@cloud-copilot/iam-data 0.19.202604241 → 0.19.202604281

package/data/actions/aidevops.json

@@ -108,6 +108,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createprivateconnection": {
+    "name": "CreatePrivateConnection",
+    "description": "Grants permission to create a private connection",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "private-connection",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "deleteagentspace": {
     "name": "DeleteAgentSpace",
     "description": "Grants permission to delete agentspace",
@@ -140,6 +159,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteprivateconnection": {
+    "name": "DeletePrivateConnection",
+    "description": "Grants permission to delete a private connection",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "private-connection",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deregisterservice": {
     "name": "DeregisterService",
     "description": "Grants permission to deregister a service",
@@ -157,6 +193,23 @@
     ],
     "dependentActions": []
   },
+  "describeprivateconnection": {
+    "name": "DescribePrivateConnection",
+    "description": "Grants permission to describe a private connection",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "private-connection",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "describesupportlevel": {
     "name": "DescribeSupportLevel",
     "description": "Grants permission to describe a chat for a case",
@@ -534,6 +587,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listprivateconnections": {
+    "name": "ListPrivateConnections",
+    "description": "Grants permission to list private connections",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listrecommendations": {
     "name": "ListRecommendations",
     "description": "Grants permission to list recommendations",
@@ -572,6 +633,16 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "private-connection",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "service",
         "required": false,
@@ -666,6 +737,16 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "private-connection",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "service",
         "required": false,
@@ -698,6 +779,15 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "private-connection",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "service",
         "required": false,
@@ -812,6 +902,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateprivateconnectioncertificate": {
+    "name": "UpdatePrivateConnectionCertificate",
+    "description": "Grants permission to update a private connection certificate",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "private-connection",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "updaterecommendation": {
     "name": "UpdateRecommendation",
     "description": "Grants permission to update a recommendation",

package/data/actions/aws-marketplace.json

@@ -375,7 +375,7 @@
   },
   "listprivatelistings": {
     "name": "ListPrivateListings",
-    "description": "Grants permission to users to list their private offers",
+    "description": "Grants permission to list private offers",
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -387,7 +387,7 @@
     "accessLevel": "List",
     "resourceTypes": [
       {
-        "name": "PurchaseOption",
+        "name": "AllPurchaseOptions",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -398,11 +398,11 @@
   },
   "searchfacets": {
     "name": "SearchFacets",
-    "description": "Grants permission to retrieve facet values for filtering listings",
+    "description": "Grants permission to search for facet values to filter listings",
     "accessLevel": "List",
     "resourceTypes": [
       {
-        "name": "Listing",
+        "name": "AllListings",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -417,7 +417,7 @@
     "accessLevel": "List",
     "resourceTypes": [
       {
-        "name": "Listing",
+        "name": "AllListings",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []

package/data/actions/kms.json

@@ -365,6 +365,7 @@
     ],
     "conditionKeys": [
       "kms:CallerAccount",
+      "kms:TrailingDaysWithoutKeyUsage",
       "kms:ViaService"
     ],
     "dependentActions": []
@@ -746,6 +747,24 @@
     ],
     "dependentActions": []
   },
+  "getkeylastusage": {
+    "name": "GetKeyLastUsage",
+    "description": "Controls permission to view the last usage of an AWS KMS key",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "key",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "kms:CallerAccount",
+      "kms:ViaService"
+    ],
+    "dependentActions": []
+  },
   "getkeypolicy": {
     "name": "GetKeyPolicy",
     "description": "Controls permission to view the key policy for the specified AWS KMS key",
@@ -1100,6 +1119,7 @@
     "conditionKeys": [
       "kms:CallerAccount",
       "kms:ScheduleKeyDeletionPendingWindowInDays",
+      "kms:TrailingDaysWithoutKeyUsage",
       "kms:ViaService"
     ],
     "dependentActions": []

package/data/actions/securityagent.json

@@ -14,6 +14,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "batchdeletecodereviews": {
+    "name": "BatchDeleteCodeReviews",
+    "description": "Grants permission to delete multiple code reviews in a single request",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "batchdeletepentests": {
     "name": "BatchDeletePentests",
     "description": "Grants permission to delete multiple penetration tests in a single request",
@@ -63,6 +80,57 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "batchgetcodereviewjobtasks": {
+    "name": "BatchGetCodeReviewJobTasks",
+    "description": "Grants permission to retrieve multiple code review job tasks in a single request",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "batchgetcodereviewjobs": {
+    "name": "BatchGetCodeReviewJobs",
+    "description": "Grants permission to retrieve multiple code review jobs in a single request",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "batchgetcodereviews": {
+    "name": "BatchGetCodeReviews",
+    "description": "Grants permission to retrieve multiple code reviews in a single request",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "batchgetfindings": {
     "name": "BatchGetFindings",
     "description": "Grants permission to retrieve multiple security testing findings in a single request",
@@ -193,6 +261,23 @@
       "sso:CreateApplication"
     ]
   },
+  "createcodereview": {
+    "name": "CreateCodeReview",
+    "description": "Grants permission to create a new code review configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "createdesignreview": {
     "name": "CreateDesignReview",
     "description": "Grants permission to create a design review",
@@ -555,6 +640,57 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcodereviewjobtasks": {
+    "name": "ListCodeReviewJobTasks",
+    "description": "Grants permission to list tasks associated with a code review job",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "listcodereviewjobsforcodereview": {
+    "name": "ListCodeReviewJobsForCodeReview",
+    "description": "Grants permission to list code review jobs associated with a code review",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
+  "listcodereviews": {
+    "name": "ListCodeReviews",
+    "description": "Grants permission to list code reviews with optional filtering by status",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "listdesignreviewcomments": {
     "name": "ListDesignReviewComments",
     "description": "Grants permission to list design review comments",
@@ -818,6 +954,24 @@
       "kms:GenerateDataKey"
     ]
   },
+  "startcodereviewjob": {
+    "name": "StartCodeReviewJob",
+    "description": "Grants permission to initiate the execution of a code review",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt",
+      "kms:GenerateDataKey"
+    ]
+  },
   "startpentestjob": {
     "name": "StartPentestJob",
     "description": "Grants permission to initiate the execution of a penetration test",
@@ -836,6 +990,23 @@
       "kms:GenerateDataKey"
     ]
   },
+  "stopcodereviewjob": {
+    "name": "StopCodeReviewJob",
+    "description": "Grants permission to stop the execution of a running code review",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "stoppentestjob": {
     "name": "StopPentestJob",
     "description": "Grants permission to stop the execution of a running penetration test",
@@ -986,6 +1157,23 @@
       "kms:DescribeKey"
     ]
   },
+  "updatecodereview": {
+    "name": "UpdateCodeReview",
+    "description": "Grants permission to update an existing code review with new configuration or settings",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "kms:Decrypt"
+    ]
+  },
   "updatefinding": {
     "name": "UpdateFinding",
     "description": "Grants permission to update an existing security finding with new details or status",

package/data/actions/trustedadvisor.json

@@ -7,30 +7,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createengagement": {
-    "name": "CreateEngagement",
-    "description": "Grants permission to create an engagement",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "createengagementattachment": {
-    "name": "CreateEngagementAttachment",
-    "description": "Grants permission to create an engagement attachment",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "createengagementcommunication": {
-    "name": "CreateEngagementCommunication",
-    "description": "Grants permission to create an engagement communication",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deletenotificationconfigurationfordelegatedadmin": {
     "name": "DeleteNotificationConfigurationForDelegatedAdmin",
     "description": "Grants permission to the organization management account to delete email notification preferences from a delegated administrator account for Trusted Advisor Priority",
@@ -236,30 +212,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getengagement": {
-    "name": "GetEngagement",
-    "description": "Grants permission to view an engagment",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getengagementattachment": {
-    "name": "GetEngagementAttachment",
-    "description": "Grants permission to view an engagment attachment",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getengagementtype": {
-    "name": "GetEngagementType",
-    "description": "Grants permission to view a specific engagement type",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getorganizationrecommendation": {
     "name": "GetOrganizationRecommendation",
     "description": "Grants permission to get a specific recommendation within an AWS Organization's organization. This API supports only prioritized recommendations",
@@ -309,30 +261,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listengagementcommunications": {
-    "name": "ListEngagementCommunications",
-    "description": "Grants permission to view all communications for an engagement",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listengagementtypes": {
-    "name": "ListEngagementTypes",
-    "description": "Grants permission to view all engagement types",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listengagements": {
-    "name": "ListEngagements",
-    "description": "Grants permission to view all engagements",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listorganizationrecommendationaccounts": {
     "name": "ListOrganizationRecommendationAccounts",
     "description": "Grants permission to list the accounts that own the resources for an AWS Organization aggregate recommendation. This API only supports prioritized recommendations",
@@ -424,22 +352,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updateengagement": {
-    "name": "UpdateEngagement",
-    "description": "Grants permission to update the details of an engagement",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "updateengagementstatus": {
-    "name": "UpdateEngagementStatus",
-    "description": "Grants permission to update the status of an engagement",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "updatenotificationconfigurations": {
     "name": "UpdateNotificationConfigurations",
     "description": "Grants permission to create or update your email notification preferences for Trusted Advisor Priority",

package/data/conditionKeys/kms.json

@@ -449,6 +449,11 @@
     "description": "Filters access to the Sign and Verify operations based on the signing algorithm in the request",
     "type": "String"
   },
+  "kms:trailingdayswithoutkeyusage": {
+    "key": "kms:TrailingDaysWithoutKeyUsage",
+    "description": "Filters access to the ScheduleKeyDeletion and DisableKey operations based on the number of days since the AWS KMS key was last used",
+    "type": "Numeric"
+  },
   "kms:validto": {
     "key": "kms:ValidTo",
     "description": "Filters access to the ImportKeyMaterial operation based on the value of the ValidTo parameter in the request. You can use this condition key to allow users to import key material only when it expires by the specified date",

package/data/resourceTypes/aidevops.json

@@ -10,6 +10,13 @@
     "key": "associations",
     "arn": "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/${AgentSpaceId}/associations/${AssociationId}"
   },
+  "private-connection": {
+    "key": "private-connection",
+    "arn": "arn:${Partition}:aidevops:${Region}:${Account}:private-connection/${Name}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "service": {
     "key": "service",
     "arn": "arn:${Partition}:aidevops:${Region}:${Account}:service/${ServiceId}",

package/data/resourceTypes/aws-marketplace.json

@@ -43,6 +43,10 @@
     "key": "Listing",
     "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/listing/${ListingId}"
   },
+  "alllistings": {
+    "key": "AllListings",
+    "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/listing/*"
+  },
   "offer": {
     "key": "Offer",
     "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/offer/${OfferId}"
@@ -55,6 +59,10 @@
     "key": "PurchaseOption",
     "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/purchaseOption/${PurchaseOptionId}"
   },
+  "allpurchaseoptions": {
+    "key": "AllPurchaseOptions",
+    "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/purchaseOption/*"
+  },
   "dashboard": {
     "key": "Dashboard",
     "arn": "arn:${Partition}:aws-marketplace::${Account}:${Catalog}/ReportingData/${FactTable}/Dashboard/${DashboardName}"

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.19.202604241",
+  "version": "0.19.202604281",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-04-24T05:30:18.387Z",
+  "updatedAt": "2026-04-28T05:44:28.467Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",