@cloud-copilot/iam-data 0.19.202606181 → 0.19.202606201

package/data/actions/agentaccess-mcp.json

@@ -1,4 +1,24 @@
 {
+  "callforwardedtool": {
+    "name": "CallForwardedTool",
+    "description": "Grants permission to invoke a forwarded tool on a remote instance",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "agentaccess-mcp:StackArn"
+    ],
+    "dependentActions": []
+  },
+  "checkconnectionstatus": {
+    "name": "CheckConnectionStatus",
+    "description": "Grants permission to check the connection status of a streaming session",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "agentaccess-mcp:StackArn"
+    ],
+    "dependentActions": []
+  },
   "doubleclick": {
     "name": "DoubleClick",
     "description": "Grants permission to perform double click at coordinates",

package/data/actions/cloudwatch.json

@@ -70,7 +70,11 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "logs:CreateScheduledQuery",
+      "logs:DeleteScheduledQuery",
+      "logs:GetScheduledQuery"
+    ]
   },
   "deleteanomalydetector": {
     "name": "DeleteAnomalyDetector",
@@ -308,6 +312,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdataset": {
+    "name": "GetDataset",
+    "description": "Grants permission to get a dataset",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "getinsightrulereport": {
     "name": "GetInsightRuleReport",
     "description": "Grants permission to return the top-N report of unique contributors over a time range for a given insight rule",
@@ -325,10 +346,19 @@
   },
   "getmetricdata": {
     "name": "GetMetricData",
-    "description": "Grants permission to retrieve batch amounts of CloudWatch metric data and perform metric math on retrieved data",
+    "description": "Grants permission to retrieve batch amounts of CloudWatch classic metric data and perform metric math on retrieved data; and grants permission to retrieve OTLP metric data using PromQL",
     "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getmetricstatistics": {
@@ -499,8 +529,17 @@
     "name": "ListMetrics",
     "description": "Grants permission to retrieve a list of valid metrics stored for the AWS account owner",
     "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "listservicelevelobjectives": {
@@ -527,31 +566,65 @@
       {
         "name": "alarm",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "alarm-mute-rule",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "dashboard",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "dataset",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "insight-rule",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "metric-stream",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "service",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "slo",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -585,6 +658,15 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-Dataset",
+        "resourceTypes": [
+          {
+            "name": "dataset",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-InsightRule",
         "resourceTypes": [
@@ -594,6 +676,24 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-MetricStream",
+        "resourceTypes": [
+          {
+            "name": "metric-stream",
+            "required": true
+          }
+        ]
+      },
+      {
+        "name": "CloudWatch-Service",
+        "resourceTypes": [
+          {
+            "name": "service",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-ServiceLevelObjective",
         "resourceTypes": [
@@ -693,6 +793,31 @@
     ],
     "dependentActions": []
   },
+  "putlogalarm": {
+    "name": "PutLogAlarm",
+    "description": "Grants permission to create or update a log-based alarm and associate it with a CloudWatch Logs Insights scheduled query",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "alarm",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:PassRole",
+          "logs:CreateScheduledQuery",
+          "logs:DeleteScheduledQuery",
+          "logs:GetScheduledQuery",
+          "logs:UpdateScheduledQuery"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "cloudwatch:AlarmActions"
+    ],
+    "dependentActions": []
+  },
   "putmanagedinsightrules": {
     "name": "PutManagedInsightRules",
     "description": "Grants permission to create managed Insight Rules",
@@ -715,6 +840,14 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "dataset",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -726,9 +859,18 @@
   },
   "putmetricdata": {
     "name": "PutMetricData",
-    "description": "Grants permission to publish metric data points to Amazon CloudWatch",
+    "description": "Grants permission to publish metric data points to Amazon CloudWatch using CloudWatch and OTLP formats",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "cloudwatch:namespace"
     ],
@@ -823,31 +965,65 @@
       {
         "name": "alarm",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "alarm-mute-rule",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "dashboard",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "dataset",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "insight-rule",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "metric-stream",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "service",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "slo",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -884,6 +1060,15 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-Dataset",
+        "resourceTypes": [
+          {
+            "name": "dataset",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-InsightRule",
         "resourceTypes": [
@@ -893,6 +1078,24 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-MetricStream",
+        "resourceTypes": [
+          {
+            "name": "metric-stream",
+            "required": true
+          }
+        ]
+      },
+      {
+        "name": "CloudWatch-Service",
+        "resourceTypes": [
+          {
+            "name": "service",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-ServiceLevelObjective",
         "resourceTypes": [
@@ -912,31 +1115,65 @@
       {
         "name": "alarm",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "alarm-mute-rule",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "dashboard",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "dataset",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "insight-rule",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "metric-stream",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "service",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "slo",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -972,6 +1209,15 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-Dataset",
+        "resourceTypes": [
+          {
+            "name": "dataset",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-InsightRule",
         "resourceTypes": [
@@ -981,6 +1227,24 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-MetricStream",
+        "resourceTypes": [
+          {
+            "name": "metric-stream",
+            "required": true
+          }
+        ]
+      },
+      {
+        "name": "CloudWatch-Service",
+        "resourceTypes": [
+          {
+            "name": "service",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-ServiceLevelObjective",
         "resourceTypes": [

package/data/actions/datazone.json

@@ -730,6 +730,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getcompute": {
+    "name": "GetCompute",
+    "description": "Grants permission to get compute",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getconnection": {
     "name": "GetConnection",
     "description": "Grants permission to get connections",
@@ -1620,6 +1628,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startcompute": {
+    "name": "StartCompute",
+    "description": "Grants permission to start compute",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startconversation": {
     "name": "StartConversation",
     "description": "Grants permission to start conversations",
@@ -1668,6 +1684,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startnotebooksync": {
+    "name": "StartNotebookSync",
+    "description": "Grants permission to start notebook sync",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopcompute": {
+    "name": "StopCompute",
+    "description": "Grants permission to stop compute",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "stopmetadatagenerationrun": {
     "name": "StopMetadataGenerationRun",
     "description": "Grants permission to stop metadata generation run",

package/data/actions/ecs.json

@@ -1528,6 +1528,7 @@
       "ecs:propagate-tags",
       "ecs:subnet",
       "ecs:task-cpu",
+      "ecs:task-definition",
       "ecs:task-memory"
     ],
     "dependentActions": []

package/data/actions/eks.json

@@ -157,7 +157,8 @@
       "eks:deletionProtection",
       "eks:controlPlaneScalingTier",
       "eks:encryptionConfigProviderKeyArns",
-      "eks:zonalShiftEnabled"
+      "eks:zonalShiftEnabled",
+      "eks:controlPlaneEgressMode"
     ],
     "dependentActions": []
   },
@@ -1163,7 +1164,8 @@
       "eks:endpointPrivateAccess",
       "eks:deletionProtection",
       "eks:controlPlaneScalingTier",
-      "eks:zonalShiftEnabled"
+      "eks:zonalShiftEnabled",
+      "eks:controlPlaneEgressMode"
     ],
     "dependentActions": []
   },

package/data/actions/mq.json

@@ -225,6 +225,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describesharedresources": {
+    "name": "DescribeSharedResources",
+    "description": "Grants permission to return the resources shared to a broker",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "brokers",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeuser": {
     "name": "DescribeUser",
     "description": "Grants permission to return information about an ActiveMQ user",

package/data/actions/quicksight.json

@@ -17,6 +17,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "batchassignlimitsprofile": {
+    "name": "BatchAssignLimitsProfile",
+    "description": "Grants permission to assign a limits profile to targets",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "limitsProfile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchcreatetopicreviewedanswer": {
     "name": "BatchCreateTopicReviewedAnswer",
     "description": "Grants permission to create reviewed answers for a topic",
@@ -77,6 +92,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "batchunassignlimitsprofile": {
+    "name": "BatchUnassignLimitsProfile",
+    "description": "Grants permission to unassign a limits profile from targets",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "limitsProfile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchupdatepreferences": {
     "name": "BatchUpdatePreferences",
     "isPermissionOnly": true,
@@ -449,6 +479,24 @@
     ],
     "dependentActions": []
   },
+  "createlimitsprofile": {
+    "name": "CreateLimitsProfile",
+    "description": "Grants permission to create a limits profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "limitsProfile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createnamespace": {
     "name": "CreateNamespace",
     "description": "Grants permission to create an QuickSight namespace",
@@ -1025,6 +1073,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletelimitsprofile": {
+    "name": "DeleteLimitsProfile",
+    "description": "Grants permission to delete a limits profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "limitsProfile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletenamespace": {
     "name": "DeleteNamespace",
     "description": "Grants permission to delete a QuickSight namespace",
@@ -1430,6 +1493,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeautomationgroup": {
+    "name": "DescribeAutomationGroup",
+    "description": "Grants permission to describe an automation group",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "automationGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeautomationgrouppermissions": {
+    "name": "DescribeAutomationGroupPermissions",
+    "description": "Grants permission to describe permissions for an automation group",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "automationGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeautomationjob": {
     "name": "DescribeAutomationJob",
     "description": "Grants permission to describe an automation job",
@@ -1873,6 +1966,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describelimitsprofile": {
+    "name": "DescribeLimitsProfile",
+    "description": "Grants permission to describe a limits profile",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "limitsProfile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describenamespace": {
     "name": "DescribeNamespace",
     "description": "Grants permission to describe a QuickSight namespace",
@@ -2425,6 +2533,29 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listassignmentsforprincipal": {
+    "name": "ListAssignmentsForPrincipal",
+    "description": "Grants permission to list limits profile assignments for a principal",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "limitsProfile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautomationgroups": {
+    "name": "ListAutomationGroups",
+    "description": "Grants permission to list all automation groups in an account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listbrands": {
     "name": "ListBrands",
     "description": "Grants permission to lists all brands in an Amazon QuickSight account",
@@ -2684,6 +2815,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listlimitsprofiles": {
+    "name": "ListLimitsProfiles",
+    "description": "Grants permission to list limits profiles",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "limitsProfile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listnamespaces": {
     "name": "ListNamespaces",
     "description": "Grants permission to lists all namespaces in a QuickSight account",
@@ -2703,6 +2849,21 @@
     ],
     "dependentActions": []
   },
+  "listprofileassignments": {
+    "name": "ListProfileAssignments",
+    "description": "Grants permission to list assignments for a limits profile",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "limitsProfile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listrefreshschedules": {
     "name": "ListRefreshSchedules",
     "description": "Grants permission to list all refresh schedules on a dataset",
@@ -3235,6 +3396,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "searchautomationgroups": {
+    "name": "SearchAutomationGroups",
+    "description": "Grants permission to search for automation groups in an account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "searchdashboards": {
     "name": "SearchDashboards",
     "description": "Grants permission to search for a sub-set of QuickSight Dashboards",
@@ -3875,6 +4044,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateautomationgrouppermissions": {
+    "name": "UpdateAutomationGroupPermissions",
+    "description": "Grants permission to update permissions for an automation group",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "automationGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatebrand": {
     "name": "UpdateBrand",
     "description": "Grants permission to update a brand",
@@ -4256,6 +4440,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatelimitsprofile": {
+    "name": "UpdateLimitsProfile",
+    "description": "Grants permission to update a limits profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "limitsProfile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateoauthclientapplication": {
     "name": "UpdateOAuthClientApplication",
     "description": "Grants permission to update an OAuth client application",

package/data/conditionKeys/cloudwatch.json

@@ -1,32 +1,32 @@
 {
   "aws:requesttag/${tagkey}": {
     "key": "aws:RequestTag/${TagKey}",
-    "description": "Filters actions based on the allowed set of values for each of the tags",
+    "description": "Filters access by the presence of tags in the request",
     "type": "String"
   },
   "aws:resourcetag/${tagkey}": {
     "key": "aws:ResourceTag/${TagKey}",
-    "description": "Filters actions based on tag-value associated with the resource",
+    "description": "Filters access by tags associated with the resource",
     "type": "String"
   },
   "aws:tagkeys": {
     "key": "aws:TagKeys",
-    "description": "Filters actions based on the presence of mandatory tags in the request",
+    "description": "Filters access by the presence of tags in the request",
     "type": "ArrayOfString"
   },
   "cloudwatch:alarmactions": {
     "key": "cloudwatch:AlarmActions",
-    "description": "Filters actions based on defined alarm actions",
+    "description": "Filters access by defined alarm actions",
     "type": "ArrayOfString"
   },
   "cloudwatch:namespace": {
     "key": "cloudwatch:namespace",
-    "description": "Filters actions based on the presence of optional namespace values",
+    "description": "Filters access by the presence of optional namespace values",
     "type": "String"
   },
   "cloudwatch:requestinsightruleloggroups": {
     "key": "cloudwatch:requestInsightRuleLogGroups",
-    "description": "Filters actions based on the Log Groups specified in an Insight Rule",
+    "description": "Filters access by the Log Groups specified in an Insight Rule",
     "type": "ArrayOfString"
   },
   "cloudwatch:requestmanagedresourcearns": {

package/data/conditionKeys/eks.json

@@ -59,6 +59,11 @@
     "description": "Filters access by the compute config enabled parameter in the create / update cluster request",
     "type": "Bool"
   },
+  "eks:controlplaneegressmode": {
+    "key": "eks:controlPlaneEgressMode",
+    "description": "Filters access by the control plane egress mode specified in the create / update cluster request",
+    "type": "String"
+  },
   "eks:controlplanescalingtier": {
     "key": "eks:controlPlaneScalingTier",
     "description": "Filters access by the control plane scaling tier in the create / update cluster request",

package/data/resourceTypes/cloudwatch.json

@@ -20,6 +20,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "dataset": {
+    "key": "dataset",
+    "arn": "arn:${Partition}:cloudwatch:${Region}:${Account}:dataset/${DatasetId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "insight-rule": {
     "key": "insight-rule",
     "arn": "arn:${Partition}:cloudwatch:${Region}:${Account}:insight-rule/${InsightRuleName}",

package/data/resourceTypes/quicksight.json

@@ -197,5 +197,12 @@
   "approvalpolicy": {
     "key": "approvalPolicy",
     "arn": "arn:${Partition}:quicksight:${Region}:${Account}:approval-policy/${ResourceId}"
+  },
+  "limitsprofile": {
+    "key": "limitsProfile",
+    "arn": "arn:${Partition}:quicksight:${Region}:${Account}:limits-profile/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.19.202606181",
+  "version": "0.19.202606201",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-06-18T06:16:01.826Z",
+  "updatedAt": "2026-06-20T06:05:07.565Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",