@cloud-copilot/iam-data 0.18.202604081 → 0.18.202604111

package/data/actions/omics.json

@@ -60,6 +60,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "cancelrunbatch": {
+    "name": "CancelRunBatch",
+    "description": "Grants permission to cancel a batch of workflow runs",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "runBatch",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "cancelvariantimportjob": {
     "name": "CancelVariantImportJob",
     "description": "Grants permission to cancel a Variant Import Job",
@@ -270,6 +285,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletebatch": {
+    "name": "DeleteBatch",
+    "description": "Grants permission to delete a batch",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "runBatch",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteconfiguration": {
     "name": "DeleteConfiguration",
     "description": "Grants permission to delete a configuration",
@@ -336,6 +366,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleterunbatch": {
+    "name": "DeleteRunBatch",
+    "description": "Grants permission to delete a batch of workflow runs",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "runBatch",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteruncache": {
     "name": "DeleteRunCache",
     "description": "Grants permission to delete a workflow run cache",
@@ -493,6 +544,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getbatch": {
+    "name": "GetBatch",
+    "description": "Grants permission to retrieve batch details and status",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "runBatch",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getconfiguration": {
     "name": "GetConfiguration",
     "description": "Grants permission to retrieve configuration details",
@@ -861,6 +927,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listbatch": {
+    "name": "ListBatch",
+    "description": "Grants permission to retrieve list of batches",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listconfigurations": {
     "name": "ListConfigurations",
     "description": "Grants permission to retrieve a list of configurations",
@@ -1036,6 +1110,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listrunsinbatch": {
+    "name": "ListRunsInBatch",
+    "description": "Grants permission to retrieve list of workflow runs in batch",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "runBatch",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listsequencestores": {
     "name": "ListSequenceStores",
     "description": "Grants permission to list Sequence Stores",
@@ -1214,6 +1303,56 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "runBatch",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "runCache",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "runGroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workflow",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "startrunbatch": {
+    "name": "StartRunBatch",
+    "description": "Grants permission to start batch of workflow runs",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "run",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:PassRole"
+        ]
+      },
+      {
+        "name": "runBatch",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "runCache",
         "required": false,
@@ -1313,6 +1452,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "runBatch",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "runCache",
         "required": false,
@@ -1403,6 +1548,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "runBatch",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "runCache",
         "required": false,

package/data/actions/securitylake.json

@@ -96,6 +96,7 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []

package/data/actions/verifiedpermissions.json

@@ -41,6 +41,21 @@
     ],
     "dependentActions": []
   },
+  "createpolicystorealias": {
+    "name": "CreatePolicyStoreAlias",
+    "description": "Grants permission to create an alias against a policy store",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "policy-store",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createpolicytemplate": {
     "name": "CreatePolicyTemplate",
     "description": "Grants permission to create a policy template",
@@ -101,6 +116,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletepolicystorealias": {
+    "name": "DeletePolicyStoreAlias",
+    "description": "Grants permission to delete an alias for a policy store",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "policy-store-alias",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletepolicytemplate": {
     "name": "DeletePolicyTemplate",
     "description": "Grants permission to delete the specified policy template from the policy store",
@@ -163,6 +193,21 @@
       "verifiedpermissions:ListTagsForResource"
     ]
   },
+  "getpolicystorealias": {
+    "name": "GetPolicyStoreAlias",
+    "description": "Grants permission to retrieve details about an alias for a policy store",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "policy-store-alias",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getpolicytemplate": {
     "name": "GetPolicyTemplate",
     "description": "Grants permission to retrieve the details for the specified policy template in the specified policy store",
@@ -253,6 +298,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listpolicystorealiases": {
+    "name": "ListPolicyStoreAliases",
+    "description": "Grants permission to return a paginated list of all policy store aliases",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listpolicystores": {
     "name": "ListPolicyStores",
     "description": "Grants permission to return a paginated list of all policy stores in the calling Amazon Web Services account",

package/data/actions/workspaces.json

@@ -867,6 +867,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettroubleshootingrecommendation": {
+    "name": "GetTroubleshootingRecommendation",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get troubleshooting recommendations",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "importclientbranding": {
     "name": "ImportClientBranding",
     "description": "Grants permission to import AWS WorkSpaces Client branding data within a directory",
@@ -901,6 +917,22 @@
       "ec2:ModifyImageAttribute"
     ]
   },
+  "invoketroubleshootinginvestigation": {
+    "name": "InvokeTroubleshootingInvestigation",
+    "isPermissionOnly": true,
+    "description": "Grants permission to invoke troubleshooting investigation",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listaccountlinks": {
     "name": "ListAccountLinks",
     "description": "Grants permission to retrieve links with the AWS Account(s) that share your configuration for WorkSpaces BYOL",
@@ -917,6 +949,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listtroubleshootingrecommendations": {
+    "name": "ListTroubleshootingRecommendations",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list troubleshooting recommendations",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "migrateworkspace": {
     "name": "MigrateWorkspace",
     "description": "Grants permission to migrate WorkSpaces",

package/data/conditionKeys/bcm-dashboards.json

@@ -4,6 +4,11 @@
     "description": "Filters access by the tags that are passed in the request",
     "type": "String"
   },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by tag key-value pairs attached to the resource",
+    "type": "String"
+  },
   "aws:tagkeys": {
     "key": "aws:TagKeys",
     "description": "Filters access by the tag keys that are passed in the request",

package/data/conditionKeys/observabilityadmin.json

@@ -19,11 +19,26 @@
     "description": "Filters access by the backup region that is passed in the request",
     "type": "String"
   },
+  "observabilityadmin:centralizationdestinationaccount": {
+    "key": "observabilityadmin:CentralizationDestinationAccount",
+    "description": "Filters access by the destination account that is passed in the request",
+    "type": "String"
+  },
   "observabilityadmin:centralizationdestinationregion": {
     "key": "observabilityadmin:CentralizationDestinationRegion",
     "description": "Filters access by the destination region that is passed in the request",
     "type": "String"
   },
+  "observabilityadmin:centralizationrulename": {
+    "key": "observabilityadmin:CentralizationRuleName",
+    "description": "Filters access by the name of the centralization rule that is passed in the request",
+    "type": "String"
+  },
+  "observabilityadmin:centralizationsourceid": {
+    "key": "observabilityadmin:CentralizationSourceId",
+    "description": "Filters access by the source account, organizational unit, or organization IDs that is passed in the request",
+    "type": "ArrayOfString"
+  },
   "observabilityadmin:centralizationsourceregions": {
     "key": "observabilityadmin:CentralizationSourceRegions",
     "description": "Filters access by the source regions that are passed in the request",
@@ -33,5 +48,10 @@
     "key": "observabilityadmin:SourceType",
     "description": "Filters access by the source type that is passed in the request",
     "type": "String"
+  },
+  "observabilityadmin:targetregions": {
+    "key": "observabilityadmin:TargetRegions",
+    "description": "Filters access by the regions that are targetted by the request",
+    "type": "String"
   }
 }

package/data/resourceTypes/aws-marketplace.json

@@ -28,6 +28,26 @@
       "aws:TagKeys"
     ]
   },
+  "product": {
+    "key": "Product",
+    "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/product/${ProductId}"
+  },
+  "listing": {
+    "key": "Listing",
+    "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/listing/${ListingId}"
+  },
+  "offer": {
+    "key": "Offer",
+    "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/offer/${OfferId}"
+  },
+  "offerset": {
+    "key": "OfferSet",
+    "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/offerSet/${OfferSetId}"
+  },
+  "purchaseoption": {
+    "key": "PurchaseOption",
+    "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/purchaseOption/${PurchaseOptionId}"
+  },
   "dashboard": {
     "key": "Dashboard",
     "arn": "arn:${Partition}:aws-marketplace::${Account}:${Catalog}/ReportingData/${FactTable}/Dashboard/${DashboardName}"

package/data/resourceTypes/bcm-dashboards.json

@@ -1 +1,18 @@
-{}
+{
+  "dashboard": {
+    "key": "dashboard",
+    "arn": "arn:${Partition}:bcm-dashboards::${Account}:dashboard/${DashboardName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ]
+  },
+  "scheduled-report": {
+    "key": "scheduled-report",
+    "arn": "arn:${Partition}:bcm-dashboards::${Account}:scheduled-report/${ScheduledReportName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ]
+  }
+}

package/data/resourceTypes/bedrock-agentcore.json

@@ -116,5 +116,13 @@
   "policy-generation": {
     "key": "policy-generation",
     "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}/policy-generation/${PolicyGenerationId}"
+  },
+  "registry": {
+    "key": "registry",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/${RegistryId}"
+  },
+  "registry-record": {
+    "key": "registry-record",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/${RegistryId}/record/${RecordId}"
   }
 }

package/data/resourceTypes/ecs.json

@@ -1,4 +1,12 @@
 {
+  "capacity-provider": {
+    "key": "capacity-provider",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:capacity-provider/${CapacityProviderName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:ResourceTag/${TagKey}"
+    ]
+  },
   "cluster": {
     "key": "cluster",
     "arn": "arn:${Partition}:ecs:${Region}:${Account}:cluster/${ClusterName}",
@@ -15,32 +23,6 @@
       "ecs:ResourceTag/${TagKey}"
     ]
   },
-  "service": {
-    "key": "service",
-    "arn": "arn:${Partition}:ecs:${Region}:${Account}:service/${ClusterName}/${ServiceName}",
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "ecs:ResourceTag/${TagKey}"
-    ]
-  },
-  "service-deployment": {
-    "key": "service-deployment",
-    "arn": "arn:${Partition}:ecs:${Region}:${Account}:service-deployment/${ClusterName}/${ServiceName}/${ServiceDeploymentId}",
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "ecs:cluster",
-      "ecs:service"
-    ]
-  },
-  "service-revision": {
-    "key": "service-revision",
-    "arn": "arn:${Partition}:ecs:${Region}:${Account}:service-revision/${ClusterName}/${ServiceName}/${ServiceRevisionId}",
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "ecs:cluster",
-      "ecs:service"
-    ]
-  },
   "daemon": {
     "key": "daemon",
     "arn": "arn:${Partition}:ecs:${Region}:${Account}:daemon/${ClusterName}/${DaemonName}",
@@ -74,6 +56,32 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "service": {
+    "key": "service",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:service/${ClusterName}/${ServiceName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:ResourceTag/${TagKey}"
+    ]
+  },
+  "service-deployment": {
+    "key": "service-deployment",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:service-deployment/${ClusterName}/${ServiceName}/${ServiceDeploymentId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster",
+      "ecs:service"
+    ]
+  },
+  "service-revision": {
+    "key": "service-revision",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:service-revision/${ClusterName}/${ServiceName}/${ServiceRevisionId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster",
+      "ecs:service"
+    ]
+  },
   "task": {
     "key": "task",
     "arn": "arn:${Partition}:ecs:${Region}:${Account}:task/${ClusterName}/${TaskId}",
@@ -90,14 +98,6 @@
       "ecs:ResourceTag/${TagKey}"
     ]
   },
-  "capacity-provider": {
-    "key": "capacity-provider",
-    "arn": "arn:${Partition}:ecs:${Region}:${Account}:capacity-provider/${CapacityProviderName}",
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "ecs:ResourceTag/${TagKey}"
-    ]
-  },
   "task-set": {
     "key": "task-set",
     "arn": "arn:${Partition}:ecs:${Region}:${Account}:task-set/${ClusterName}/${ServiceName}/${TaskSetId}",

package/data/resourceTypes/omics.json

@@ -48,6 +48,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "runbatch": {
+    "key": "runBatch",
+    "arn": "arn:${Partition}:omics:${Region}:${Account}:runBatch/${BatchId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "runcache": {
     "key": "runCache",
     "arn": "arn:${Partition}:omics:${Region}:${Account}:runCache/${Id}",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.18.202604081",
+  "version": "0.18.202604111",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-04-08T05:21:59.510Z",
+  "updatedAt": "2026-04-11T05:13:18.156Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",