@cloud-copilot/iam-data 0.19.202606171 → 0.19.202606201

package/data/actions/agentaccess-mcp.json

@@ -1,4 +1,24 @@
 {
+  "callforwardedtool": {
+    "name": "CallForwardedTool",
+    "description": "Grants permission to invoke a forwarded tool on a remote instance",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "agentaccess-mcp:StackArn"
+    ],
+    "dependentActions": []
+  },
+  "checkconnectionstatus": {
+    "name": "CheckConnectionStatus",
+    "description": "Grants permission to check the connection status of a streaming session",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "agentaccess-mcp:StackArn"
+    ],
+    "dependentActions": []
+  },
   "doubleclick": {
     "name": "DoubleClick",
     "description": "Grants permission to perform double click at coordinates",

package/data/actions/bedrock-agentcore.json

@@ -345,10 +345,32 @@
     ],
     "dependentActions": [
       "bedrock-agentcore:CreateAgentRuntime",
+      "bedrock-agentcore:CreateMemory",
       "bedrock-agentcore:GetAgentRuntime",
+      "bedrock-agentcore:GetMemory",
       "iam:PassRole"
     ]
   },
+  "createharnessendpoint": {
+    "name": "CreateHarnessEndpoint",
+    "description": "Grants permission to create a new harness endpoint",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "harness",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "bedrock-agentcore:CreateAgentRuntimeEndpoint"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "creatememory": {
     "name": "CreateMemory",
     "description": "Grants permission to create a Memory resource",
@@ -796,10 +818,35 @@
     "conditionKeys": [],
     "dependentActions": [
       "bedrock-agentcore:DeleteAgentRuntime",
+      "bedrock-agentcore:DeleteMemory",
       "bedrock-agentcore:GetAgentRuntime",
+      "bedrock-agentcore:GetMemory",
       "iam:PassRole"
     ]
   },
+  "deleteharnessendpoint": {
+    "name": "DeleteHarnessEndpoint",
+    "description": "Grants permission to delete a harness endpoint",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "harness",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "bedrock-agentcore:DeleteAgentRuntimeEndpoint"
+        ]
+      },
+      {
+        "name": "harness-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletememory": {
     "name": "DeleteMemory",
     "description": "Grants permission to delete a Memory resource",
@@ -1091,6 +1138,63 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gatewayassociatewebacl": {
+    "name": "GatewayAssociateWebACL",
+    "isPermissionOnly": true,
+    "description": "Grants permission to associate an AWS WAF Web ACL with an AgentCore Gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gatewaydisassociatewebacl": {
+    "name": "GatewayDisassociateWebACL",
+    "isPermissionOnly": true,
+    "description": "Grants permission to remove the AWS WAF Web ACL association from an AgentCore Gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gatewaygetwebaclforresource": {
+    "name": "GatewayGetWebACLForResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to retrieve the AWS WAF Web ACL ARN currently associated with an AgentCore Gateway",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gatewaylistresourcesforwebacl": {
+    "name": "GatewayListResourcesForWebACL",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list AgentCore Gateways associated with an AWS WAF Web ACL",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getabtest": {
     "name": "GetABTest",
     "description": "Grants permission to get details of an A/B test",
@@ -1409,6 +1513,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getharnessendpoint": {
+    "name": "GetHarnessEndpoint",
+    "description": "Grants permission to get details of a harness endpoint",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "harness",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "harness-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getmemory": {
     "name": "GetMemory",
     "description": "Grants permission to fetch details for a Memory resource",
@@ -2135,13 +2260,19 @@
         "name": "harness",
         "required": true,
         "conditionKeys": [],
+        "dependentActions": [
+          "bedrock-agentcore:InvokeAgentRuntime"
+        ]
+      },
+      {
+        "name": "harness-endpoint",
+        "required": true,
+        "conditionKeys": [],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "bedrock-agentcore:InvokeAgentRuntime"
-    ]
+    "dependentActions": []
   },
   "invokeregistrymcp": {
     "name": "InvokeRegistryMcp",
@@ -2158,6 +2289,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "invokewebsearch": {
+    "name": "InvokeWebSearch",
+    "isPermissionOnly": true,
+    "description": "Grants permission to invoke a web search target",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "web-search",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listabtests": {
     "name": "ListABTests",
     "description": "Grants permission to list A/B tests",
@@ -2374,6 +2521,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listharnessendpoints": {
+    "name": "ListHarnessEndpoints",
+    "description": "Grants permission to list harness endpoints",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listharnesses": {
     "name": "ListHarnesses",
     "description": "Grants permission to list harnesses",
@@ -3611,11 +3766,37 @@
     ],
     "conditionKeys": [],
     "dependentActions": [
+      "bedrock-agentcore:CreateMemory",
       "bedrock-agentcore:GetAgentRuntime",
+      "bedrock-agentcore:GetMemory",
       "bedrock-agentcore:UpdateAgentRuntime",
+      "bedrock-agentcore:UpdateMemory",
       "iam:PassRole"
     ]
   },
+  "updateharnessendpoint": {
+    "name": "UpdateHarnessEndpoint",
+    "description": "Grants permission to update harness endpoint",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "harness",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "bedrock-agentcore:UpdateAgentRuntimeEndpoint"
+        ]
+      },
+      {
+        "name": "harness-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatememory": {
     "name": "UpdateMemory",
     "description": "Grants permission to update a Memory resource",

package/data/actions/bedrock.json

@@ -1,4 +1,12 @@
 {
+  "agenticretrievestream": {
+    "name": "AgenticRetrieveStream",
+    "description": "Grants permission to perform agentic retrieve with streaming from retrievers",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "allowvendedlogdeliveryforresource": {
     "name": "AllowVendedLogDeliveryForResource",
     "isPermissionOnly": true,
@@ -83,6 +91,21 @@
     ],
     "dependentActions": []
   },
+  "batchdeleteadvancedpromptoptimizationjob": {
+    "name": "BatchDeleteAdvancedPromptOptimizationJob",
+    "description": "Grants permission to delete one or more advanced prompt optimization jobs",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "advanced-prompt-optimization-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchdeleteevaluationjob": {
     "name": "BatchDeleteEvaluationJob",
     "description": "Grants permission to batch delete list of bedrock evaluation jobs",
@@ -153,6 +176,17 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createadvancedpromptoptimizationjob": {
+    "name": "CreateAdvancedPromptOptimizationJob",
+    "description": "Grants permission to create an advanced prompt optimization job",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createagent": {
     "name": "CreateAgent",
     "description": "Grants permission to create a new agent and a test agent alias pointing to the DRAFT agent version",
@@ -1204,6 +1238,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "knowledge-base",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -1342,6 +1382,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getadvancedpromptoptimizationjob": {
+    "name": "GetAdvancedPromptOptimizationJob",
+    "description": "Grants permission to get information about an advanced prompt optimization job",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "advanced-prompt-optimization-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getagent": {
     "name": "GetAgent",
     "description": "Grants permission to retrieve an existing agent",
@@ -1744,6 +1799,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdocumentcontent": {
+    "name": "GetDocumentContent",
+    "description": "Grants permission to retrieve a document",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getevaluationjob": {
     "name": "GetEvaluationJob",
     "description": "Grants permission to get the properties associated with a evaluation job. Use this operation to get the status of a evaluation job",
@@ -2170,6 +2233,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "knowledge-base",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -2389,6 +2458,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "invokeguardrailchecks": {
+    "name": "InvokeGuardrailChecks",
+    "description": "Grants permission to invoke guardrail checks",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "invokeinlineagent": {
     "name": "InvokeInlineAgent",
     "description": "Grants permission to send user input (text-only) to the inline agent for Bedrock",
@@ -2570,6 +2647,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listadvancedpromptoptimizationjobs": {
+    "name": "ListAdvancedPromptOptimizationJobs",
+    "description": "Grants permission to list the advanced prompt optimization jobs in your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listagentactiongroups": {
     "name": "ListAgentActionGroups",
     "description": "Grants permission to list action groups in an agent",
@@ -3142,6 +3227,12 @@
     "description": "Grants permission to list tags for a Bedrock resource",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "advanced-prompt-optimization-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "agent",
         "required": true,
@@ -3436,6 +3527,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "knowledge-base",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -3586,6 +3683,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "stopadvancedpromptoptimizationjob": {
+    "name": "StopAdvancedPromptOptimizationJob",
+    "description": "Grants permission to stop an advanced prompt optimization job while in progress",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "advanced-prompt-optimization-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "stopevaluationjob": {
     "name": "StopEvaluationJob",
     "description": "Grants permission to stop a evaluation job while in progress",
@@ -3678,6 +3790,12 @@
     "description": "Grants permission to Tag a Bedrock resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "advanced-prompt-optimization-job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "agent",
         "required": false,
@@ -3870,6 +3988,12 @@
     "description": "Grants permission to Untag a Bedrock resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "advanced-prompt-optimization-job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "agent",
         "required": false,