@cloud-copilot/iam-data 0.19.202606061 → 0.19.202606101

package/data/actions/bedrock-mantle.json

@@ -184,7 +184,8 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "bedrock-mantle:DataRetentionMode"
     ],
     "dependentActions": []
   },
@@ -327,6 +328,14 @@
     ],
     "dependentActions": []
   },
+  "getaccountdataretention": {
+    "name": "GetAccountDataRetention",
+    "description": "Grants permission to retrieve the account-wide data retention setting",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getcustomizedmodel": {
     "name": "GetCustomizedModel",
     "description": "Grants permission to get customized model",
@@ -594,6 +603,16 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putaccountdataretention": {
+    "name": "PutAccountDataRetention",
+    "description": "Grants permission to set the account-wide data retention setting",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "bedrock-mantle:DataRetentionMode"
+    ],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource",
@@ -673,12 +692,14 @@
       {
         "name": "project",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
+      "bedrock-mantle:DataRetentionMode"
     ],
     "dependentActions": []
   },

package/data/actions/bedrock.json

@@ -1334,6 +1334,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getaccountdataretention": {
+    "name": "GetAccountDataRetention",
+    "description": "Returns the account-wide data retention mode for Amazon Bedrock",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getagent": {
     "name": "GetAgent",
     "description": "Grants permission to retrieve an existing agent",
@@ -3356,6 +3364,16 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putaccountdataretention": {
+    "name": "PutAccountDataRetention",
+    "description": "Sets the account-wide data retention mode for Amazon Bedrock",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "bedrock:DataRetentionMode"
+    ],
+    "dependentActions": []
+  },
   "putenforcedguardrailconfiguration": {
     "name": "PutEnforcedGuardrailConfiguration",
     "description": "Grants permission to set account-level enforced guardrail configuration",

package/data/actions/ec2.json

@@ -83,6 +83,27 @@
     ],
     "dependentActions": []
   },
+  "accepttransitgatewayclientvpnattachment": {
+    "name": "AcceptTransitGatewayClientVpnAttachment",
+    "description": "Grants permission to accept a transit gateway attachment request for a Client VPN endpoint",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "transit-gateway-attachment",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:transitGatewayAttachmentId"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "accepttransitgatewaymulticastdomainassociations": {
     "name": "AcceptTransitGatewayMulticastDomainAssociations",
     "description": "Grants permission to accept a request to associate subnets with a transit gateway multicast domain",
@@ -301,6 +322,17 @@
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}"
         ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      },
+      {
+        "name": "ipam-pool-allocation",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
@@ -549,7 +581,7 @@
       },
       {
         "name": "subnet",
-        "required": true,
+        "required": false,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZoneId",
@@ -1541,6 +1573,15 @@
           "ec2:CapacityReservationFleet"
         ],
         "dependentActions": []
+      },
+      {
+        "name": "capacity-reservation-cancellation-quote",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1954,6 +1995,28 @@
     ],
     "dependentActions": []
   },
+  "createcapacityreservationcancellationquote": {
+    "name": "CreateCapacityReservationCancellationQuote",
+    "description": "Grants permission to generate a cancellation quote for a future-dated Capacity Reservation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacity-reservation-cancellation-quote",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "createcapacityreservationfleet": {
     "name": "CreateCapacityReservationFleet",
     "description": "Grants permission to create a Capacity Reservation Fleet",
@@ -2044,6 +2107,16 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "transit-gateway",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:transitGatewayId"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "vpc",
         "required": false,
@@ -2082,7 +2155,7 @@
       },
       {
         "name": "subnet",
-        "required": true,
+        "required": false,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZoneId",
@@ -4484,6 +4557,17 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "capacity-reservation-cancellation-quote",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "capacity-reservation-fleet",
         "required": false,
@@ -4838,6 +4922,17 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "ipam-pool-allocation",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "ipam-prefix-list-resolver",
         "required": false,
@@ -8327,6 +8422,17 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "capacity-reservation-cancellation-quote",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "capacity-reservation-fleet",
         "required": false,
@@ -8635,6 +8741,17 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "ipam-pool-allocation",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "ipam-prefix-list-resolver",
         "required": false,
@@ -9533,6 +9650,27 @@
     ],
     "dependentActions": []
   },
+  "deletetransitgatewayclientvpnattachment": {
+    "name": "DeleteTransitGatewayClientVpnAttachment",
+    "description": "Grants permission to delete a transit gateway attachment for a Client VPN endpoint",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "transit-gateway-attachment",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:transitGatewayAttachmentId"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "deletetransitgatewayconnect": {
     "name": "DeleteTransitGatewayConnect",
     "description": "Grants permission to delete a transit gateway connect attachment",
@@ -10507,6 +10645,16 @@
     ],
     "dependentActions": []
   },
+  "describecapacityreservationcancellationquotes": {
+    "name": "DescribeCapacityReservationCancellationQuotes",
+    "description": "Grants permission to describe one or more Capacity Reservation cancellation quotes",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describecapacityreservationfleets": {
     "name": "DescribeCapacityReservationFleets",
     "description": "Grants permission to describe one or more Capacity Reservation Fleets",
@@ -11210,6 +11358,16 @@
     ],
     "dependentActions": []
   },
+  "describeipampoolallocations": {
+    "name": "DescribeIpamPoolAllocations",
+    "description": "Grants permission to describe IPAM pool allocations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describeipampools": {
     "name": "DescribeIpamPools",
     "description": "Grants permission to describe Amazon VPC IP Address Manager (IPAM) pools",
@@ -14491,6 +14649,16 @@
     ],
     "dependentActions": []
   },
+  "getcapacitymanagermonitoredtagkeys": {
+    "name": "GetCapacityManagerMonitoredTagKeys",
+    "description": "Grants permission to retrieve the tag keys that are currently being monitored by EC2 Capacity Manager",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "getcapacityreservationusage": {
     "name": "GetCapacityReservationUsage",
     "description": "Grants permission to get usage information about a Capacity Reservation",
@@ -15182,6 +15350,16 @@
     ],
     "dependentActions": []
   },
+  "getmanagedresourcevisibility": {
+    "name": "GetManagedResourceVisibility",
+    "description": "Grants permission to retrieve the managed resource visibility configuration for the account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "getnetworkinsightsaccessscopeanalysisfindings": {
     "name": "GetNetworkInsightsAccessScopeAnalysisFindings",
     "description": "Grants permission to get the findings for one or more Network Access Scope analyses",
@@ -16208,6 +16386,16 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "transit-gateway",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:transitGatewayId"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "vpc",
         "required": false,
@@ -16963,6 +17151,28 @@
     ],
     "dependentActions": []
   },
+  "modifyipampoolallocation": {
+    "name": "ModifyIpamPoolAllocation",
+    "description": "Grants permission to modify the description of an IPAM pool allocation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ipam-pool-allocation",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "modifyipamprefixlistresolver": {
     "name": "ModifyIpamPrefixListResolver",
     "description": "Grants permission to modify an IPAM prefix list resolver",
@@ -17181,6 +17391,16 @@
     ],
     "dependentActions": []
   },
+  "modifymanagedresourcevisibility": {
+    "name": "ModifyManagedResourceVisibility",
+    "description": "Grants permission to modify the managed resource visibility configuration for the account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "modifynetworkinterfaceattribute": {
     "name": "ModifyNetworkInterfaceAttribute",
     "description": "Grants permission to modify an attribute of a network interface",
@@ -19036,6 +19256,27 @@
     ],
     "dependentActions": []
   },
+  "rejecttransitgatewayclientvpnattachment": {
+    "name": "RejectTransitGatewayClientVpnAttachment",
+    "description": "Grants permission to reject a transit gateway attachment request for a Client VPN endpoint",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "transit-gateway-attachment",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:transitGatewayAttachmentId"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "rejecttransitgatewaymulticastdomainassociations": {
     "name": "RejectTransitGatewayMulticastDomainAssociations",
     "description": "Grants permission to reject requests to associate cross-account subnets with a transit gateway multicast domain",
@@ -21066,6 +21307,16 @@
     ],
     "dependentActions": []
   },
+  "updatecapacitymanagermonitoredtagkeys": {
+    "name": "UpdateCapacityManagerMonitoredTagKeys",
+    "description": "Grants permission to activate or deactivate tag keys for monitoring by EC2 Capacity Manager",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "updatecapacitymanagerorganizationsaccess": {
     "name": "UpdateCapacityManagerOrganizationsAccess",
     "description": "Grants permission to update the Organizations access setting for EC2 Capacity Manager",

package/data/actions/events.json

@@ -675,7 +675,13 @@
     "resourceTypes": [
       {
         "name": "event-bus",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "event-busv2",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -683,7 +689,9 @@
     "conditionKeys": [
       "events:detail-type",
       "events:source",
-      "events:eventBusInvocation"
+      "events:eventBusInvocation",
+      "events:SystemMetadata/EventGroupId",
+      "events:ResourceArn"
     ],
     "dependentActions": []
   },

package/data/actions/glue.json

@@ -1581,6 +1581,24 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "catalog",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "database",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -2947,6 +2965,24 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "catalog",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "database",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -4095,6 +4131,24 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "catalog",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "database",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],

package/data/actions/inspector2.json

@@ -605,6 +605,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "Connector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "Filter",
         "required": false,
@@ -642,6 +648,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "Connector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "Filter",
         "required": false,

package/data/actions/secretsmanager.json

@@ -2,7 +2,7 @@
   "batchgetsecretvalue": {
     "name": "BatchGetSecretValue",
     "description": "Grants permission to retrieve and decrypt a list of secrets",
-    "accessLevel": "List",
+    "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []

package/data/conditionKeys/bedrock-mantle.json

@@ -24,6 +24,11 @@
     "description": "Filters access by the ARN of the customized model being associated or referenced in cross-resource operations",
     "type": "String"
   },
+  "bedrock-mantle:dataretentionmode": {
+    "key": "bedrock-mantle:DataRetentionMode",
+    "description": "Filters access by the data retention mode being set on a project or account",
+    "type": "String"
+  },
   "bedrock-mantle:files": {
     "key": "bedrock-mantle:Files",
     "description": "Filters access by the specified file identifiers",

package/data/conditionKeys/bedrock.json

@@ -19,6 +19,11 @@
     "description": "Filters access by the Short-term or Long-term bearer tokens",
     "type": "String"
   },
+  "bedrock:dataretentionmode": {
+    "key": "bedrock:DataRetentionMode",
+    "description": "Filters access by the specified Data Retention Mode",
+    "type": "String"
+  },
   "bedrock:guardrailidentifier": {
     "key": "bedrock:GuardrailIdentifier",
     "description": "Filters access by the GuardrailIdentifier containing the GuardrailArn or the GuardrailArn:NumericVersion",

package/data/resourceTypes/ec2.json

@@ -41,6 +41,19 @@
       "ec2:ResourceTag/${TagKey}"
     ]
   },
+  "capacity-reservation-cancellation-quote": {
+    "key": "capacity-reservation-cancellation-quote",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-cancellation-quote/${CapacityReservationCancellationQuoteId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
   "capacity-reservation-fleet": {
     "key": "capacity-reservation-fleet",
     "arn": "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-fleet/${CapacityReservationFleetId}",
@@ -437,6 +450,19 @@
       "ec2:ResourceTag/${TagKey}"
     ]
   },
+  "ipam-pool-allocation": {
+    "key": "ipam-pool-allocation",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:ipam-pool-allocation/${IpamPoolAllocationId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
   "ipam-pool": {
     "key": "ipam-pool",
     "arn": "arn:${Partition}:ec2::${Account}:ipam-pool/${IpamPoolId}",

package/data/resourceTypes/inspector2.json

@@ -30,5 +30,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "connector": {
+    "key": "Connector",
+    "arn": "arn:${Partition}:inspector2:${Region}:${Account}:connector/${ConnectorId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.19.202606061",
+  "version": "0.19.202606101",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-06-06T05:58:26.888Z",
+  "updatedAt": "2026-06-10T06:07:09.481Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",