@cloud-copilot/iam-data 0.19.202604261 → 0.19.202604301

package/data/actions/aidevops.json

@@ -108,6 +108,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createprivateconnection": {
+    "name": "CreatePrivateConnection",
+    "description": "Grants permission to create a private connection",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "private-connection",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "deleteagentspace": {
     "name": "DeleteAgentSpace",
     "description": "Grants permission to delete agentspace",
@@ -140,6 +159,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteprivateconnection": {
+    "name": "DeletePrivateConnection",
+    "description": "Grants permission to delete a private connection",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "private-connection",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deregisterservice": {
     "name": "DeregisterService",
     "description": "Grants permission to deregister a service",
@@ -157,6 +193,23 @@
     ],
     "dependentActions": []
   },
+  "describeprivateconnection": {
+    "name": "DescribePrivateConnection",
+    "description": "Grants permission to describe a private connection",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "private-connection",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "describesupportlevel": {
     "name": "DescribeSupportLevel",
     "description": "Grants permission to describe a chat for a case",
@@ -534,6 +587,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listprivateconnections": {
+    "name": "ListPrivateConnections",
+    "description": "Grants permission to list private connections",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listrecommendations": {
     "name": "ListRecommendations",
     "description": "Grants permission to list recommendations",
@@ -572,6 +633,16 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "private-connection",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "service",
         "required": false,
@@ -666,6 +737,16 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "private-connection",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "service",
         "required": false,
@@ -698,6 +779,15 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "private-connection",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "service",
         "required": false,
@@ -812,6 +902,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateprivateconnectioncertificate": {
+    "name": "UpdatePrivateConnectionCertificate",
+    "description": "Grants permission to update a private connection certificate",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "private-connection",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "updaterecommendation": {
     "name": "UpdateRecommendation",
     "description": "Grants permission to update a recommendation",

package/data/actions/aws-marketplace.json

@@ -375,7 +375,7 @@
   },
   "listprivatelistings": {
     "name": "ListPrivateListings",
-    "description": "Grants permission to users to list their private offers",
+    "description": "Grants permission to list private offers",
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -387,7 +387,7 @@
     "accessLevel": "List",
     "resourceTypes": [
       {
-        "name": "PurchaseOption",
+        "name": "AllPurchaseOptions",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -398,11 +398,11 @@
   },
   "searchfacets": {
     "name": "SearchFacets",
-    "description": "Grants permission to retrieve facet values for filtering listings",
+    "description": "Grants permission to search for facet values to filter listings",
     "accessLevel": "List",
     "resourceTypes": [
       {
-        "name": "Listing",
+        "name": "AllListings",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -417,7 +417,7 @@
     "accessLevel": "List",
     "resourceTypes": [
       {
-        "name": "Listing",
+        "name": "AllListings",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []

package/data/actions/gamelift.json

@@ -603,6 +603,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describecontainergroupportmappings": {
+    "name": "DescribeContainerGroupPortMappings",
+    "description": "Grants permission to retrieve container port mappings for a container fleet",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeec2instancelimits": {
     "name": "DescribeEC2InstanceLimits",
     "description": "Grants permission to retrieve the maximum allowed and current usage for EC2 instance types",

package/data/actions/kms.json

@@ -365,6 +365,7 @@
     ],
     "conditionKeys": [
       "kms:CallerAccount",
+      "kms:TrailingDaysWithoutKeyUsage",
       "kms:ViaService"
     ],
     "dependentActions": []
@@ -746,6 +747,24 @@
     ],
     "dependentActions": []
   },
+  "getkeylastusage": {
+    "name": "GetKeyLastUsage",
+    "description": "Controls permission to view the last usage of an AWS KMS key",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "key",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "kms:CallerAccount",
+      "kms:ViaService"
+    ],
+    "dependentActions": []
+  },
   "getkeypolicy": {
     "name": "GetKeyPolicy",
     "description": "Controls permission to view the key policy for the specified AWS KMS key",
@@ -1100,6 +1119,7 @@
     "conditionKeys": [
       "kms:CallerAccount",
       "kms:ScheduleKeyDeletionPendingWindowInDays",
+      "kms:TrailingDaysWithoutKeyUsage",
       "kms:ViaService"
     ],
     "dependentActions": []

package/data/actions/q.json

@@ -8,6 +8,95 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "associatelogindomain": {
+    "name": "AssociateLoginDomain",
+    "isPermissionOnly": true,
+    "description": "Grants permission to associate a login domain with an Amazon Q Developer Profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchdescribegroups": {
+    "name": "BatchDescribeGroups",
+    "isPermissionOnly": true,
+    "description": "Grants permission to describe multiple groups for an Amazon Q Developer Profile",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchdescribeusers": {
+    "name": "BatchDescribeUsers",
+    "isPermissionOnly": true,
+    "description": "Grants permission to describe multiple users for an Amazon Q Developer Profile",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchgetgroups": {
+    "name": "BatchGetGroups",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get multiple groups for an Amazon Q Developer Profile",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchgetusers": {
+    "name": "BatchGetUsers",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get multiple users for an Amazon Q Developer Profile",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createartifact": {
+    "name": "CreateArtifact",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create an artifact with Amazon Q",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createassignment": {
     "name": "CreateAssignment",
     "isPermissionOnly": true,
@@ -74,6 +163,22 @@
     ],
     "dependentActions": []
   },
+  "createscimaccesstoken": {
+    "name": "CreateScimAccessToken",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create a SCIM access token for an Amazon Q Developer Profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteassignment": {
     "name": "DeleteAssignment",
     "isPermissionOnly": true,
@@ -134,6 +239,38 @@
     ],
     "dependentActions": []
   },
+  "deletescimaccesstoken": {
+    "name": "DeleteScimAccessToken",
+    "isPermissionOnly": true,
+    "description": "Grants permission to delete a SCIM access token for an Amazon Q Developer Profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disassociatelogindomain": {
+    "name": "DisassociateLoginDomain",
+    "isPermissionOnly": true,
+    "description": "Grants permission to disassociate a login domain from an Amazon Q Developer Profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "generatecodefromcommands": {
     "name": "GenerateCodeFromCommands",
     "isPermissionOnly": true,
@@ -152,6 +289,28 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getartifact": {
+    "name": "GetArtifact",
+    "isPermissionOnly": true,
+    "description": "Grants permission to view an Amazon Q artifact",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getartifactactionresult": {
+    "name": "GetArtifactActionResult",
+    "isPermissionOnly": true,
+    "description": "Grants permission to view results of an action in an Amazon Q artifact",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "cloudformation:GetResource",
+      "cloudformation:GetResourceRequestStatus",
+      "cloudformation:ListResourceRequests"
+    ]
+  },
   "getconnector": {
     "name": "GetConnector",
     "isPermissionOnly": true,
@@ -224,6 +383,38 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listgroups": {
+    "name": "ListGroups",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list groups for an Amazon Q Developer Profile",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listlogindomains": {
+    "name": "ListLoginDomains",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list login domains for an Amazon Q Developer Profile",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listpluginproviders": {
     "name": "ListPluginProviders",
     "isPermissionOnly": true,
@@ -249,6 +440,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listscimaccesstokens": {
+    "name": "ListScimAccessTokens",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list SCIM access tokens for an Amazon Q Developer Profile",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "isPermissionOnly": true,
@@ -267,6 +474,22 @@
     ],
     "dependentActions": []
   },
+  "listusers": {
+    "name": "ListUsers",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list users for an Amazon Q Developer Profile",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "passrequest": {
     "name": "PassRequest",
     "isPermissionOnly": true,
@@ -276,6 +499,26 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "performartifactaction": {
+    "name": "PerformArtifactAction",
+    "isPermissionOnly": true,
+    "description": "Grants permission to perform an action in an Amazon Q artifact",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "cloudformation:CancelResourceRequest",
+      "cloudformation:CreateResource",
+      "cloudformation:GetResource",
+      "cloudformation:GetResourceRequestStatus",
+      "cloudformation:ListResourceRequests",
+      "cloudformation:UpdateResource",
+      "iam:AttachRolePolicy",
+      "iam:CreatePolicy",
+      "iam:CreateRole",
+      "iam:PutRolePolicy"
+    ]
+  },
   "rejectconnector": {
     "name": "RejectConnector",
     "isPermissionOnly": true,
@@ -346,6 +589,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "profile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -366,6 +615,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "profile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -374,6 +629,25 @@
     ],
     "dependentActions": []
   },
+  "updateassignment": {
+    "name": "UpdateAssignment",
+    "isPermissionOnly": true,
+    "description": "Grants permission to update a user or group assignment for an Amazon Q Developer Profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "identitystore:UserId",
+      "identitystore:GroupId"
+    ],
+    "dependentActions": []
+  },
   "updateauthgrant": {
     "name": "UpdateAuthGrant",
     "isPermissionOnly": true,

package/data/actions/scheduler.json

@@ -122,6 +122,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listschedulesbytarget": {
+    "name": "ListSchedulesByTarget",
+    "description": "Grants permission to list the Amazon EventBridge Scheduler schedules in your account associated with a target",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to lists tag for an Amazon EventBridge Scheduler resource",

package/data/actions/trustedadvisor.json

@@ -7,30 +7,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createengagement": {
-    "name": "CreateEngagement",
-    "description": "Grants permission to create an engagement",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "createengagementattachment": {
-    "name": "CreateEngagementAttachment",
-    "description": "Grants permission to create an engagement attachment",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "createengagementcommunication": {
-    "name": "CreateEngagementCommunication",
-    "description": "Grants permission to create an engagement communication",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deletenotificationconfigurationfordelegatedadmin": {
     "name": "DeleteNotificationConfigurationForDelegatedAdmin",
     "description": "Grants permission to the organization management account to delete email notification preferences from a delegated administrator account for Trusted Advisor Priority",
@@ -236,30 +212,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getengagement": {
-    "name": "GetEngagement",
-    "description": "Grants permission to view an engagment",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getengagementattachment": {
-    "name": "GetEngagementAttachment",
-    "description": "Grants permission to view an engagment attachment",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getengagementtype": {
-    "name": "GetEngagementType",
-    "description": "Grants permission to view a specific engagement type",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getorganizationrecommendation": {
     "name": "GetOrganizationRecommendation",
     "description": "Grants permission to get a specific recommendation within an AWS Organization's organization. This API supports only prioritized recommendations",
@@ -309,30 +261,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listengagementcommunications": {
-    "name": "ListEngagementCommunications",
-    "description": "Grants permission to view all communications for an engagement",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listengagementtypes": {
-    "name": "ListEngagementTypes",
-    "description": "Grants permission to view all engagement types",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listengagements": {
-    "name": "ListEngagements",
-    "description": "Grants permission to view all engagements",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listorganizationrecommendationaccounts": {
     "name": "ListOrganizationRecommendationAccounts",
     "description": "Grants permission to list the accounts that own the resources for an AWS Organization aggregate recommendation. This API only supports prioritized recommendations",
@@ -424,22 +352,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updateengagement": {
-    "name": "UpdateEngagement",
-    "description": "Grants permission to update the details of an engagement",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "updateengagementstatus": {
-    "name": "UpdateEngagementStatus",
-    "description": "Grants permission to update the status of an engagement",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "updatenotificationconfigurations": {
     "name": "UpdateNotificationConfigurations",
     "description": "Grants permission to create or update your email notification preferences for Trusted Advisor Priority",

package/data/actions/wickr.json

@@ -347,6 +347,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getopentdfconfig": {
+    "name": "GetOpentdfConfig",
+    "description": "Grants permission to retrieve the OpenTDF integration configuration for a Wickr network",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getsecuritygroup": {
     "name": "GetSecurityGroup",
     "description": "Grants permission to get security group information in a Wickr network",
@@ -550,6 +565,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "registeropentdfconfig": {
+    "name": "RegisterOpentdfConfig",
+    "description": "Grants permission to register and save OpenTDF integration configuration for a Wickr network",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a specified Wickr resource",

package/data/conditionKeys/kms.json

@@ -449,6 +449,11 @@
     "description": "Filters access to the Sign and Verify operations based on the signing algorithm in the request",
     "type": "String"
   },
+  "kms:trailingdayswithoutkeyusage": {
+    "key": "kms:TrailingDaysWithoutKeyUsage",
+    "description": "Filters access to the ScheduleKeyDeletion and DisableKey operations based on the number of days since the AWS KMS key was last used",
+    "type": "Numeric"
+  },
   "kms:validto": {
     "key": "kms:ValidTo",
     "description": "Filters access to the ImportKeyMaterial operation based on the value of the ValidTo parameter in the request. You can use this condition key to allow users to import key material only when it expires by the specified date",

package/data/resourceTypes/aidevops.json

@@ -10,6 +10,13 @@
     "key": "associations",
     "arn": "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/${AgentSpaceId}/associations/${AssociationId}"
   },
+  "private-connection": {
+    "key": "private-connection",
+    "arn": "arn:${Partition}:aidevops:${Region}:${Account}:private-connection/${Name}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "service": {
     "key": "service",
     "arn": "arn:${Partition}:aidevops:${Region}:${Account}:service/${ServiceId}",

package/data/resourceTypes/aws-marketplace.json

@@ -43,6 +43,10 @@
     "key": "Listing",
     "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/listing/${ListingId}"
   },
+  "alllistings": {
+    "key": "AllListings",
+    "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/listing/*"
+  },
   "offer": {
     "key": "Offer",
     "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/offer/${OfferId}"
@@ -55,6 +59,10 @@
     "key": "PurchaseOption",
     "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/purchaseOption/${PurchaseOptionId}"
   },
+  "allpurchaseoptions": {
+    "key": "AllPurchaseOptions",
+    "arn": "arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/purchaseOption/*"
+  },
   "dashboard": {
     "key": "Dashboard",
     "arn": "arn:${Partition}:aws-marketplace::${Account}:${Catalog}/ReportingData/${FactTable}/Dashboard/${DashboardName}"

package/data/resourceTypes/q.json

@@ -1,7 +1,10 @@
 {
   "profile": {
     "key": "profile",
-    "arn": "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/${Identifier}"
+    "arn": "arn:${Partition}:codewhisperer:${Region}:${Account}:profile/${Identifier}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "plugin": {
     "key": "plugin",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.19.202604261",
+  "version": "0.19.202604301",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-04-26T05:31:05.523Z",
+  "updatedAt": "2026-04-30T05:44:35.964Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",