@cloud-copilot/iam-data 0.19.202605011 → 0.19.202605021

package/data/actions/application-signals-mcp.json

@@ -0,0 +1,32 @@
+{
+  "callreadonlytool": {
+    "name": "CallReadOnlyTool",
+    "description": "Grants permission to invoke read-only Application Signals MCP tools (list_monitored_services, get_service_detail, query_service_metrics, list_service_operations, get_slo, list_slos, search_transaction_spans, query_sampled_traces, list_slis, get_enablement_guide, list_change_events, list_group_services, audit_group_health, get_group_dependencies, get_group_changes, list_grouping_attribute_definitions, audit_services, audit_slos, audit_service_operations, analyze_canary_failures)",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "mcp-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invokemcp": {
+    "name": "InvokeMcp",
+    "description": "Grants permission to connect to and interact with the Application Signals MCP server (initialize, list tools, list resources, list prompts)",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "mcp-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/cloudwatch.json

@@ -22,6 +22,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "callwithbearertoken": {
+    "name": "CallWithBearerToken",
+    "isPermissionOnly": true,
+    "description": "Grants permission to make API calls to CloudWatch using bearer token authentication",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createservicelevelobjective": {
     "name": "CreateServiceLevelObjective",
     "description": "Grants permission to create a service level objective",
@@ -527,6 +536,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "dashboard",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "insight-rule",
         "required": false,
@@ -561,6 +576,15 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-Dashboard",
+        "resourceTypes": [
+          {
+            "name": "dashboard",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-InsightRule",
         "resourceTypes": [
@@ -644,7 +668,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "putinsightrule": {
@@ -805,6 +832,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "dashboard",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "insight-rule",
         "required": false,
@@ -842,6 +875,15 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-Dashboard",
+        "resourceTypes": [
+          {
+            "name": "dashboard",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-InsightRule",
         "resourceTypes": [
@@ -879,6 +921,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "dashboard",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "insight-rule",
         "required": false,
@@ -915,6 +963,15 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-Dashboard",
+        "resourceTypes": [
+          {
+            "name": "dashboard",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-InsightRule",
         "resourceTypes": [

package/data/conditionKeys/application-signals-mcp.json

@@ -0,0 +1,7 @@
+{
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by tag key-value pairs attached to the resource",
+    "type": "String"
+  }
+}

package/data/resourceTypes/aidevops.json

@@ -8,7 +8,7 @@
   },
   "associations": {
     "key": "associations",
-    "arn": "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/${AgentSpaceId}/associations/${AssociationId}"
+    "arn": "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/${AgentSpaceId}/association/${AssociationId}"
   },
   "private-connection": {
     "key": "private-connection",

package/data/resourceTypes/application-signals-mcp.json

@@ -0,0 +1,9 @@
+{
+  "mcp-server": {
+    "key": "mcp-server",
+    "arn": "arn:${Partition}:application-signals-mcp:${Region}:${Account}:mcp-server/*",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

package/data/resourceTypes/cloudwatch.json

@@ -15,7 +15,10 @@
   },
   "dashboard": {
     "key": "dashboard",
-    "arn": "arn:${Partition}:cloudwatch::${Account}:dashboard/${DashboardName}"
+    "arn": "arn:${Partition}:cloudwatch::${Account}:dashboard/${DashboardName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "insight-rule": {
     "key": "insight-rule",

package/data/serviceNames.json

@@ -24,6 +24,7 @@
   "appflow": "Amazon AppFlow",
   "application-autoscaling": "AWS Application Auto Scaling",
   "application-signals": "Amazon CloudWatch Application Signals",
+  "application-signals-mcp": "Amazon CloudWatch Application Signals MCP Server",
   "application-transformation": "AWS Application Transformation Service",
   "applicationinsights": "Amazon CloudWatch Application Insights",
   "appmesh": "AWS App Mesh",

package/data/services.json

@@ -24,6 +24,7 @@
   "appflow",
   "application-autoscaling",
   "application-signals",
+  "application-signals-mcp",
   "application-transformation",
   "applicationinsights",
   "appmesh",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.19.202605011",
+  "version": "0.19.202605021",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-05-01T05:50:49.457Z",
+  "updatedAt": "2026-05-02T05:31:07.183Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",