentActions": []
       },
@@ -558,9 +558,9 @@
         "name": "service-revision",
         "required": true,
         "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
           "ecs:cluster",
-          "ecs:service",
-          "aws:ResourceTag/${TagKey}"
+          "ecs:service"
         ],
         "dependentActions": []
       }
@@ -971,6 +971,7 @@
   },
   "putsystemlogevents": {
     "name": "PutSystemLogEvents",
+    "isPermissionOnly": true,
     "description": "Grants permission to collect system logs from the container instances",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -987,8 +988,8 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
-          "ecs:cluster",
-          "ecs:capacity-provider"
+          "ecs:capacity-provider",
+          "ecs:cluster"
         ],
         "dependentActions": []
       }
@@ -1078,11 +1079,11 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
-      "ecs:cluster",
       "ecs:capacity-provider",
+      "ecs:cluster",
       "ecs:enable-ebs-volumes",
       "ecs:enable-execute-command"
     ],
@@ -1103,8 +1104,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "ecs:cluster",
       "ecs:container-instances",
@@ -1115,6 +1116,7 @@
   },
   "starttelemetrysession": {
     "name": "StartTelemetrySession",
+    "isPermissionOnly": true,
     "description": "Grants permission to start a telemetry session",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -1139,8 +1141,8 @@
         "name": "service",
         "required": true,
         "conditionKeys": [
-          "ecs:cluster",
-          "aws:ResourceTag/${TagKey}"
+          "aws:ResourceTag/${TagKey}",
+          "ecs:cluster"
         ],
         "dependentActions": []
       },
@@ -1148,9 +1150,9 @@
         "name": "service-deployment",
         "required": true,
         "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
           "ecs:cluster",
-          "ecs:service",
-          "aws:ResourceTag/${TagKey}"
+          "ecs:service"
         ],
         "dependentActions": []
       }
@@ -1288,9 +1290,9 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
       "ecs:CreateAction"
     ],
     "dependentActions": []
@@ -1374,9 +1376,9 @@
       }
     ],
     "conditionKeys": [
-      "ecs:propagate-tags",
+      "aws:ResourceTag/${TagKey}",
       "ecs:instance-metadata-tags-propagation",
-      "aws:ResourceTag/${TagKey}"
+      "ecs:propagate-tags"
     ],
     "dependentActions": []
   },
@@ -1461,8 +1463,8 @@
         "name": "daemon",
         "required": true,
         "conditionKeys": [
-          "ecs:cluster",
-          "aws:ResourceTag/${TagKey}"
+          "aws:ResourceTag/${TagKey}",
+          "ecs:cluster"
         ],
         "dependentActions": []
       }
@@ -1487,16 +1489,16 @@
         "name": "service",
         "required": true,
         "conditionKeys": [
-          "ecs:cluster",
-          "aws:ResourceTag/${TagKey}"
+          "aws:ResourceTag/${TagKey}",
+          "ecs:cluster"
         ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "ecs:subnet",
       "ecs:enable-ecs-managed-tags",
       "ecs:propagate-tags",
+      "ecs:subnet",
       "ecs:task-cpu",
       "ecs:task-memory"
     ],
@@ -1511,25 +1513,25 @@
         "name": "service",
         "required": true,
         "conditionKeys": [
-          "ecs:cluster",
-          "aws:ResourceTag/${TagKey}"
+          "aws:ResourceTag/${TagKey}",
+          "ecs:cluster"
         ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
+      "ecs:auto-assign-public-ip",
       "ecs:capacity-provider",
       "ecs:enable-ebs-volumes",
+      "ecs:enable-ecs-managed-tags",
       "ecs:enable-execute-command",
       "ecs:enable-service-connect",
-      "ecs:namespace",
-      "ecs:task-definition",
       "ecs:enable-vpc-lattice",
-      "ecs:enable-ecs-managed-tags",
+      "ecs:namespace",
       "ecs:propagate-tags",
-      "ecs:auto-assign-public-ip",
       "ecs:subnet",
       "ecs:task-cpu",
+      "ecs:task-definition",
       "ecs:task-memory"
     ],
     "dependentActions": []

package/data/actions/observabilityadmin.json

@@ -16,7 +16,10 @@
       "aws:RequestTag/${TagKey}",
       "observabilityadmin:CentralizationSourceRegions",
       "observabilityadmin:CentralizationDestinationRegion",
-      "observabilityadmin:CentralizationBackupRegion"
+      "observabilityadmin:CentralizationBackupRegion",
+      "observabilityadmin:CentralizationRuleName",
+      "observabilityadmin:CentralizationSourceId",
+      "observabilityadmin:CentralizationDestinationAccount"
     ],
     "dependentActions": []
   },
@@ -71,7 +74,8 @@
     ],
     "conditionKeys": [
       "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "observabilityadmin:TargetRegions"
     ],
     "dependentActions": []
   },
@@ -89,7 +93,8 @@
     ],
     "conditionKeys": [
       "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "observabilityadmin:TargetRegions"
     ],
     "dependentActions": []
   },
@@ -105,7 +110,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "observabilityadmin:CentralizationRuleName"
+    ],
     "dependentActions": []
   },
   "deletes3tableintegration": {
@@ -180,7 +187,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "observabilityadmin:CentralizationRuleName"
+    ],
     "dependentActions": []
   },
   "gets3tableintegration": {
@@ -280,7 +289,9 @@
     "description": "Grants permission to retrieve telemetry configurations for resources associated with the account",
     "accessLevel": "Read",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "observabilityadmin:TargetRegions"
+    ],
     "dependentActions": []
   },
   "listresourcetelemetryfororganization": {
@@ -288,7 +299,9 @@
     "description": "Grants permission to retrieve telemetry configurations for resources associated with accounts in the organization",
     "accessLevel": "Read",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "observabilityadmin:TargetRegions"
+    ],
     "dependentActions": []
   },
   "lists3tableintegrations": {
@@ -375,7 +388,9 @@
     "description": "Grants permission to start the Telemetry Config feature for the account",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "observabilityadmin:TargetRegions"
+    ],
     "dependentActions": []
   },
   "starttelemetryevaluationfororganization": {
@@ -383,7 +398,9 @@
     "description": "Grants permission to start the Telemetry Config feature for the organization",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "observabilityadmin:TargetRegions"
+    ],
     "dependentActions": []
   },
   "stoptelemetryenrichment": {
@@ -516,7 +533,10 @@
     "conditionKeys": [
       "observabilityadmin:CentralizationSourceRegions",
       "observabilityadmin:CentralizationDestinationRegion",
-      "observabilityadmin:CentralizationBackupRegion"
+      "observabilityadmin:CentralizationBackupRegion",
+      "observabilityadmin:CentralizationRuleName",
+      "observabilityadmin:CentralizationSourceId",
+      "observabilityadmin:CentralizationDestinationAccount"
     ],
     "dependentActions": []
   },
@@ -547,7 +567,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "observabilityadmin:TargetRegions"
+    ],
     "dependentActions": []
   },
   "updatetelemetryrulefororganization": {
@@ -562,7 +584,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "observabilityadmin:TargetRegions"
+    ],
     "dependentActions": []
   },
   "validatetelemetrypipelineconfiguration": {

package/data/actions/securitylake.json

@@ -96,6 +96,7 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []

package/data/actions/workspaces.json

@@ -867,6 +867,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettroubleshootingrecommendation": {
+    "name": "GetTroubleshootingRecommendation",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get troubleshooting recommendations",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "importclientbranding": {
     "name": "ImportClientBranding",
     "description": "Grants permission to import AWS WorkSpaces Client branding data within a directory",
@@ -901,6 +917,22 @@
       "ec2:ModifyImageAttribute"
     ]
   },
+  "invoketroubleshootinginvestigation": {
+    "name": "InvokeTroubleshootingInvestigation",
+    "isPermissionOnly": true,
+    "description": "Grants permission to invoke troubleshooting investigation",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listaccountlinks": {
     "name": "ListAccountLinks",
     "description": "Grants permission to retrieve links with the AWS Account(s) that share your configuration for WorkSpaces BYOL",
@@ -917,6 +949,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listtroubleshootingrecommendations": {
+    "name": "ListTroubleshootingRecommendations",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list troubleshooting recommendations",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "migrateworkspace": {
     "name": "MigrateWorkspace",
     "description": "Grants permission to migrate WorkSpaces",

package/data/conditionKeys/observabilityadmin.json

@@ -19,11 +19,26 @@
     "description": "Filters access by the backup region that is passed in the request",
     "type": "String"
   },
+  "observabilityadmin:centralizationdestinationaccount": {
+    "key": "observabilityadmin:CentralizationDestinationAccount",
+    "description": "Filters access by the destination account that is passed in the request",
+    "type": "String"
+  },
   "observabilityadmin:centralizationdestinationregion": {
     "key": "observabilityadmin:CentralizationDestinationRegion",
     "description": "Filters access by the destination region that is passed in the request",
     "type": "String"
   },
+  "observabilityadmin:centralizationrulename": {
+    "key": "observabilityadmin:CentralizationRuleName",
+    "description": "Filters access by the name of the centralization rule that is passed in the request",
+    "type": "String"
+  },
+  "observabilityadmin:centralizationsourceid": {
+    "key": "observabilityadmin:CentralizationSourceId",
+    "description": "Filters access by the source account, organizational unit, or organization IDs that is passed in the request",
+    "type": "ArrayOfString"
+  },
   "observabilityadmin:centralizationsourceregions": {
     "key": "observabilityadmin:CentralizationSourceRegions",
     "description": "Filters access by the source regions that are passed in the request",
@@ -33,5 +48,10 @@
     "key": "observabilityadmin:SourceType",
     "description": "Filters access by the source type that is passed in the request",
     "type": "String"
+  },
+  "observabilityadmin:targetregions": {
+    "key": "observabilityadmin:TargetRegions",
+    "description": "Filters access by the regions that are targetted by the request",
+    "type": "String"
   }
 }

package/data/resourceTypes/aws-marketplace.json

@@ -28,6 +28,26 @@
       "aws:TagKeys"
     ]
   },
+  "product": {
+    "key": "Product",
+    "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/product/${ProductId}"
+  },
+  "listing": {
+    "key": "Listing",
+    "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/listing/${ListingId}"
+  },
+  "offer": {
+    "key": "Offer",
+    "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/offer/${OfferId}"
+  },
+  "offerset": {
+    "key": "OfferSet",
+    "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/offerSet/${OfferSetId}"
+  },
+  "purchaseoption": {
+    "key": "PurchaseOption",
+    "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/purchaseOption/${PurchaseOptionId}"
+  },
   "dashboard": {
     "key": "Dashboard",
     "arn": "arn:${Partition}:aws-marketplace::${Account}:${Catalog}/ReportingData/${FactTable}/Dashboard/${DashboardName}"

package/data/resourceTypes/bedrock-agentcore.json

@@ -116,5 +116,13 @@
   "policy-generation": {
     "key": "policy-generation",
     "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}/policy-generation/${PolicyGenerationId}"
+  },
+  "registry": {
+    "key": "registry",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/${RegistryId}"
+  },
+  "registry-record": {
+    "key": "registry-record",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/${RegistryId}/record/${RecordId}"
   }
 }

package/data/resourceTypes/ecs.json

@@ -1,4 +1,12 @@
 {
+  "capacity-provider": {
+    "key": "capacity-provider",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:capacity-provider/${CapacityProviderName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:ResourceTag/${TagKey}"
+    ]
+  },
   "cluster": {
     "key": "cluster",
     "arn": "arn:${Partition}:ecs:${Region}:${Account}:cluster/${ClusterName}",
@@ -15,32 +23,6 @@
       "ecs:ResourceTag/${TagKey}"
     ]
   },
-  "service": {
-    "key": "service",
-    "arn": "arn:${Partition}:ecs:${Region}:${Account}:service/${ClusterName}/${ServiceName}",
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "ecs:ResourceTag/${TagKey}"
-    ]
-  },
-  "service-deployment": {
-    "key": "service-deployment",
-    "arn": "arn:${Partition}:ecs:${Region}:${Account}:service-deployment/${ClusterName}/${ServiceName}/${ServiceDeploymentId}",
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "ecs:cluster",
-      "ecs:service"
-    ]
-  },
-  "service-revision": {
-    "key": "service-revision",
-    "arn": "arn:${Partition}:ecs:${Region}:${Account}:service-revision/${ClusterName}/${ServiceName}/${ServiceRevisionId}",
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "ecs:cluster",
-      "ecs:service"
-    ]
-  },
   "daemon": {
     "key": "daemon",
     "arn": "arn:${Partition}:ecs:${Region}:${Account}:daemon/${ClusterName}/${DaemonName}",
@@ -74,6 +56,32 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "service": {
+    "key": "service",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:service/${ClusterName}/${ServiceName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:ResourceTag/${TagKey}"
+    ]
+  },
+  "service-deployment": {
+    "key": "service-deployment",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:service-deployment/${ClusterName}/${ServiceName}/${ServiceDeploymentId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster",
+      "ecs:service"
+    ]
+  },
+  "service-revision": {
+    "key": "service-revision",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:service-revision/${ClusterName}/${ServiceName}/${ServiceRevisionId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster",
+      "ecs:service"
+    ]
+  },
   "task": {
     "key": "task",
     "arn": "arn:${Partition}:ecs:${Region}:${Account}:task/${ClusterName}/${TaskId}",
@@ -90,14 +98,6 @@
       "ecs:ResourceTag/${TagKey}"
     ]
   },
-  "capacity-provider": {
-    "key": "capacity-provider",
-    "arn": "arn:${Partition}:ecs:${Region}:${Account}:capacity-provider/${CapacityProviderName}",
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "ecs:ResourceTag/${TagKey}"
-    ]
-  },
   "task-set": {
     "key": "task-set",
     "arn": "arn:${Partition}:ecs:${Region}:${Account}:task-set/${ClusterName}/${ServiceName}/${TaskSetId}",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.18.202604081",
+  "version": "0.18.202604101",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-04-08T05:21:59.510Z",
+  "updatedAt": "2026-04-10T05:28:44.067Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",