@cloud-copilot/iam-data 0.19.202606181 → 0.19.202606231

package/data/actions/agentaccess-mcp.json

@@ -1,4 +1,24 @@
 {
+  "callforwardedtool": {
+    "name": "CallForwardedTool",
+    "description": "Grants permission to invoke a forwarded tool on a remote instance",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "agentaccess-mcp:StackArn"
+    ],
+    "dependentActions": []
+  },
+  "checkconnectionstatus": {
+    "name": "CheckConnectionStatus",
+    "description": "Grants permission to check the connection status of a streaming session",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "agentaccess-mcp:StackArn"
+    ],
+    "dependentActions": []
+  },
   "doubleclick": {
     "name": "DoubleClick",
     "description": "Grants permission to perform double click at coordinates",

package/data/actions/application-signals.json

@@ -1,4 +1,19 @@
 {
+  "batchdeleteinstrumentationconfigurations": {
+    "name": "BatchDeleteInstrumentationConfigurations",
+    "description": "Grants permission to batch delete instrumentation configurations",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "instrumentationConfig",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchgetservicelevelobjectivebudgetreport": {
     "name": "BatchGetServiceLevelObjectiveBudgetReport",
     "description": "Grants permission to batch retrieve a service level objective budget report",
@@ -29,6 +44,17 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createinstrumentationconfiguration": {
+    "name": "CreateInstrumentationConfiguration",
+    "description": "Grants permission to create an instrumentation configuration for dynamic instrumentation",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createservicelevelobjective": {
     "name": "CreateServiceLevelObjective",
     "description": "Grants permission to create a service level objective",
@@ -48,6 +74,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteinstrumentationconfiguration": {
+    "name": "DeleteInstrumentationConfiguration",
+    "description": "Grants permission to delete an instrumentation configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "instrumentationConfig",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteservicelevelobjective": {
     "name": "DeleteServiceLevelObjective",
     "description": "Grants permission to delete a service level objective",
@@ -63,6 +104,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getinstrumentationconfiguration": {
+    "name": "GetInstrumentationConfiguration",
+    "description": "Grants permission to retrieve an instrumentation configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "instrumentationConfig",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getinstrumentationconfigurationstatus": {
+    "name": "GetInstrumentationConfigurationStatus",
+    "description": "Grants permission to retrieve the status history of an instrumentation configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "instrumentationConfig",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getservice": {
     "name": "GetService",
     "description": "Grants permission to retrieve information about a service",
@@ -119,6 +190,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listinstrumentationconfigurations": {
+    "name": "ListInstrumentationConfigurations",
+    "description": "Grants permission to list instrumentation configurations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listobservedentities": {
     "name": "ListObservedEntities",
     "description": "Grants permission to list entities associated with other entities",
@@ -192,12 +271,18 @@
   },
   "listtagsforresource": {
     "name": "ListTagsForResource",
-    "description": "Grants permission to list tags for an Amazon CloudWatch SLO",
+    "description": "Grants permission to list tags for an Amazon CloudWatch Application Signals resource",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "instrumentationConfig",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "slo",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -213,6 +298,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "reportinstrumentationconfigurationstatus": {
+    "name": "ReportInstrumentationConfigurationStatus",
+    "description": "Grants permission to report the status of instrumentation configurations",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "instrumentationConfig",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startdiscovery": {
     "name": "StartDiscovery",
     "description": "Grants permission to enable CloudWatch discovery",
@@ -223,12 +323,18 @@
   },
   "tagresource": {
     "name": "TagResource",
-    "description": "Grants permission to add tags to an Amazon CloudWatch SLO",
+    "description": "Grants permission to add tags to an Amazon CloudWatch Application Signals resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "instrumentationConfig",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "slo",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -241,12 +347,18 @@
   },
   "untagresource": {
     "name": "UntagResource",
-    "description": "Grants permission to untag to an Amazon CloudWatch SLO",
+    "description": "Grants permission to remove tags from an Amazon CloudWatch Application Signals resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "instrumentationConfig",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "slo",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }

package/data/actions/cloudwatch.json

@@ -70,7 +70,11 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "logs:CreateScheduledQuery",
+      "logs:DeleteScheduledQuery",
+      "logs:GetScheduledQuery"
+    ]
   },
   "deleteanomalydetector": {
     "name": "DeleteAnomalyDetector",
@@ -308,6 +312,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdataset": {
+    "name": "GetDataset",
+    "description": "Grants permission to get a dataset",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "getinsightrulereport": {
     "name": "GetInsightRuleReport",
     "description": "Grants permission to return the top-N report of unique contributors over a time range for a given insight rule",
@@ -325,10 +346,19 @@
   },
   "getmetricdata": {
     "name": "GetMetricData",
-    "description": "Grants permission to retrieve batch amounts of CloudWatch metric data and perform metric math on retrieved data",
+    "description": "Grants permission to retrieve batch amounts of CloudWatch classic metric data and perform metric math on retrieved data; and grants permission to retrieve OTLP metric data using PromQL",
     "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getmetricstatistics": {
@@ -499,8 +529,17 @@
     "name": "ListMetrics",
     "description": "Grants permission to retrieve a list of valid metrics stored for the AWS account owner",
     "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "listservicelevelobjectives": {
@@ -527,31 +566,65 @@
       {
         "name": "alarm",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "alarm-mute-rule",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "dashboard",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "dataset",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "insight-rule",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "metric-stream",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "service",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "slo",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -585,6 +658,15 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-Dataset",
+        "resourceTypes": [
+          {
+            "name": "dataset",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-InsightRule",
         "resourceTypes": [
@@ -594,6 +676,24 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-MetricStream",
+        "resourceTypes": [
+          {
+            "name": "metric-stream",
+            "required": true
+          }
+        ]
+      },
+      {
+        "name": "CloudWatch-Service",
+        "resourceTypes": [
+          {
+            "name": "service",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-ServiceLevelObjective",
         "resourceTypes": [
@@ -693,6 +793,31 @@
     ],
     "dependentActions": []
   },
+  "putlogalarm": {
+    "name": "PutLogAlarm",
+    "description": "Grants permission to create or update a log-based alarm and associate it with a CloudWatch Logs Insights scheduled query",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "alarm",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:PassRole",
+          "logs:CreateScheduledQuery",
+          "logs:DeleteScheduledQuery",
+          "logs:GetScheduledQuery",
+          "logs:UpdateScheduledQuery"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "cloudwatch:AlarmActions"
+    ],
+    "dependentActions": []
+  },
   "putmanagedinsightrules": {
     "name": "PutManagedInsightRules",
     "description": "Grants permission to create managed Insight Rules",
@@ -715,6 +840,14 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "dataset",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -726,9 +859,18 @@
   },
   "putmetricdata": {
     "name": "PutMetricData",
-    "description": "Grants permission to publish metric data points to Amazon CloudWatch",
+    "description": "Grants permission to publish metric data points to Amazon CloudWatch using CloudWatch and OTLP formats",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "cloudwatch:namespace"
     ],
@@ -823,31 +965,65 @@
       {
         "name": "alarm",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "alarm-mute-rule",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "dashboard",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "dataset",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "insight-rule",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "metric-stream",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "service",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "slo",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -884,6 +1060,15 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-Dataset",
+        "resourceTypes": [
+          {
+            "name": "dataset",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-InsightRule",
         "resourceTypes": [
@@ -893,6 +1078,24 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-MetricStream",
+        "resourceTypes": [
+          {
+            "name": "metric-stream",
+            "required": true
+          }
+        ]
+      },
+      {
+        "name": "CloudWatch-Service",
+        "resourceTypes": [
+          {
+            "name": "service",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-ServiceLevelObjective",
         "resourceTypes": [
@@ -912,31 +1115,65 @@
       {
         "name": "alarm",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "alarm-mute-rule",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "dashboard",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "dataset",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "insight-rule",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "metric-stream",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "service",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "slo",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -972,6 +1209,15 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-Dataset",
+        "resourceTypes": [
+          {
+            "name": "dataset",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-InsightRule",
         "resourceTypes": [
@@ -981,6 +1227,24 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-MetricStream",
+        "resourceTypes": [
+          {
+            "name": "metric-stream",
+            "required": true
+          }
+        ]
+      },
+      {
+        "name": "CloudWatch-Service",
+        "resourceTypes": [
+          {
+            "name": "service",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-ServiceLevelObjective",
         "resourceTypes": [