@cloud-copilot/iam-data 0.19.202606051 → 0.19.202606091

package/data/actions/aws-marketplace.json

@@ -14,6 +14,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createverificationevidence": {
+    "name": "CreateVerificationEvidence",
+    "description": "Grants permission to create a new verification evidence resource for BusinessVerification",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "VerificationEvidence",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "deleteresourcepolicy": {
     "name": "DeleteResourcePolicy",
     "description": "Grants permission to delete the resource policy of an existing entity",
@@ -119,6 +137,31 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getverification": {
+    "name": "GetVerification",
+    "description": "Grants permission to retrieve the detailed status of a specific verification process, including PSP validation results",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws-marketplace:VerificationType"
+    ],
+    "dependentActions": []
+  },
+  "getverificationevidence": {
+    "name": "GetVerificationEvidence",
+    "description": "Grants permission to retrieve the complete content of a specific verification evidence resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "VerificationEvidence",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listassessments": {
     "name": "ListAssessments",
     "description": "Grants permission to list existing assessments",
@@ -184,6 +227,24 @@
     ],
     "dependentActions": []
   },
+  "listverificationevidence": {
+    "name": "ListVerificationEvidence",
+    "description": "Grants permission to list verification evidence resources with summary metadata",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listverifications": {
+    "name": "ListVerifications",
+    "description": "Grants permission to list all verification statuses across jurisdictions and verification types",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws-marketplace:VerificationType"
+    ],
+    "dependentActions": []
+  },
   "putresourcepolicy": {
     "name": "PutResourcePolicy",
     "description": "Grants permission to attach a resource policy to an existing entity",
@@ -237,6 +298,23 @@
     ],
     "dependentActions": []
   },
+  "startverification": {
+    "name": "StartVerification",
+    "description": "Grants permission to submit verification evidence to a Payment Service Provider and enable data sharing for a specified jurisdiction",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "VerificationEvidence",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws-marketplace:VerificationType"
+    ],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a deployment parameter resource",
@@ -281,6 +359,21 @@
     ],
     "dependentActions": []
   },
+  "updateverificationevidence": {
+    "name": "UpdateVerificationEvidence",
+    "description": "Grants permission to update an existing verification evidence resource using full replacement semantics",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "VerificationEvidence",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putdeploymentparameter": {
     "name": "PutDeploymentParameter",
     "description": "Grants permission to create or update a deployment parameter resource",

package/data/actions/bedrock-agentcore.json

@@ -2005,6 +2005,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "invokeagentruntimecommandshell": {
+    "name": "InvokeAgentRuntimeCommandShell",
+    "description": "Grants permission to invoke a command shell on an agent runtime endpoint over a web socket stream",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "runtime",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "runtime-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "invokeagentruntimeforuser": {
     "name": "InvokeAgentRuntimeForUser",
     "description": "Grants permission to invoke an agent runtime endpoint with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header",

package/data/actions/ec2.json

@@ -83,6 +83,27 @@
     ],
     "dependentActions": []
   },
+  "accepttransitgatewayclientvpnattachment": {
+    "name": "AcceptTransitGatewayClientVpnAttachment",
+    "description": "Grants permission to accept a transit gateway attachment request for a Client VPN endpoint",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "transit-gateway-attachment",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:transitGatewayAttachmentId"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "accepttransitgatewaymulticastdomainassociations": {
     "name": "AcceptTransitGatewayMulticastDomainAssociations",
     "description": "Grants permission to accept a request to associate subnets with a transit gateway multicast domain",
@@ -301,6 +322,17 @@
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}"
         ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      },
+      {
+        "name": "ipam-pool-allocation",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
@@ -549,7 +581,7 @@
       },
       {
         "name": "subnet",
-        "required": true,
+        "required": false,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZoneId",
@@ -1541,6 +1573,15 @@
           "ec2:CapacityReservationFleet"
         ],
         "dependentActions": []
+      },
+      {
+        "name": "capacity-reservation-cancellation-quote",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1954,6 +1995,28 @@
     ],
     "dependentActions": []
   },
+  "createcapacityreservationcancellationquote": {
+    "name": "CreateCapacityReservationCancellationQuote",
+    "description": "Grants permission to generate a cancellation quote for a future-dated Capacity Reservation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacity-reservation-cancellation-quote",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "createcapacityreservationfleet": {
     "name": "CreateCapacityReservationFleet",
     "description": "Grants permission to create a Capacity Reservation Fleet",
@@ -2044,6 +2107,16 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "transit-gateway",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:transitGatewayId"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "vpc",
         "required": false,
@@ -2082,7 +2155,7 @@
       },
       {
         "name": "subnet",
-        "required": true,
+        "required": false,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZoneId",
@@ -4484,6 +4557,17 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "capacity-reservation-cancellation-quote",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "capacity-reservation-fleet",
         "required": false,
@@ -4838,6 +4922,17 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "ipam-pool-allocation",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "ipam-prefix-list-resolver",
         "required": false,
@@ -8327,6 +8422,17 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "capacity-reservation-cancellation-quote",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "capacity-reservation-fleet",
         "required": false,
@@ -8635,6 +8741,17 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "ipam-pool-allocation",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "ipam-prefix-list-resolver",
         "required": false,
@@ -9533,6 +9650,27 @@
     ],
     "dependentActions": []
   },
+  "deletetransitgatewayclientvpnattachment": {
+    "name": "DeleteTransitGatewayClientVpnAttachment",
+    "description": "Grants permission to delete a transit gateway attachment for a Client VPN endpoint",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "transit-gateway-attachment",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:transitGatewayAttachmentId"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "deletetransitgatewayconnect": {
     "name": "DeleteTransitGatewayConnect",
     "description": "Grants permission to delete a transit gateway connect attachment",
@@ -10507,6 +10645,16 @@
     ],
     "dependentActions": []
   },
+  "describecapacityreservationcancellationquotes": {
+    "name": "DescribeCapacityReservationCancellationQuotes",
+    "description": "Grants permission to describe one or more Capacity Reservation cancellation quotes",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describecapacityreservationfleets": {
     "name": "DescribeCapacityReservationFleets",
     "description": "Grants permission to describe one or more Capacity Reservation Fleets",
@@ -11210,6 +11358,16 @@
     ],
     "dependentActions": []
   },
+  "describeipampoolallocations": {
+    "name": "DescribeIpamPoolAllocations",
+    "description": "Grants permission to describe IPAM pool allocations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describeipampools": {
     "name": "DescribeIpamPools",
     "description": "Grants permission to describe Amazon VPC IP Address Manager (IPAM) pools",
@@ -14491,6 +14649,16 @@
     ],
     "dependentActions": []
   },
+  "getcapacitymanagermonitoredtagkeys": {
+    "name": "GetCapacityManagerMonitoredTagKeys",
+    "description": "Grants permission to retrieve the tag keys that are currently being monitored by EC2 Capacity Manager",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "getcapacityreservationusage": {
     "name": "GetCapacityReservationUsage",
     "description": "Grants permission to get usage information about a Capacity Reservation",
@@ -15182,6 +15350,16 @@
     ],
     "dependentActions": []
   },
+  "getmanagedresourcevisibility": {
+    "name": "GetManagedResourceVisibility",
+    "description": "Grants permission to retrieve the managed resource visibility configuration for the account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "getnetworkinsightsaccessscopeanalysisfindings": {
     "name": "GetNetworkInsightsAccessScopeAnalysisFindings",
     "description": "Grants permission to get the findings for one or more Network Access Scope analyses",
@@ -16208,6 +16386,16 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "transit-gateway",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:transitGatewayId"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "vpc",
         "required": false,
@@ -16963,6 +17151,28 @@
     ],
     "dependentActions": []
   },
+  "modifyipampoolallocation": {
+    "name": "ModifyIpamPoolAllocation",
+    "description": "Grants permission to modify the description of an IPAM pool allocation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ipam-pool-allocation",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "modifyipamprefixlistresolver": {
     "name": "ModifyIpamPrefixListResolver",
     "description": "Grants permission to modify an IPAM prefix list resolver",
@@ -17181,6 +17391,16 @@
     ],
     "dependentActions": []
   },
+  "modifymanagedresourcevisibility": {
+    "name": "ModifyManagedResourceVisibility",
+    "description": "Grants permission to modify the managed resource visibility configuration for the account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "modifynetworkinterfaceattribute": {
     "name": "ModifyNetworkInterfaceAttribute",
     "description": "Grants permission to modify an attribute of a network interface",
@@ -19036,6 +19256,27 @@
     ],
     "dependentActions": []
   },
+  "rejecttransitgatewayclientvpnattachment": {
+    "name": "RejectTransitGatewayClientVpnAttachment",
+    "description": "Grants permission to reject a transit gateway attachment request for a Client VPN endpoint",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "transit-gateway-attachment",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:transitGatewayAttachmentId"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "rejecttransitgatewaymulticastdomainassociations": {
     "name": "RejectTransitGatewayMulticastDomainAssociations",
     "description": "Grants permission to reject requests to associate cross-account subnets with a transit gateway multicast domain",
@@ -21066,6 +21307,16 @@
     ],
     "dependentActions": []
   },
+  "updatecapacitymanagermonitoredtagkeys": {
+    "name": "UpdateCapacityManagerMonitoredTagKeys",
+    "description": "Grants permission to activate or deactivate tag keys for monitoring by EC2 Capacity Manager",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "updatecapacitymanagerorganizationsaccess": {
     "name": "UpdateCapacityManagerOrganizationsAccess",
     "description": "Grants permission to update the Organizations access setting for EC2 Capacity Manager",

package/data/actions/glue.json

@@ -1581,6 +1581,24 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "catalog",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "database",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -2947,6 +2965,24 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "catalog",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "database",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -4095,6 +4131,24 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "catalog",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "database",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],

package/data/actions/transform-custom.json

@@ -1,4 +1,20 @@
 {
+  "batchcreatefindings": {
+    "name": "BatchCreateFindings",
+    "description": "Grants permission to invoke BatchCreateFindings on AWS Transform custom",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchupdatefindings": {
+    "name": "BatchUpdateFindings",
+    "description": "Grants permission to invoke BatchUpdateFindings on AWS Transform custom",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "completetransformationpackageupload": {
     "name": "CompleteTransformationPackageUpload",
     "description": "Grants permission to invoke CompleteTransformationPackageUpload on AWS Transform custom",
@@ -24,6 +40,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createanalysis": {
+    "name": "CreateAnalysis",
+    "description": "Grants permission to invoke CreateAnalysis on AWS Transform custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "analysis",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createcampaign": {
     "name": "CreateCampaign",
     "description": "Grants permission to invoke CreateCampaign on AWS Transform custom",
@@ -43,6 +78,63 @@
     ],
     "dependentActions": []
   },
+  "createremediation": {
+    "name": "CreateRemediation",
+    "description": "Grants permission to invoke CreateRemediation on AWS Transform custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "remediation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createrepository": {
+    "name": "CreateRepository",
+    "description": "Grants permission to invoke CreateRepository on AWS Transform custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createsource": {
+    "name": "CreateSource",
+    "description": "Grants permission to invoke CreateSource on AWS Transform custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "source",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createtransformationpackageurl": {
     "name": "CreateTransformationPackageUrl",
     "description": "Grants permission to invoke CreateTransformationPackageUrl on AWS Transform custom",
@@ -62,6 +154,23 @@
     ],
     "dependentActions": []
   },
+  "deleteanalysis": {
+    "name": "DeleteAnalysis",
+    "description": "Grants permission to invoke DeleteAnalysis on AWS Transform custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "analysis",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deletecampaign": {
     "name": "DeleteCampaign",
     "description": "Grants permission to invoke DeleteCampaign on AWS Transform custom",
@@ -79,6 +188,23 @@
     ],
     "dependentActions": []
   },
+  "deletefinding": {
+    "name": "DeleteFinding",
+    "description": "Grants permission to invoke DeleteFinding on AWS Transform custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "finding",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deleteknowledgeitem": {
     "name": "DeleteKnowledgeItem",
     "description": "Grants permission to invoke DeleteKnowledgeItem on AWS Transform custom",
@@ -96,6 +222,57 @@
     ],
     "dependentActions": []
   },
+  "deleteremediation": {
+    "name": "DeleteRemediation",
+    "description": "Grants permission to invoke DeleteRemediation on AWS Transform custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "remediation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "deleterepository": {
+    "name": "DeleteRepository",
+    "description": "Grants permission to invoke DeleteRepository on AWS Transform custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "deletesource": {
+    "name": "DeleteSource",
+    "description": "Grants permission to invoke DeleteSource on AWS Transform custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "source",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deletetransformationpackage": {
     "name": "DeleteTransformationPackage",
     "description": "Grants permission to invoke DeleteTransformationPackage on AWS Transform custom",
@@ -130,6 +307,23 @@
     ],
     "dependentActions": []
   },
+  "getanalysis": {
+    "name": "GetAnalysis",
+    "description": "Grants permission to invoke GetAnalysis on AWS Transform custom",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "analysis",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "getcampaign": {
     "name": "GetCampaign",
     "description": "Grants permission to invoke GetCampaign on AWS Transform custom",
@@ -147,6 +341,31 @@
     ],
     "dependentActions": []
   },
+  "getfinding": {
+    "name": "GetFinding",
+    "description": "Grants permission to invoke GetFinding on AWS Transform custom",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "finding",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "getfindinggroups": {
+    "name": "GetFindingGroups",
+    "description": "Grants permission to invoke GetFindingGroups on AWS Transform custom",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getknowledgeitem": {
     "name": "GetKnowledgeItem",
     "description": "Grants permission to invoke GetKnowledgeItem on AWS Transform custom",
@@ -164,6 +383,57 @@
     ],
     "dependentActions": []
   },
+  "getremediation": {
+    "name": "GetRemediation",
+    "description": "Grants permission to invoke GetRemediation on AWS Transform custom",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "remediation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "getrepository": {
+    "name": "GetRepository",
+    "description": "Grants permission to invoke GetRepository on AWS Transform custom",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "getsource": {
+    "name": "GetSource",
+    "description": "Grants permission to invoke GetSource on AWS Transform custom",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "source",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "gettransformationpackageurl": {
     "name": "GetTransformationPackageUrl",
     "description": "Grants permission to invoke GetTransformationPackageUrl on AWS Transform custom",
@@ -181,6 +451,14 @@
     ],
     "dependentActions": []
   },
+  "listanalyses": {
+    "name": "ListAnalyses",
+    "description": "Grants permission to invoke ListAnalyses on AWS Transform custom",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcampaignrepositories": {
     "name": "ListCampaignRepositories",
     "description": "Grants permission to invoke ListCampaignRepositories on AWS Transform custom",
@@ -206,6 +484,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listfindings": {
+    "name": "ListFindings",
+    "description": "Grants permission to invoke ListFindings on AWS Transform custom",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listknowledgeitems": {
     "name": "ListKnowledgeItems",
     "description": "Grants permission to invoke ListKnowledgeItems on AWS Transform custom",
@@ -214,6 +500,30 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listremediations": {
+    "name": "ListRemediations",
+    "description": "Grants permission to invoke ListRemediations on AWS Transform custom",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listrepositories": {
+    "name": "ListRepositories",
+    "description": "Grants permission to invoke ListRepositories on AWS Transform custom",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listsources": {
+    "name": "ListSources",
+    "description": "Grants permission to invoke ListSources on AWS Transform custom",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to invoke ListTagsForResource on AWS Transform custom",
@@ -230,17 +540,63 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listtransformationpackageshares": {
+    "name": "ListTransformationPackageShares",
+    "description": "Grants permission to list active shares of a Transformation Package",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "package",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "sharetransformationpackage": {
+    "name": "ShareTransformationPackage",
+    "description": "Grants permission to share a Transformation Package with another AWS account or AWS Organization",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "package",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to invoke TagResource on AWS Transform custom",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "analysis",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "campaign",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "finding",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "knowledge-item",
         "required": false,
@@ -252,6 +608,24 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "remediation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "repository",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "source",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -261,17 +635,46 @@
     ],
     "dependentActions": []
   },
+  "unsharetransformationpackage": {
+    "name": "UnshareTransformationPackage",
+    "description": "Grants permission to revoke an existing share of a Transformation Package",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "package",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to invoke UntagResource on AWS Transform custom",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "analysis",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "campaign",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "finding",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "knowledge-item",
         "required": false,
@@ -283,6 +686,24 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "remediation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "repository",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "source",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -290,6 +711,23 @@
     ],
     "dependentActions": []
   },
+  "updateanalysis": {
+    "name": "UpdateAnalysis",
+    "description": "Grants permission to invoke UpdateAnalysis on AWS Transform custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "analysis",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "updatecampaign": {
     "name": "UpdateCampaign",
     "description": "Grants permission to invoke UpdateCampaign on AWS Transform custom",
@@ -357,5 +795,56 @@
       "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
+  },
+  "updateremediation": {
+    "name": "UpdateRemediation",
+    "description": "Grants permission to invoke UpdateRemediation on AWS Transform custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "remediation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "updaterepository": {
+    "name": "UpdateRepository",
+    "description": "Grants permission to invoke UpdateRepository on AWS Transform custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "updatesource": {
+    "name": "UpdateSource",
+    "description": "Grants permission to invoke UpdateSource on AWS Transform custom",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "source",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
   }
 }

package/data/conditionKeys/aws-marketplace.json

@@ -4,6 +4,11 @@
     "description": "Filters access by the Intent parameter in the StartChangeSet request",
     "type": "String"
   },
+  "aws-marketplace:verificationtype": {
+    "key": "aws-marketplace:VerificationType",
+    "description": "Filters access by the verification type for verification process operations (StartVerification, GetVerification, ListVerifications). Valid values: BusinessVerification",
+    "type": "String"
+  },
   "aws:requesttag/${tagkey}": {
     "key": "aws:RequestTag/${TagKey}",
     "description": "Filters access by tags that are passed in the request",

package/data/resourceTypes/aws-marketplace.json

@@ -33,6 +33,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "verificationevidence": {
+    "key": "VerificationEvidence",
+    "arn": "arn:${Partition}:aws-marketplace:${Region}:${Account}:verification-type/${VerificationType}/verification-evidence/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "deploymentparameter": {
     "key": "DeploymentParameter",
     "arn": "arn:${Partition}:aws-marketplace:${Region}:${Account}:DeploymentParameter:catalogs/${CatalogName}/products/${ProductId}/${ResourceId}",

package/data/resourceTypes/ec2.json

@@ -41,6 +41,19 @@
       "ec2:ResourceTag/${TagKey}"
     ]
   },
+  "capacity-reservation-cancellation-quote": {
+    "key": "capacity-reservation-cancellation-quote",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-cancellation-quote/${CapacityReservationCancellationQuoteId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
   "capacity-reservation-fleet": {
     "key": "capacity-reservation-fleet",
     "arn": "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-fleet/${CapacityReservationFleetId}",
@@ -437,6 +450,19 @@
       "ec2:ResourceTag/${TagKey}"
     ]
   },
+  "ipam-pool-allocation": {
+    "key": "ipam-pool-allocation",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:ipam-pool-allocation/${IpamPoolAllocationId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
   "ipam-pool": {
     "key": "ipam-pool",
     "arn": "arn:${Partition}:ec2::${Account}:ipam-pool/${IpamPoolId}",

package/data/resourceTypes/transform-custom.json

@@ -1,4 +1,11 @@
 {
+  "analysis": {
+    "key": "analysis",
+    "arn": "arn:${Partition}:transform-custom:${Region}:${Account}:analysis/${AnalysisId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "campaign": {
     "key": "campaign",
     "arn": "arn:${Partition}:transform-custom:${Region}:${Account}:campaign/${Name}",
@@ -6,6 +13,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "finding": {
+    "key": "finding",
+    "arn": "arn:${Partition}:transform-custom:${Region}:${Account}:finding/${FindingId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "knowledge-item": {
     "key": "knowledge-item",
     "arn": "arn:${Partition}:transform-custom:${Region}:${Account}:package/${TransformationPackageName}/knowledge-item/${Id}",
@@ -19,5 +33,26 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "remediation": {
+    "key": "remediation",
+    "arn": "arn:${Partition}:transform-custom:${Region}:${Account}:remediation/${RemediationId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "repository": {
+    "key": "repository",
+    "arn": "arn:${Partition}:transform-custom:${Region}:${Account}:repository/${RepositoryId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "source": {
+    "key": "source",
+    "arn": "arn:${Partition}:transform-custom:${Region}:${Account}:source/${Name}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.19.202606051",
+  "version": "0.19.202606091",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-06-05T06:08:07.742Z",
+  "updatedAt": "2026-06-09T06:01:17.426Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",