@cloud-copilot/iam-data 0.19.202606011 → 0.19.202606031

package/data/actions/elasticache.json

@@ -475,7 +475,8 @@
           "elasticache:AuthTokenEnabled",
           "elasticache:SnapshotRetentionLimit",
           "elasticache:KmsKeyId",
-          "elasticache:CacheParameterGroupName"
+          "elasticache:CacheParameterGroupName",
+          "elasticache:Durability"
         ],
         "dependentActions": []
       },
@@ -1564,7 +1565,8 @@
           "elasticache:SnapshotRetentionLimit",
           "elasticache:CacheParameterGroupName",
           "elasticache:TransitEncryptionEnabled",
-          "elasticache:ClusterModeEnabled"
+          "elasticache:ClusterModeEnabled",
+          "elasticache:Durability"
         ],
         "dependentActions": [
           "ec2:CreateNetworkInterface",

package/data/actions/quicksight.json

@@ -145,6 +145,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createagent": {
+    "name": "CreateAgent",
+    "description": "Grants permission to create an agent",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "agent",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createanalysis": {
     "name": "CreateAnalysis",
     "description": "Grants permission to create an analysis from a template",
@@ -285,6 +300,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createflow": {
+    "name": "CreateFlow",
+    "description": "Grants permission to create a flow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "flow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createfolder": {
     "name": "CreateFolder",
     "description": "Grants permission to create a QuickSight folder",
@@ -462,6 +492,21 @@
     ],
     "dependentActions": []
   },
+  "createspace": {
+    "name": "CreateSpace",
+    "description": "Grants permission to create a space",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "space",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createtemplate": {
     "name": "CreateTemplate",
     "description": "Grants permission to create a template",
@@ -651,6 +696,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteagent": {
+    "name": "DeleteAgent",
+    "description": "Grants permission to delete an agent",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "agent",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteanalysis": {
     "name": "DeleteAnalysis",
     "description": "Grants permission to delete an analysis",
@@ -803,6 +863,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteflow": {
+    "name": "DeleteFlow",
+    "description": "Grants permission to delete a flow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "flow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletefolder": {
     "name": "DeleteFolder",
     "description": "Grants permission to delete a QuickSight Folder",
@@ -956,6 +1031,21 @@
     ],
     "dependentActions": []
   },
+  "deletespace": {
+    "name": "DeleteSpace",
+    "description": "Grants permission to delete a space",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "space",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletetemplate": {
     "name": "DeleteTemplate",
     "description": "Grants permission to delete a template",
@@ -1190,7 +1280,6 @@
   },
   "describeagent": {
     "name": "DescribeAgent",
-    "isPermissionOnly": true,
     "description": "Grants permission to describe an agent",
     "accessLevel": "Read",
     "resourceTypes": [
@@ -1206,7 +1295,6 @@
   },
   "describeagentpermissions": {
     "name": "DescribeAgentPermissions",
-    "isPermissionOnly": true,
     "description": "Grants permission to describe agent's permissions",
     "accessLevel": "Read",
     "resourceTypes": [
@@ -1552,6 +1640,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeflow": {
+    "name": "DescribeFlow",
+    "description": "Grants permission to describe a flow",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "flow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describefolder": {
     "name": "DescribeFolder",
     "description": "Grants permission to describe a QuickSight Folder",
@@ -1749,6 +1852,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describespace": {
+    "name": "DescribeSpace",
+    "description": "Grants permission to describe a space",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "space",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describespacepermissions": {
+    "name": "DescribeSpacePermissions",
+    "description": "Grants permission to describe permissions for a space",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "space",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describetemplate": {
     "name": "DescribeTemplate",
     "description": "Grants permission to describe a template",
@@ -2124,7 +2257,6 @@
   },
   "listagents": {
     "name": "ListAgents",
-    "isPermissionOnly": true,
     "description": "Grants permission to list agents",
     "accessLevel": "List",
     "resourceTypes": [
@@ -2473,6 +2605,29 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listspaceresources": {
+    "name": "ListSpaceResources",
+    "description": "Grants permission to list resources in a space",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "space",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listspaces": {
+    "name": "ListSpaces",
+    "description": "Grants permission to list spaces",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list tags of a QuickSight resource",
@@ -2893,7 +3048,6 @@
   },
   "searchagents": {
     "name": "SearchAgents",
-    "isPermissionOnly": true,
     "description": "Grants permission to search agents",
     "accessLevel": "List",
     "resourceTypes": [
@@ -3014,6 +3168,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "searchspaces": {
+    "name": "SearchSpaces",
+    "description": "Grants permission to search spaces",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "searchtopics": {
     "name": "SearchTopics",
     "description": "Grants permission to search for a sub-set of topics",
@@ -3435,9 +3597,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateagent": {
+    "name": "UpdateAgent",
+    "description": "Grants permission to update an agent",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "agent",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateagentpermissions": {
     "name": "UpdateAgentPermissions",
-    "isPermissionOnly": true,
     "description": "Grants permission to update agent permissions",
     "accessLevel": "Permissions management",
     "resourceTypes": [
@@ -3741,6 +3917,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateflow": {
+    "name": "UpdateFlow",
+    "description": "Grants permission to update a flow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "flow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateflowpermissions": {
     "name": "UpdateFlowPermissions",
     "description": "Grants permission to update permissions for a flow",
@@ -3936,6 +4127,51 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatespace": {
+    "name": "UpdateSpace",
+    "description": "Grants permission to update a space",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "space",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatespacepermissions": {
+    "name": "UpdateSpacePermissions",
+    "description": "Grants permission to update permissions for a space",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "space",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatespaceresources": {
+    "name": "UpdateSpaceResources",
+    "description": "Grants permission to update resources in a space",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "space",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatetemplate": {
     "name": "UpdateTemplate",
     "description": "Grants permission to update a template",

package/data/actions/sagemaker.json

@@ -269,6 +269,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "labeling-job",
         "required": false,
@@ -617,6 +623,32 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "callwithbearertoken": {
+    "name": "CallWithBearerToken",
+    "isPermissionOnly": true,
+    "description": "Grants permission to use bearer token in SageMaker Job and Inference runtime endpoints APIs",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "sagemaker:BearerTokenType"
+    ],
+    "dependentActions": []
+  },
+  "completerollout": {
+    "name": "CompleteRollout",
+    "description": "Grants permission to mark a rollout as complete for a job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createaibenchmarkjob": {
     "name": "CreateAIBenchmarkJob",
     "description": "Grants permission to create an AI benchmark job",
@@ -796,8 +828,8 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
       "sagemaker:InterContainerTrafficEncryption",
-      "sagemaker:OutputKmsKey",
-      "sagemaker:VolumeKmsKey",
+      "sagemaker:OutputKmsKeyArn",
+      "sagemaker:VolumeKmsKeyArn",
       "sagemaker:VpcSecurityGroupIds",
       "sagemaker:VpcSubnets"
     ],
@@ -822,8 +854,8 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
       "sagemaker:InterContainerTrafficEncryption",
-      "sagemaker:OutputKmsKey",
-      "sagemaker:VolumeKmsKey",
+      "sagemaker:OutputKmsKeyArn",
+      "sagemaker:VolumeKmsKeyArn",
       "sagemaker:VpcSecurityGroupIds",
       "sagemaker:VpcSubnets"
     ],
@@ -1018,8 +1050,8 @@
       "sagemaker:InterContainerTrafficEncryption",
       "sagemaker:MaxRuntimeInSeconds",
       "sagemaker:NetworkIsolation",
-      "sagemaker:OutputKmsKey",
-      "sagemaker:VolumeKmsKey",
+      "sagemaker:OutputKmsKeyArn",
+      "sagemaker:VolumeKmsKeyArn",
       "sagemaker:VpcSecurityGroupIds",
       "sagemaker:VpcSubnets"
     ],
@@ -1069,8 +1101,8 @@
       "sagemaker:InstanceTypes",
       "sagemaker:VpcSecurityGroupIds",
       "sagemaker:VpcSubnets",
-      "sagemaker:DomainSharingOutputKmsKey",
-      "sagemaker:VolumeKmsKey",
+      "sagemaker:DomainSharingOutputKmsKeyArn",
+      "sagemaker:VolumeKmsKeyArn",
       "sagemaker:ImageArns",
       "sagemaker:ImageVersionArns",
       "sagemaker:StudioLifecycleConfigArns"
@@ -1187,7 +1219,7 @@
       "sagemaker:AcceleratorTypes",
       "sagemaker:InstanceTypes",
       "sagemaker:ModelArn",
-      "sagemaker:VolumeKmsKey",
+      "sagemaker:VolumeKmsKeyArn",
       "sagemaker:ServerlessMaxConcurrency",
       "sagemaker:ServerlessMemorySize",
       "sagemaker:NetworkIsolation",
@@ -1234,8 +1266,8 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "sagemaker:FeatureGroupOnlineStoreKmsKey",
-      "sagemaker:FeatureGroupOfflineStoreKmsKey",
+      "sagemaker:FeatureGroupOnlineStoreKmsKeyArn",
+      "sagemaker:FeatureGroupOfflineStoreKmsKeyArn",
       "sagemaker:FeatureGroupOfflineStoreS3Uri",
       "sagemaker:FeatureGroupEnableOnlineStore",
       "sagemaker:FeatureGroupOfflineStoreConfig",
@@ -1379,8 +1411,8 @@
       "sagemaker:InterContainerTrafficEncryption",
       "sagemaker:MaxRuntimeInSeconds",
       "sagemaker:NetworkIsolation",
-      "sagemaker:OutputKmsKey",
-      "sagemaker:VolumeKmsKey",
+      "sagemaker:OutputKmsKeyArn",
+      "sagemaker:VolumeKmsKeyArn",
       "sagemaker:VpcSecurityGroupIds",
       "sagemaker:VpcSubnets"
     ],
@@ -1491,6 +1523,30 @@
     ],
     "dependentActions": []
   },
+  "createjob": {
+    "name": "CreateJob",
+    "description": "Grants permission to create a SageMaker model customization job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:PassRole",
+          "sagemaker:AddTags"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "sagemaker:OutputKmsKeyArn",
+      "sagemaker:VpcSecurityGroupIds",
+      "sagemaker:VpcSubnets"
+    ],
+    "dependentActions": []
+  },
   "createlabelingjob": {
     "name": "CreateLabelingJob",
     "description": "Grants permission to start a labeling job. A labeling job takes unlabeled data in and produces labeled data as output, which can be used for training SageMaker models",
@@ -1509,8 +1565,8 @@
     "conditionKeys": [
       "sagemaker:WorkteamArn",
       "sagemaker:WorkteamType",
-      "sagemaker:VolumeKmsKey",
-      "sagemaker:OutputKmsKey",
+      "sagemaker:VolumeKmsKeyArn",
+      "sagemaker:OutputKmsKeyArn",
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
@@ -1616,8 +1672,8 @@
       "sagemaker:InterContainerTrafficEncryption",
       "sagemaker:MaxRuntimeInSeconds",
       "sagemaker:NetworkIsolation",
-      "sagemaker:OutputKmsKey",
-      "sagemaker:VolumeKmsKey",
+      "sagemaker:OutputKmsKeyArn",
+      "sagemaker:VolumeKmsKeyArn",
       "sagemaker:VpcSecurityGroupIds",
       "sagemaker:VpcSubnets"
     ],
@@ -1680,8 +1736,8 @@
       "sagemaker:InterContainerTrafficEncryption",
       "sagemaker:MaxRuntimeInSeconds",
       "sagemaker:NetworkIsolation",
-      "sagemaker:OutputKmsKey",
-      "sagemaker:VolumeKmsKey",
+      "sagemaker:OutputKmsKeyArn",
+      "sagemaker:VolumeKmsKeyArn",
       "sagemaker:VpcSecurityGroupIds",
       "sagemaker:VpcSubnets"
     ],
@@ -1757,8 +1813,8 @@
       "sagemaker:InterContainerTrafficEncryption",
       "sagemaker:MaxRuntimeInSeconds",
       "sagemaker:NetworkIsolation",
-      "sagemaker:OutputKmsKey",
-      "sagemaker:VolumeKmsKey",
+      "sagemaker:OutputKmsKeyArn",
+      "sagemaker:VolumeKmsKeyArn",
       "sagemaker:VpcSecurityGroupIds",
       "sagemaker:VpcSubnets"
     ],
@@ -1786,8 +1842,8 @@
       "sagemaker:InterContainerTrafficEncryption",
       "sagemaker:MaxRuntimeInSeconds",
       "sagemaker:NetworkIsolation",
-      "sagemaker:OutputKmsKey",
-      "sagemaker:VolumeKmsKey",
+      "sagemaker:OutputKmsKeyArn",
+      "sagemaker:VolumeKmsKeyArn",
       "sagemaker:VpcSecurityGroupIds",
       "sagemaker:VpcSubnets"
     ],
@@ -1817,7 +1873,7 @@
       "sagemaker:MinimumInstanceMetadataServiceVersion",
       "sagemaker:NotebookInstanceLifecycleConfigArns",
       "sagemaker:RootAccess",
-      "sagemaker:VolumeKmsKey",
+      "sagemaker:VolumeKmsKeyArn",
       "sagemaker:VpcSecurityGroupIds",
       "sagemaker:VpcSubnets"
     ],
@@ -2004,8 +2060,8 @@
       "sagemaker:InstanceTypes",
       "sagemaker:MaxRuntimeInSeconds",
       "sagemaker:NetworkIsolation",
-      "sagemaker:OutputKmsKey",
-      "sagemaker:VolumeKmsKey",
+      "sagemaker:OutputKmsKeyArn",
+      "sagemaker:VolumeKmsKeyArn",
       "sagemaker:VpcSecurityGroupIds",
       "sagemaker:VpcSubnets",
       "sagemaker:InterContainerTrafficEncryption"
@@ -2154,8 +2210,8 @@
       "sagemaker:InterContainerTrafficEncryption",
       "sagemaker:MaxRuntimeInSeconds",
       "sagemaker:NetworkIsolation",
-      "sagemaker:OutputKmsKey",
-      "sagemaker:VolumeKmsKey",
+      "sagemaker:OutputKmsKeyArn",
+      "sagemaker:VolumeKmsKeyArn",
       "sagemaker:VpcSecurityGroupIds",
       "sagemaker:VpcSubnets",
       "sagemaker:KeepAlivePeriod",
@@ -2204,8 +2260,8 @@
       "aws:TagKeys",
       "sagemaker:InstanceTypes",
       "sagemaker:ModelArn",
-      "sagemaker:OutputKmsKey",
-      "sagemaker:VolumeKmsKey"
+      "sagemaker:OutputKmsKeyArn",
+      "sagemaker:VolumeKmsKeyArn"
     ],
     "dependentActions": []
   },
@@ -2275,7 +2331,7 @@
       "aws:TagKeys",
       "sagemaker:VpcSecurityGroupIds",
       "sagemaker:InstanceTypes",
-      "sagemaker:DomainSharingOutputKmsKey",
+      "sagemaker:DomainSharingOutputKmsKeyArn",
       "sagemaker:ImageArns",
       "sagemaker:ImageVersionArns",
       "sagemaker:StudioLifecycleConfigArns"
@@ -2890,6 +2946,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletejob": {
+    "name": "DeleteJob",
+    "description": "Grants permission to delete a SageMaker model customization job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletelineagegrouppolicy": {
     "name": "DeleteLineageGroupPolicy",
     "description": "Grants permission to delete a lineage group policy",
@@ -3447,6 +3518,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "labeling-job",
         "required": false,
@@ -4361,6 +4438,29 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describejob": {
+    "name": "DescribeJob",
+    "description": "Grants permission to return information about a SageMaker model customization job",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describejobschemaversion": {
+    "name": "DescribeJobSchemaVersion",
+    "description": "Grants permission to return information about a job schema version for a particular JobCategory for the CreateJob API",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describelabelingjob": {
     "name": "DescribeLabelingJob",
     "description": "Grants permission to return information about a labeling job",
@@ -5557,6 +5657,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listjobschemaversions": {
+    "name": "ListJobSchemaVersions",
+    "description": "Grants permission to list job schema versions for a particular JobCategory for the CreateJob API",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listjobs": {
+    "name": "ListJobs",
+    "description": "Grants permission to list SageMaker model customization jobs",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listlabelingjobs": {
     "name": "ListLabelingJobs",
     "description": "Grants permission to list labeling jobs",
@@ -6142,6 +6258,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "labeling-job",
         "required": false,
@@ -6504,6 +6626,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "sample": {
+    "name": "Sample",
+    "description": "Grants permission to invoke a sample request against a job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "samplewithresponsestream": {
+    "name": "SampleWithResponseStream",
+    "description": "Grants permission to invoke a streaming sample request against a job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "search": {
     "name": "Search",
     "description": "Grants permission to search for SageMaker objects",
@@ -6873,6 +7025,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "stopjob": {
+    "name": "StopJob",
+    "description": "Grants permission to stop a SageMaker model customization job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "stoplabelingjob": {
     "name": "StopLabelingJob",
     "description": "Grants permission to stop a labeling job. Any labels already generated will be exported before stopping",
@@ -7269,7 +7436,7 @@
     "conditionKeys": [
       "sagemaker:VpcSecurityGroupIds",
       "sagemaker:InstanceTypes",
-      "sagemaker:DomainSharingOutputKmsKey",
+      "sagemaker:DomainSharingOutputKmsKeyArn",
       "sagemaker:ImageArns",
       "sagemaker:ImageVersionArns",
       "sagemaker:AppNetworkAccessType",
@@ -7607,8 +7774,8 @@
       "sagemaker:InstanceTypes",
       "sagemaker:MaxRuntimeInSeconds",
       "sagemaker:NetworkIsolation",
-      "sagemaker:OutputKmsKey",
-      "sagemaker:VolumeKmsKey",
+      "sagemaker:OutputKmsKeyArn",
+      "sagemaker:VolumeKmsKeyArn",
       "sagemaker:VpcSecurityGroupIds",
       "sagemaker:VpcSubnets",
       "sagemaker:InterContainerTrafficEncryption"
@@ -7733,6 +7900,21 @@
     ],
     "dependentActions": []
   },
+  "updatereward": {
+    "name": "UpdateReward",
+    "description": "Grants permission to submit reward scores for a trajectory in a job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatesharedmodel": {
     "name": "UpdateSharedModel",
     "isPermissionOnly": true,
@@ -7837,7 +8019,7 @@
       "sagemaker:InstanceTypes",
       "sagemaker:VpcSecurityGroupIds",
       "sagemaker:InstanceTypes",
-      "sagemaker:DomainSharingOutputKmsKey",
+      "sagemaker:DomainSharingOutputKmsKeyArn",
       "sagemaker:ImageArns",
       "sagemaker:ImageVersionArns",
       "sagemaker:StudioLifecycleConfigArns"

package/data/actions/transform.json

@@ -1,4 +1,20 @@
 {
+  "accesstransformprofile": {
+    "name": "AccessTransformProfile",
+    "isPermissionOnly": true,
+    "description": "Grants permission to invoke AccessTransformProfile on AWS Transform",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "associateconnectorresource": {
     "name": "AssociateConnectorResource",
     "isPermissionOnly": true,
@@ -12,7 +28,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "createprofile": {
@@ -53,7 +71,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deleteprofile": {
@@ -112,7 +132,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getwebappurl": {
@@ -139,7 +161,9 @@
     "description": "Grants permission to invoke ListConnectors on AWS Transform",
     "accessLevel": "List",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "listprofiles": {
@@ -189,7 +213,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "tagresource": {

package/data/conditionKeys/elasticache.json

@@ -49,6 +49,11 @@
     "description": "Filters access by the CacheUsageLimits.DataStorage.Unit parameter in the CreateServerlessCache and ModifyServerlessCache request",
     "type": "String"
   },
+  "elasticache:durability": {
+    "key": "elasticache:Durability",
+    "description": "Filters access by the Durability parameter in the request. Valid values are default, async, sync, or disabled",
+    "type": "String"
+  },
   "elasticache:enginetype": {
     "key": "elasticache:EngineType",
     "description": "Filters access by the engine type present in creation requests. For replication group creations, default engine 'redis' is used as key if parameter is not present",

package/data/conditionKeys/sagemaker.json

@@ -24,6 +24,11 @@
     "description": "Filters access by the app network access type associated with the resource in the request",
     "type": "String"
   },
+  "sagemaker:bearertokentype": {
+    "key": "sagemaker:BearerTokenType",
+    "description": "Filters access by the type of bearer token used in the request",
+    "type": "String"
+  },
   "sagemaker:currentcustomermetadataproperties/${metadatakey}": {
     "key": "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}",
     "description": "Filters access by a current metadata key and value pair associated with the model-package resource",
@@ -66,7 +71,12 @@
   },
   "sagemaker:domainsharingoutputkmskey": {
     "key": "sagemaker:DomainSharingOutputKmsKey",
-    "description": "Filters access by the Domain sharing output KMS key associated with the resource in the request",
+    "description": "Filters access by the Domain sharing output KMS key associated with the resource in the request. This key has been deprecated. It has been replaced by sagemaker:DomainSharingOutputKmsKeyArn",
+    "type": "ARN"
+  },
+  "sagemaker:domainsharingoutputkmskeyarn": {
+    "key": "sagemaker:DomainSharingOutputKmsKeyArn",
+    "description": "Filters access by the Domain sharing output KMS key associated with the resource in the request. The ARN of the key-id must be used",
     "type": "ARN"
   },
   "sagemaker:enableremotedebug": {
@@ -91,7 +101,12 @@
   },
   "sagemaker:featuregroupofflinestorekmskey": {
     "key": "sagemaker:FeatureGroupOfflineStoreKmsKey",
-    "description": "Filters access by the offline store kms key associated with the feature group resource in the request",
+    "description": "Filters access by the offline store kms key associated with the feature group resource in the request. This key has been deprecated. It has been replaced by sagemaker:FeatureGroupOfflineStoreKmsKeyArn",
+    "type": "ARN"
+  },
+  "sagemaker:featuregroupofflinestorekmskeyarn": {
+    "key": "sagemaker:FeatureGroupOfflineStoreKmsKeyArn",
+    "description": "Filters access by the offline store kms key associated with the feature group resource in the request. The ARN of the key-id must be used",
     "type": "ARN"
   },
   "sagemaker:featuregroupofflinestores3uri": {
@@ -101,7 +116,12 @@
   },
   "sagemaker:featuregrouponlinestorekmskey": {
     "key": "sagemaker:FeatureGroupOnlineStoreKmsKey",
-    "description": "Filters access by the online store kms key associated with the feature group resource in the request",
+    "description": "Filters access by the online store kms key associated with the feature group resource in the request. This key has been deprecated. It has been replaced by sagemaker:FeatureGroupOnlineStoreKmsKeyArn",
+    "type": "ARN"
+  },
+  "sagemaker:featuregrouponlinestorekmskeyarn": {
+    "key": "sagemaker:FeatureGroupOnlineStoreKmsKeyArn",
+    "description": "Filters access by the online store kms key associated with the feature group resource in the request. The ARN of the key-id must be used",
     "type": "ARN"
   },
   "sagemaker:filesystemaccessmode": {
@@ -126,7 +146,7 @@
   },
   "sagemaker:homeefsfilesystemkmskey": {
     "key": "sagemaker:HomeEfsFileSystemKmsKey",
-    "description": "Filters access by a key that is present in the request the user makes to the SageMaker service. This key is deprecated. It has been replaced by sagemaker:VolumeKmsKey",
+    "description": "Filters access by a key that is present in the request the user makes to the SageMaker service. This key has been deprecated. It has been replaced by sagemaker:VolumeKmsKeyArn",
     "type": "ARN"
   },
   "sagemaker:imagearns": {
@@ -196,7 +216,12 @@
   },
   "sagemaker:outputkmskey": {
     "key": "sagemaker:OutputKmsKey",
-    "description": "Filters access by the output kms key associated with the resource in the request",
+    "description": "Filters access by the output kms key associated with the resource in the request. This key has been deprecated. It has been replaced by sagemaker:OutputKmsKeyArn",
+    "type": "ARN"
+  },
+  "sagemaker:outputkmskeyarn": {
+    "key": "sagemaker:OutputKmsKeyArn",
+    "description": "Filters access by the output kms key associated with the resource in the request. The ARN of the key-id must be used",
     "type": "ARN"
   },
   "sagemaker:owneruserprofilearn": {
@@ -271,7 +296,12 @@
   },
   "sagemaker:volumekmskey": {
     "key": "sagemaker:VolumeKmsKey",
-    "description": "Filters access by the volume kms key associated with the resource in the request",
+    "description": "Filters access by the volume kms key associated with the resource in the request. This key has been deprecated. It has been replaced by sagemaker:VolumeKmsKeyArn",
+    "type": "ARN"
+  },
+  "sagemaker:volumekmskeyarn": {
+    "key": "sagemaker:VolumeKmsKeyArn",
+    "description": "Filters access by the volume kms key associated with the resource in the request. The ARN of the key-id must be used",
     "type": "ARN"
   },
   "sagemaker:vpcsecuritygroupids": {

package/data/conditionKeys/transform.json

@@ -4,6 +4,11 @@
     "description": "Filters access by the tags that are passed in the request",
     "type": "String"
   },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
   "aws:tagkeys": {
     "key": "aws:TagKeys",
     "description": "Filters access by the tag keys that are passed in the request",

package/data/resourceTypes/elasticache.json

@@ -40,6 +40,7 @@
       "elasticache:CacheNodeType",
       "elasticache:CacheParameterGroupName",
       "elasticache:ClusterModeEnabled",
+      "elasticache:Durability",
       "elasticache:EngineType",
       "elasticache:EngineVersion",
       "elasticache:KmsKeyId",

package/data/resourceTypes/quicksight.json

@@ -169,5 +169,9 @@
   "automationgroup": {
     "key": "automationGroup",
     "arn": "arn:${Partition}:quicksight:${Region}:${Account}:automation-group/${ResourceId}"
+  },
+  "space": {
+    "key": "space",
+    "arn": "arn:${Partition}:quicksight:${Region}:${Account}:space/${ResourceId}"
   }
 }

package/data/resourceTypes/sagemaker.json

@@ -227,6 +227,14 @@
       "sagemaker:ResourceTag/${TagKey}"
     ]
   },
+  "job": {
+    "key": "job",
+    "arn": "arn:${Partition}:sagemaker:${Region}:${Account}:job/${JobCategory}/${JobName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "sagemaker:ResourceTag/${TagKey}"
+    ]
+  },
   "hyper-parameter-tuning-job": {
     "key": "hyper-parameter-tuning-job",
     "arn": "arn:${Partition}:sagemaker:${Region}:${Account}:hyper-parameter-tuning-job/${HyperParameterTuningJobName}",

package/data/resourceTypes/transform.json

@@ -5,6 +5,9 @@
   },
   "connector": {
     "key": "connector",
-    "arn": "arn:${Partition}:transform:${Region}:${Account}:connector/${WorkspaceId}/${ConnectorId}"
+    "arn": "arn:${Partition}:transform:${Region}:${Account}:connector/${WorkspaceId}/${ConnectorId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.19.202606011",
+  "version": "0.19.202606031",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-06-01T06:20:35.056Z",
+  "updatedAt": "2026-06-03T06:18:57.481Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",