@cloud-copilot/iam-data 0.19.202604181 → 0.19.202604221

package/data/actions/aws-marketplace.json

@@ -74,6 +74,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getinvoicesubmissiontask": {
+    "name": "GetInvoiceSubmissionTask",
+    "description": "Grants permission to retrieve details of an existing invoice submission task",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "InvoiceSubmissionTask",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getresourcepolicy": {
     "name": "GetResourcePolicy",
     "description": "Grants permission to get the resource policy of an existing entity",
@@ -113,6 +128,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listinvoicesubmissiontasks": {
+    "name": "ListInvoiceSubmissionTasks",
+    "description": "Grants permission to list existing invoice submission tasks",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listpayables": {
+    "name": "ListPayables",
+    "description": "Grants permission to list payables of the specified payable provenance",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list tags for a deployment parameter resource",
@@ -165,6 +196,24 @@
     ],
     "dependentActions": []
   },
+  "startinvoicesubmissiontask": {
+    "name": "StartInvoiceSubmissionTask",
+    "description": "Grants permission to initiate tasks that submit invoices for processing in AWS Marketplace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "InvoiceSubmissionTask",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a deployment parameter resource",

package/data/actions/cases.json

@@ -868,6 +868,33 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updaterelateditem": {
+    "name": "UpdateRelatedItem",
+    "description": "Grants permission to update a related item associated to a case in the case domain",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Case",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "RelatedItem",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatetemplate": {
     "name": "UpdateTemplate",
     "description": "Grants permission to update the template in the case domain",

package/data/actions/datazone.json

@@ -111,6 +111,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "cancelmessage": {
+    "name": "CancelMessage",
+    "description": "Grants permission to cancel an in-progress agent response",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "cancelmetadatagenerationrun": {
     "name": "CancelMetadataGenerationRun",
     "description": "Grants permission to cancel metadata generation run",

package/data/actions/evs.json

@@ -17,6 +17,21 @@
       "ec2:DescribeAddresses"
     ]
   },
+  "createentitlement": {
+    "name": "CreateEntitlement",
+    "description": "Grants permission to create an entitlement in an Amazon EVS environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "environment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createenvironment": {
     "name": "CreateEnvironment",
     "description": "Grants permission to create an Amazon EVS environment",
@@ -71,6 +86,21 @@
       "support:DescribeSupportLevel"
     ]
   },
+  "createenvironmentconnector": {
+    "name": "CreateEnvironmentConnector",
+    "description": "Grants permission to create a connector in an Amazon EVS environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "environment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createenvironmenthost": {
     "name": "CreateEnvironmentHost",
     "description": "Grants permission to add host to an Amazon EVS environment",
@@ -111,6 +141,21 @@
       "servicequotas:ListServiceQuotas"
     ]
   },
+  "deleteentitlement": {
+    "name": "DeleteEntitlement",
+    "description": "Grants permission to delete an entitlement from an Amazon EVS environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "environment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteenvironment": {
     "name": "DeleteEnvironment",
     "description": "Grants permission to delete an Amazon EVS environment",
@@ -138,6 +183,21 @@
       "secretsmanager:GetSecretValue"
     ]
   },
+  "deleteenvironmentconnector": {
+    "name": "DeleteEnvironmentConnector",
+    "description": "Grants permission to delete a connector from an Amazon EVS environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "environment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteenvironmenthost": {
     "name": "DeleteEnvironmentHost",
     "description": "Grants permission to delete a host from an Amazon EVS environment",
@@ -203,6 +263,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listenvironmentconnectors": {
+    "name": "ListEnvironmentConnectors",
+    "description": "Grants permission to retrieve a list of connectors associated with an Amazon EVS environment",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "environment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listenvironmenthosts": {
     "name": "ListEnvironmentHosts",
     "description": "Grants permission to retrieve a list of hosts associated with an Amazon EVS environment",
@@ -256,6 +331,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listvmentitlements": {
+    "name": "ListVmEntitlements",
+    "description": "Grants permission to retrieve a list of entitlements associated with an Amazon EVS environment",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "environment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a specified resource ARN",
@@ -292,5 +382,20 @@
       "aws:TagKeys"
     ],
     "dependentActions": []
+  },
+  "updateenvironmentconnector": {
+    "name": "UpdateEnvironmentConnector",
+    "description": "Grants permission to update a connector in an Amazon EVS environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "environment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

package/data/actions/geo.json

@@ -710,6 +710,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "map",
         "required": false,
@@ -847,6 +853,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "map",
         "required": false,
@@ -895,6 +907,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "map",
         "required": false,

package/data/actions/partnercentral.json

@@ -1339,7 +1339,9 @@
     "description": "Grants permission to put selling system settings in AWS Partner Central",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
     "dependentActions": []
   },
   "recallbenefitapplication": {

package/data/actions/s3express.json

@@ -313,6 +313,27 @@
     ],
     "dependentActions": []
   },
+  "getinventoryconfiguration": {
+    "name": "GetInventoryConfiguration",
+    "description": "Grants permission to return an inventory configuration identified by the inventory configuration ID for a S3 directory bucket",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "getlifecycleconfiguration": {
     "name": "GetLifecycleConfiguration",
     "description": "Grants permission to return the lifecycle configuration information set on a directory bucket",
@@ -500,6 +521,28 @@
     ],
     "dependentActions": []
   },
+  "putinventoryconfiguration": {
+    "name": "PutInventoryConfiguration",
+    "description": "Grants permission to add an inventory configuration to the bucket, identified by the inventory ID",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256",
+      "s3express:InventoryAccessibleOptionalFields"
+    ],
+    "dependentActions": []
+  },
   "putlifecycleconfiguration": {
     "name": "PutLifecycleConfiguration",
     "description": "Grants permission to create a new lifecycle configuration for the directory bucket or replace an existing lifecycle configuration",

package/data/actions/sagemaker.json

@@ -49,6 +49,24 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "ai-benchmark-job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ai-recommendation-job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ai-workload-config",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "algorithm",
         "required": false,
@@ -583,6 +601,60 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createaibenchmarkjob": {
+    "name": "CreateAIBenchmarkJob",
+    "description": "Grants permission to create an AI benchmark job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ai-benchmark-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createairecommendationjob": {
+    "name": "CreateAIRecommendationJob",
+    "description": "Grants permission to create an AI recommendation job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ai-recommendation-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createaiworkloadconfig": {
+    "name": "CreateAIWorkloadConfig",
+    "description": "Grants permission to create an AI workload configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ai-workload-config",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createaction": {
     "name": "CreateAction",
     "description": "Grants permission to create an action",
@@ -1733,6 +1805,7 @@
       "sagemaker:DirectInternetAccess",
       "sagemaker:InstanceTypes",
       "sagemaker:MinimumInstanceMetadataServiceVersion",
+      "sagemaker:NotebookInstanceLifecycleConfigArns",
       "sagemaker:RootAccess",
       "sagemaker:VolumeKmsKey",
       "sagemaker:VpcSecurityGroupIds",
@@ -2239,6 +2312,51 @@
     ],
     "dependentActions": []
   },
+  "deleteaibenchmarkjob": {
+    "name": "DeleteAIBenchmarkJob",
+    "description": "Grants permission to delete an AI benchmark job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ai-benchmark-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteairecommendationjob": {
+    "name": "DeleteAIRecommendationJob",
+    "description": "Grants permission to delete an AI recommendation job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ai-recommendation-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteaiworkloadconfig": {
+    "name": "DeleteAIWorkloadConfig",
+    "description": "Grants permission to delete an AI workload configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ai-workload-config",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteaction": {
     "name": "DeleteAction",
     "description": "Grants permission to delete an action",
@@ -3115,6 +3233,24 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "ai-benchmark-job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ai-recommendation-job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ai-workload-config",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "algorithm",
         "required": false,
@@ -3593,6 +3729,51 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeaibenchmarkjob": {
+    "name": "DescribeAIBenchmarkJob",
+    "description": "Grants permission to describe an AI benchmark job",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ai-benchmark-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeairecommendationjob": {
+    "name": "DescribeAIRecommendationJob",
+    "description": "Grants permission to describe an AI recommendation job",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ai-recommendation-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeaiworkloadconfig": {
+    "name": "DescribeAIWorkloadConfig",
+    "description": "Grants permission to describe an AI workload configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ai-workload-config",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeaction": {
     "name": "DescribeAction",
     "description": "Grants permission to get information about an action",
@@ -4968,6 +5149,30 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listaibenchmarkjobs": {
+    "name": "ListAIBenchmarkJobs",
+    "description": "Grants permission to list AI benchmark jobs",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listairecommendationjobs": {
+    "name": "ListAIRecommendationJobs",
+    "description": "Grants permission to list AI recommendation jobs",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listaiworkloadconfigs": {
+    "name": "ListAIWorkloadConfigs",
+    "description": "Grants permission to list AI workload configurations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listactions": {
     "name": "ListActions",
     "description": "Grants permission to list actions",
@@ -5723,6 +5928,24 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "ai-benchmark-job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ai-recommendation-job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ai-workload-config",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "algorithm",
         "required": false,
@@ -6490,6 +6713,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "stopaibenchmarkjob": {
+    "name": "StopAIBenchmarkJob",
+    "description": "Grants permission to stop an AI benchmark job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ai-benchmark-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopairecommendationjob": {
+    "name": "StopAIRecommendationJob",
+    "description": "Grants permission to stop an AI recommendation job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ai-recommendation-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "stopautomljob": {
     "name": "StopAutoMLJob",
     "description": "Grants permission to stop a running AutoML job",
@@ -7368,6 +7621,7 @@
       "sagemaker:AcceleratorTypes",
       "sagemaker:InstanceTypes",
       "sagemaker:MinimumInstanceMetadataServiceVersion",
+      "sagemaker:NotebookInstanceLifecycleConfigArns",
       "sagemaker:RootAccess"
     ],
     "dependentActions": []

package/data/actions/ses.json

@@ -1664,7 +1664,9 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}"
         ],
-        "dependentActions": []
+        "dependentActions": [
+          "iam:CreateServiceLinkedRole"
+        ]
       }
     ],
     "conditionKeys": [

package/data/conditionKeys/cases.json

@@ -14,6 +14,16 @@
     "description": "Filters access by tag keys that are passed in the request",
     "type": "ArrayOfString"
   },
+  "cases:createdby": {
+    "key": "cases:CreatedBy",
+    "description": "Filters access by who created the the resource (user ARN or custom entity)",
+    "type": "String"
+  },
+  "cases:relateditemtype": {
+    "key": "cases:RelatedItemType",
+    "description": "Filters access by the type of related item. Possible values: Contact, Comment, File, Sla, ConnectCase, Custom",
+    "type": "String"
+  },
   "connect:userarn": {
     "key": "connect:UserArn",
     "description": "Filters access by connect's UserArn",

package/data/conditionKeys/s3express.json

@@ -44,6 +44,11 @@
     "description": "Filters access by an access point Amazon Resource Name (ARN)",
     "type": "ARN"
   },
+  "s3express:inventoryaccessibleoptionalfields": {
+    "key": "s3express:InventoryAccessibleOptionalFields",
+    "description": "Filters access by restricting which optional metadata fields a user can add when configuring S3 Inventory reports",
+    "type": "ArrayOfString"
+  },
   "s3express:locationname": {
     "key": "s3express:LocationName",
     "description": "Filters access by a specific Availability Zone or Local Zone ID",

package/data/conditionKeys/sagemaker.json

@@ -189,6 +189,11 @@
     "description": "Filters access by the network isolation associated with the resource in the request",
     "type": "Bool"
   },
+  "sagemaker:notebookinstancelifecycleconfigarns": {
+    "key": "sagemaker:NotebookInstanceLifecycleConfigArns",
+    "description": "Filters access by the list of notebook instance lifecycle configuration ARNs associated with the resource in the request",
+    "type": "ArrayOfARN"
+  },
   "sagemaker:outputkmskey": {
     "key": "sagemaker:OutputKmsKey",
     "description": "Filters access by the output kms key associated with the resource in the request",

package/data/resourceTypes/aws-marketplace.json

@@ -19,6 +19,13 @@
     "key": "Assessment",
     "arn": "arn:${Partition}:aws-marketplace:${Region}::${Catalog}/Assessment/${ResourceId}"
   },
+  "invoicesubmissiontask": {
+    "key": "InvoiceSubmissionTask",
+    "arn": "arn:${Partition}:aws-marketplace:${Region}:${Account}:catalog/${Catalog}/invoice-submission-task/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "deploymentparameter": {
     "key": "DeploymentParameter",
     "arn": "arn:${Partition}:aws-marketplace:${Region}:${Account}:DeploymentParameter:catalogs/${CatalogName}/products/${ProductId}/${ResourceId}",

package/data/resourceTypes/cases.json

@@ -31,7 +31,9 @@
     "key": "RelatedItem",
     "arn": "arn:${Partition}:cases:${Region}:${Account}:domain/${DomainId}/case/${CaseId}/related-item/${RelatedItemId}",
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "cases:CreatedBy",
+      "cases:RelatedItemType"
     ]
   },
   "template": {

package/data/resourceTypes/geo.json

@@ -42,5 +42,12 @@
       "aws:ResourceTag/${TagKey}",
       "geo:DeviceIds"
     ]
+  },
+  "job": {
+    "key": "job",
+    "arn": "arn:${Partition}:geo:${Region}:${Account}:job/${JobId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/sagemaker.json

@@ -529,5 +529,29 @@
       "aws:ResourceTag/${TagKey}",
       "sagemaker:ResourceTag/${TagKey}"
     ]
+  },
+  "ai-workload-config": {
+    "key": "ai-workload-config",
+    "arn": "arn:${Partition}:sagemaker:${Region}:${Account}:ai-workload-config/${AIWorkloadConfigName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "sagemaker:ResourceTag/${TagKey}"
+    ]
+  },
+  "ai-benchmark-job": {
+    "key": "ai-benchmark-job",
+    "arn": "arn:${Partition}:sagemaker:${Region}:${Account}:ai-benchmark-job/${AIBenchmarkJobName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "sagemaker:ResourceTag/${TagKey}"
+    ]
+  },
+  "ai-recommendation-job": {
+    "key": "ai-recommendation-job",
+    "arn": "arn:${Partition}:sagemaker:${Region}:${Account}:ai-recommendation-job/${AIRecommendationJobName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "sagemaker:ResourceTag/${TagKey}"
+    ]
   }
 }

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.19.202604181",
+  "version": "0.19.202604221",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-04-18T05:19:32.284Z",
+  "updatedAt": "2026-04-22T05:28:53.812Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",