@cloud-copilot/iam-data 0.19.202604231 → 0.19.202604261

package/data/actions/aws-marketplace.json

@@ -588,7 +588,7 @@
   },
   "acceptagreementapprovalrequest": {
     "name": "AcceptAgreementApprovalRequest",
-    "description": "Grants permission to users to approve an incoming subscription request (for providers who provide products that require subscription verification)",
+    "description": "Grants permission to approve an incoming subscription request (for providers who provide products that require subscription verification)",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -596,63 +596,83 @@
   },
   "acceptagreementcancellationrequest": {
     "name": "AcceptAgreementCancellationRequest",
-    "description": "Grants permission to users to accept an agreement cancellation request",
+    "description": "Grants permission to accept an agreement cancellation request",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:PartyType",
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "acceptagreementpaymentrequest": {
     "name": "AcceptAgreementPaymentRequest",
-    "description": "Grants permission to users to accept a payment request",
+    "description": "Grants permission to accept a payment request",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:PartyType",
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "acceptagreementrequest": {
     "name": "AcceptAgreementRequest",
-    "description": "Grants permission to users to accept their agreement requests",
+    "description": "Grants permission to accept an agreement request",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:ProductId"
+    ],
     "dependentActions": []
   },
   "batchcreatebillingadjustmentrequest": {
     "name": "BatchCreateBillingAdjustmentRequest",
-    "description": "Grants permission to users to create a billing adjustment request against an agreement",
+    "description": "Grants permission to create a billing adjustment request against an agreement",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:PartyType",
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "cancelagreement": {
     "name": "CancelAgreement",
-    "description": "Grants permission to users to cancel their agreements",
+    "description": "Grants permission to cancel agreements",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "cancelagreementcancellationrequest": {
     "name": "CancelAgreementCancellationRequest",
-    "description": "Grants permission to users to withdraw a pending agreement cancellation request",
+    "description": "Grants permission to cancel a pending agreement cancellation request",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:PartyType",
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "cancelagreementpaymentrequest": {
     "name": "CancelAgreementPaymentRequest",
-    "description": "Grants permission to users to cancel a payment request",
+    "description": "Grants permission to cancel a payment request",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:PartyType",
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "cancelagreementrequest": {
     "name": "CancelAgreementRequest",
-    "description": "Grants permission to users to cancel pending subscription requests for products that require subscription verification",
+    "description": "Grants permission to cancel pending subscription requests for products that require subscription verification",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -660,23 +680,29 @@
   },
   "createagreementrequest": {
     "name": "CreateAgreementRequest",
-    "description": "Grants permission to users to create an agreement request",
+    "description": "Grants permission to create an agreement request",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:AgreementType",
+      "aws-marketplace:ProductId"
+    ],
     "dependentActions": []
   },
   "describeagreement": {
     "name": "DescribeAgreement",
-    "description": "Grants permission to users to describe the metadata about the agreement",
+    "description": "Grants permission to describe the metadata about the agreement",
     "accessLevel": "Read",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:PartyType",
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "getagreementapprovalrequest": {
     "name": "GetAgreementApprovalRequest",
-    "description": "Grants permission to users to view the details of their incoming subscription requests (for providers who provide products that require subscription verification)",
+    "description": "Grants permission to view the details of incoming subscription requests (for providers who provide products that require subscription verification)",
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -684,31 +710,39 @@
   },
   "getagreementcancellationrequest": {
     "name": "GetAgreementCancellationRequest",
-    "description": "Grants permission to users to view the details of an agreement cancellation request",
+    "description": "Grants permission to view the details of an agreement cancellation request",
     "accessLevel": "Read",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:PartyType",
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "getagreemententitlements": {
     "name": "GetAgreementEntitlements",
-    "description": "Grants permission to users to view the entitlements associated with an agreement",
+    "description": "Grants permission to get the entitlements associated with an agreement",
     "accessLevel": "Read",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "getagreementpaymentrequest": {
     "name": "GetAgreementPaymentRequest",
-    "description": "Grants permission to users to view details for a payment request",
+    "description": "Grants permission to view details for a payment request",
     "accessLevel": "Read",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:PartyType",
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "getagreementrequest": {
     "name": "GetAgreementRequest",
-    "description": "Grants permission to users to view the details of their subscription requests for data products that require subscription verification",
+    "description": "Grants permission to view the details of subscription requests for data products that require subscription verification",
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -716,23 +750,29 @@
   },
   "getagreementterms": {
     "name": "GetAgreementTerms",
-    "description": "Grants permission to users to get a list of terms for an agreement",
+    "description": "Grants permission to get a list of terms for an agreement",
     "accessLevel": "List",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:PartyType",
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "getbillingadjustmentrequest": {
     "name": "GetBillingAdjustmentRequest",
-    "description": "Grants permission to users to view the details of a billing adjustment request",
+    "description": "Grants permission to view the details of a billing adjustment request",
     "accessLevel": "Read",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:PartyType",
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "listagreementapprovalrequests": {
     "name": "ListAgreementApprovalRequests",
-    "description": "Grants permission to users to list their incoming subscription requests (for providers who provide products that require subscription verification)",
+    "description": "Grants permission to list incoming subscription requests (for providers who provide products that require subscription verification)",
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -740,39 +780,50 @@
   },
   "listagreementcancellationrequests": {
     "name": "ListAgreementCancellationRequests",
-    "description": "Grants permission to users to list agreement cancellation requests",
+    "description": "Grants permission to list agreement cancellation requests",
     "accessLevel": "List",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:PartyType",
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "listagreementcharges": {
     "name": "ListAgreementCharges",
-    "description": "Grants permission to users to view charges associated with their agreements",
+    "description": "Grants permission to list charges associated with an agreement",
     "accessLevel": "List",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "listagreementinvoicelineitems": {
     "name": "ListAgreementInvoiceLineItems",
-    "description": "Grants permission to users to list invoice line items for an agreement",
+    "description": "Grants permission to list invoice line items for an agreement",
     "accessLevel": "List",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:PartyType",
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "listagreementpaymentrequests": {
     "name": "ListAgreementPaymentRequests",
-    "description": "Grants permission to users to list payment requests for an agreement",
+    "description": "Grants permission to list payment requests for an agreement",
     "accessLevel": "List",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:PartyType",
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "listagreementrequests": {
     "name": "ListAgreementRequests",
-    "description": "Grants permission to users to list their subscription requests for products that require subscription verification",
+    "description": "Grants permission to list subscription requests for products that require subscription verification",
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -780,15 +831,18 @@
   },
   "listbillingadjustmentrequests": {
     "name": "ListBillingAdjustmentRequests",
-    "description": "Grants permission to users to list billing adjustment requests",
+    "description": "Grants permission to list billing adjustment requests",
     "accessLevel": "List",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:PartyType",
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "listentitlementdetails": {
     "name": "ListEntitlementDetails",
-    "description": "Grants permission to users to view details of the entitlements associated with an agreement. Note that this action is not applicable to Marketplace purchases",
+    "description": "Grants permission to list details of the entitlements associated with an agreement. Note that this action is not applicable to Marketplace purchases",
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -796,7 +850,7 @@
   },
   "rejectagreementapprovalrequest": {
     "name": "RejectAgreementApprovalRequest",
-    "description": "Grants permission to users to decline an incoming subscription requests (for providers who provide products that require subscription verification)",
+    "description": "Grants permission to decline an incoming subscription requests (for providers who provide products that require subscription verification)",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -804,47 +858,62 @@
   },
   "rejectagreementcancellationrequest": {
     "name": "RejectAgreementCancellationRequest",
-    "description": "Grants permission to users to reject an agreement cancellation request",
+    "description": "Grants permission to reject an agreement cancellation request",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:PartyType",
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "rejectagreementpaymentrequest": {
     "name": "RejectAgreementPaymentRequest",
-    "description": "Grants permission to users to reject a payment request",
+    "description": "Grants permission to reject a payment request",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:PartyType",
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "searchagreements": {
     "name": "SearchAgreements",
-    "description": "Grants permission to users to search their agreements",
+    "description": "Grants permission to search agreements",
     "accessLevel": "List",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:PartyType",
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "sendagreementcancellationrequest": {
     "name": "SendAgreementCancellationRequest",
-    "description": "Grants permission to users to send an agreement cancellation request",
+    "description": "Grants permission to send an agreement cancellation request",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:PartyType",
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "sendagreementpaymentrequest": {
     "name": "SendAgreementPaymentRequest",
-    "description": "Grants permission to users to send payment request",
+    "description": "Grants permission to send a payment request",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:PartyType",
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "subscribe": {
     "name": "Subscribe",
-    "description": "Grants permission to users to subscribe to AWS Marketplace products. Includes the ability to send a subscription request for products that require subscription verification. Includes the ability to enable auto-renewal for an existing subscription",
+    "description": "Grants permission to subscribe to AWS Marketplace products. Includes the ability to send a subscription request for products that require subscription verification. Includes the ability to enable auto-renewal for an existing subscription",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -852,7 +921,7 @@
   },
   "unsubscribe": {
     "name": "Unsubscribe",
-    "description": "Grants permission to users to remove subscriptions to AWS Marketplace products. Includes the ability to disable auto-renewal for an existing subscription",
+    "description": "Grants permission to unsubscribe from AWS Marketplace products. Includes the ability to disable auto-renewal for an existing subscription",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -860,7 +929,7 @@
   },
   "updateagreementapprovalrequest": {
     "name": "UpdateAgreementApprovalRequest",
-    "description": "Grants permission to users to make changes to an incoming subscription request, including the ability to delete the prospective subscriber's information (for providers who provide products that require subscription verification)",
+    "description": "Grants permission to make changes to an incoming subscription request, including the ability to delete the prospective subscriber's information (for providers who provide products that require subscription verification)",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -868,15 +937,17 @@
   },
   "updatepurchaseorders": {
     "name": "UpdatePurchaseOrders",
-    "description": "Grants permission to users to update purchase orders for charges associated with their agreements",
+    "description": "Grants permission to update purchase orders for charges associated with an agreement",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws-marketplace:AgreementType"
+    ],
     "dependentActions": []
   },
   "viewsubscriptions": {
     "name": "ViewSubscriptions",
-    "description": "Grants permission to users to see their account's subscriptions",
+    "description": "Grants permission to view account's subscriptions",
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [],

package/data/actions/bedrock-agentcore.json

@@ -151,7 +151,8 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
       "bedrock-agentcore:subnets",
-      "bedrock-agentcore:securityGroups"
+      "bedrock-agentcore:securityGroups",
+      "bedrock-agentcore:RuntimeAuthorizerType"
     ],
     "dependentActions": [
       "iam:PassRole"
@@ -294,6 +295,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createharness": {
+    "name": "CreateHarness",
+    "description": "Grants permission to create a new harness",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": [
+      "bedrock-agentcore:CreateAgentRuntime",
+      "bedrock-agentcore:GetAgentRuntime",
+      "iam:PassRole"
+    ]
+  },
   "creatememory": {
     "name": "CreateMemory",
     "description": "Grants permission to create a Memory resource",
@@ -581,6 +597,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteharness": {
+    "name": "DeleteHarness",
+    "description": "Grants permission to delete a harness",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "harness",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "bedrock-agentcore:DeleteAgentRuntime",
+      "bedrock-agentcore:GetAgentRuntime",
+      "iam:PassRole"
+    ]
+  },
   "deletememory": {
     "name": "DeleteMemory",
     "description": "Grants permission to delete a Memory resource",
@@ -1004,6 +1039,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getharness": {
+    "name": "GetHarness",
+    "description": "Grants permission to get details of a harness",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "harness",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getmemory": {
     "name": "GetMemory",
     "description": "Grants permission to fetch details for a Memory resource",
@@ -1499,6 +1549,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "invokeharness": {
+    "name": "InvokeHarness",
+    "description": "Grants permission to invoke a harness",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "harness",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "bedrock-agentcore:InvokeAgentRuntime"
+    ]
+  },
   "invokeregistrymcp": {
     "name": "InvokeRegistryMcp",
     "description": "Grants permission to invoke an MCP operation against an existing registry",
@@ -1676,6 +1743,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listharnesses": {
+    "name": "ListHarnesses",
+    "description": "Grants permission to list harnesses",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listmemories": {
     "name": "ListMemories",
     "description": "Grants permission to list memory resources",
@@ -1886,6 +1961,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "harness",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "memory",
         "required": false,
@@ -2325,6 +2406,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "harness",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "memory",
         "required": false,
@@ -2421,6 +2508,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "harness",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "memory",
         "required": false,
@@ -2491,7 +2584,8 @@
     ],
     "conditionKeys": [
       "bedrock-agentcore:subnets",
-      "bedrock-agentcore:securityGroups"
+      "bedrock-agentcore:securityGroups",
+      "bedrock-agentcore:RuntimeAuthorizerType"
     ],
     "dependentActions": []
   },
@@ -2605,6 +2699,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateharness": {
+    "name": "UpdateHarness",
+    "description": "Grants permission to update a harness",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "harness",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "bedrock-agentcore:GetAgentRuntime",
+      "bedrock-agentcore:UpdateAgentRuntime",
+      "iam:PassRole"
+    ]
+  },
   "updatememory": {
     "name": "UpdateMemory",
     "description": "Grants permission to update a Memory resource",

package/data/actions/geo.json

@@ -144,6 +144,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "canceljob": {
+    "name": "CancelJob",
+    "description": "Grants permission to cancel a job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "creategeofencecollection": {
     "name": "CreateGeofenceCollection",
     "description": "Grants permission to create a geofence-collection",
@@ -513,6 +528,21 @@
     ],
     "dependentActions": []
   },
+  "getjob": {
+    "name": "GetJob",
+    "description": "Grants permission to retrieve job details",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getmapglyphs": {
     "name": "GetMapGlyphs",
     "description": "Grants permission to retrieve the glyph file for a map resource",
@@ -633,6 +663,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listjobs": {
+    "name": "ListJobs",
+    "description": "Grants permission to list jobs",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listkeys": {
     "name": "ListKeys",
     "description": "Grants permission to list API key resources",
@@ -836,6 +881,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startjob": {
+    "name": "StartJob",
+    "description": "Grants permission to start a job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to adds to or modifies the tags of the given resource. Tags are metadata which can be used to manage a resource",

package/data/actions/securityagent.json

@@ -14,6 +14,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "batchdeletecodereviews": {
+    "name": "BatchDeleteCodeReviews",
+    "description": "Grants permission to delete multiple code reviews in a single request",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "batchdeletepentests": {
     "name": "BatchDeletePentests",
     "description": "Grants permission to delete multiple penetration tests in a single request",
@@ -63,6 +80,57 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "batchgetcodereviewjobtasks": {
+    "name": "BatchGetCodeReviewJobTasks",
+    "description": "Grants permission to retrieve multiple code review job tasks in a single request",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "batchgetcodereviewjobs": {
+    "name": "BatchGetCodeReviewJobs",
+    "description": "Grants permission to retrieve multiple code review jobs in a single request",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "batchgetcodereviews": {
+    "name": "BatchGetCodeReviews",
+    "description": "Grants permission to retrieve multiple code reviews in a single request",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "batchgetfindings": {
     "name": "BatchGetFindings",
     "description": "Grants permission to retrieve multiple security testing findings in a single request",
@@ -193,6 +261,23 @@
       "sso:CreateApplication"
     ]
   },
+  "createcodereview": {
+    "name": "CreateCodeReview",
+    "description": "Grants permission to create a new code review configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "createdesignreview": {
     "name": "CreateDesignReview",
     "description": "Grants permission to create a design review",
@@ -555,6 +640,57 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcodereviewjobtasks": {
+    "name": "ListCodeReviewJobTasks",
+    "description": "Grants permission to list tasks associated with a code review job",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "listcodereviewjobsforcodereview": {
+    "name": "ListCodeReviewJobsForCodeReview",
+    "description": "Grants permission to list code review jobs associated with a code review",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "listcodereviews": {
+    "name": "ListCodeReviews",
+    "description": "Grants permission to list code reviews with optional filtering by status",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "listdesignreviewcomments": {
     "name": "ListDesignReviewComments",
     "description": "Grants permission to list design review comments",
@@ -818,6 +954,24 @@
       "kms:GenerateDataKey"
     ]
   },
+  "startcodereviewjob": {
+    "name": "StartCodeReviewJob",
+    "description": "Grants permission to initiate the execution of a code review",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt",
+      "kms:GenerateDataKey"
+    ]
+  },
   "startpentestjob": {
     "name": "StartPentestJob",
     "description": "Grants permission to initiate the execution of a penetration test",
@@ -836,6 +990,23 @@
       "kms:GenerateDataKey"
     ]
   },
+  "stopcodereviewjob": {
+    "name": "StopCodeReviewJob",
+    "description": "Grants permission to stop the execution of a running code review",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "stoppentestjob": {
     "name": "StopPentestJob",
     "description": "Grants permission to stop the execution of a running penetration test",
@@ -986,6 +1157,23 @@
       "kms:DescribeKey"
     ]
   },
+  "updatecodereview": {
+    "name": "UpdateCodeReview",
+    "description": "Grants permission to update an existing code review with new configuration or settings",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "updatefinding": {
     "name": "UpdateFinding",
     "description": "Grants permission to update an existing security finding with new details or status",

package/data/conditionKeys/aws-marketplace.json

@@ -36,7 +36,7 @@
   },
   "aws-marketplace:productid": {
     "key": "aws-marketplace:ProductId",
-    "description": "Filters access by product id for AWS Marketplace RedHat OpenShift and Bedrock Products. Note: Using this condition key will not restrict access to products in AWS Marketplace",
+    "description": "Filters access by product id for AWS Marketplace purchases",
     "type": "ArrayOfString"
   }
 }

package/data/conditionKeys/bedrock-agentcore.json

@@ -49,6 +49,11 @@
     "description": "Filters access by KMS Key arn provided",
     "type": "String"
   },
+  "bedrock-agentcore:runtimeauthorizertype": {
+    "key": "bedrock-agentcore:RuntimeAuthorizerType",
+    "description": "Filters access by the authorizer type configured for the AgentCore runtime",
+    "type": "String"
+  },
   "bedrock-agentcore:actorid": {
     "key": "bedrock-agentcore:actorId",
     "description": "Filters access by Actor Id",

package/data/resourceTypes/bedrock-agentcore.json

@@ -124,5 +124,12 @@
   "registry-record": {
     "key": "registry-record",
     "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/${RegistryId}/record/${RecordId}"
+  },
+  "harness": {
+    "key": "harness",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:harness/${HarnessId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/kinesis.json

@@ -15,6 +15,9 @@
   },
   "kmskey": {
     "key": "kmsKey",
-    "arn": "arn:${Partition}:kms:${Region}:${Account}:key/${KeyId}"
+    "arn": "arn:${Partition}:kms:${Region}:${Account}:key/${KeyId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.19.202604231",
+  "version": "0.19.202604261",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-04-23T05:29:28.853Z",
+  "updatedAt": "2026-04-26T05:31:05.523Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",