@cloud-copilot/iam-data 0.19.202606241 → 0.19.202606261

package/data/actions/config.json

@@ -112,6 +112,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteconnector": {
+    "name": "DeleteConnector",
+    "description": "Grants permission to delete a connector configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletedeliverychannel": {
     "name": "DeleteDeliveryChannel",
     "description": "Grants permission to delete the delivery channel",
@@ -671,6 +686,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getconnector": {
+    "name": "GetConnector",
+    "description": "Grants permission to return the details of a specific connector configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getcustomrulepolicy": {
     "name": "GetCustomRulePolicy",
     "description": "Grants permission to return the policy definition containing the logic for your AWS Config Custom Policy rule",
@@ -801,6 +831,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listconnectors": {
+    "name": "ListConnectors",
+    "description": "Grants permission to list all connectors in the AWS account and region",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdiscoveredresources": {
     "name": "ListDiscoveredResources",
     "description": "Grants permission to accept a resource type and returns a list of resource identifiers for the resources of that type",
@@ -987,6 +1025,26 @@
       "ssm:GetDocument"
     ]
   },
+  "putconnector": {
+    "name": "PutConnector",
+    "description": "Grants permission to create a connector configuration that contains provider identity information, as well as other optional provider-specific information required for third-party recording",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:CreateServiceLinkedRole"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "putdeliverychannel": {
     "name": "PutDeliveryChannel",
     "description": "Grants permission to create a delivery channel object to deliver configuration information to an Amazon S3 bucket and Amazon SNS topic",
@@ -1133,6 +1191,27 @@
     ],
     "dependentActions": []
   },
+  "putthirdpartyservicelinkedconfigurationrecorder": {
+    "name": "PutThirdPartyServiceLinkedConfigurationRecorder",
+    "description": "Grants permission to create or update a service-linked configuration recorder for a third-party provider linked to a specific AWS partner service",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "config:GetConnector"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "config:ConfigurationRecorderServicePrincipal"
+    ],
+    "dependentActions": []
+  },
   "selectaggregateresourceconfig": {
     "name": "SelectAggregateResourceConfig",
     "description": "Grants permission to accept a structured query language (SQL) SELECT command and an aggregator to query configuration state of AWS resources across multiple accounts and regions, performs the corresponding search, and returns resource configurations matching the properties",

package/data/actions/inspector2.json

@@ -142,6 +142,24 @@
     ],
     "dependentActions": []
   },
+  "createconnector": {
+    "name": "CreateConnector",
+    "description": "Grants permission to create a connector to scan resources from a third-party cloud provider",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createfilter": {
     "name": "CreateFilter",
     "description": "Grants permission to create and define the settings for a findings filter",
@@ -223,6 +241,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteconnector": {
+    "name": "DeleteConnector",
+    "description": "Grants permission to delete a connector configured for scanning resources from a third-party cloud provider",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletefilter": {
     "name": "DeleteFilter",
     "description": "Grants permission to delete a findings filter",
@@ -454,6 +487,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listconnectorscanconfigurations": {
+    "name": "ListConnectorScanConfigurations",
+    "description": "Grants permission to list scan configurations for connectors",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listconnectors": {
+    "name": "ListConnectors",
+    "description": "Grants permission to list connectors configured for scanning resources from third-party cloud providers",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcoverage": {
     "name": "ListCoverage",
     "description": "Grants permission to retrieve the types of statistics Amazon Inspector can generate for resources Inspector monitors",
@@ -726,6 +775,33 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateconnector": {
+    "name": "UpdateConnector",
+    "description": "Grants permission to update a connector configured for scanning resources from a third-party cloud provider",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updateconnectorscanconfiguration": {
+    "name": "UpdateConnectorScanConfiguration",
+    "description": "Grants permission to update scan configuration settings for resources associated with a connector",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateec2deepinspectionconfiguration": {
     "name": "UpdateEc2DeepInspectionConfiguration",
     "description": "Grants permission to update ec2 deep inspection configuration by delegated administrator, member and standalone account",

package/data/actions/securityhub.json

@@ -285,6 +285,17 @@
     ],
     "dependentActions": []
   },
+  "createconnector": {
+    "name": "CreateConnector",
+    "description": "Grants permission to create a connector based on input parameters",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createconnectorv2": {
     "name": "CreateConnectorV2",
     "description": "Grants permission to create a connector V2 based on input parameters",
@@ -424,6 +435,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteconnector": {
+    "name": "DeleteConnector",
+    "description": "Grants permission to delete a connector in Security Hub CSPM",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteconnectorv2": {
     "name": "DeleteConnectorV2",
     "description": "Grants permission to delete a connector V2 in Security Hub",
@@ -661,6 +687,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disablesecurityhubfeaturev2": {
+    "name": "DisableSecurityHubFeatureV2",
+    "description": "Grants permission to disable a Security Hub V2 feature",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disablesecurityhubv2": {
     "name": "DisableSecurityHubV2",
     "description": "Grants permission to disable Security Hub V2",
@@ -768,6 +809,21 @@
     ],
     "dependentActions": []
   },
+  "enablesecurityhubfeaturev2": {
+    "name": "EnableSecurityHubFeatureV2",
+    "description": "Grants permission to enable a Security Hub V2 feature",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "enablesecurityhubv2": {
     "name": "EnableSecurityHubV2",
     "description": "Grants permission to enable Security Hub V2",
@@ -884,6 +940,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getconnector": {
+    "name": "GetConnector",
+    "description": "Grants permission to retrieve details for a connector from Security Hub CSPM based on connector id",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getconnectorv2": {
     "name": "GetConnectorV2",
     "description": "Grants permission to retrieve details for a connector V2 from Security Hub based on connector id",
@@ -1292,6 +1363,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listconnectors": {
+    "name": "ListConnectors",
+    "description": "Grants permission to retrieve a list of connectors and their metadata for the calling account from Security Hub CSPM",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listconnectorsv2": {
     "name": "ListConnectorsV2",
     "description": "Grants permission to retrieve a list of connectors V2 and their metadata for the calling account from Security Hub",
@@ -1523,6 +1602,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "connector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "connectorv2",
         "required": false,
@@ -1574,6 +1659,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "connector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "connectorv2",
         "required": false,
@@ -1656,6 +1747,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateconnector": {
+    "name": "UpdateConnector",
+    "description": "Grants permission to update a connector in Security Hub CSPM based on connector id and input parameters",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateconnectorv2": {
     "name": "UpdateConnectorV2",
     "description": "Grants permission to update a connector V2 in Security Hub based on connector id and input parameters",

package/data/actions/ssm.json

@@ -16,6 +16,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "cloud-connector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "document",
         "required": false,
@@ -195,6 +201,28 @@
     ],
     "dependentActions": []
   },
+  "createcloudconnector": {
+    "name": "CreateCloudConnector",
+    "description": "Grants permission to create a cloud connector for managing instances in other cloud environments",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cloud-connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "config:GetConnector",
+          "config:PutThirdPartyServiceLinkedConfigurationRecorder",
+          "iam:PassRole"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createdocument": {
     "name": "CreateDocument",
     "description": "Grants permission to create a Systems Manager SSM document",
@@ -320,6 +348,28 @@
     ],
     "dependentActions": []
   },
+  "deletecloudconnector": {
+    "name": "DeleteCloudConnector",
+    "description": "Grants permission to delete a specified cloud connector",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cloud-connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "config:DeleteServiceLinkedConfigurationRecorder",
+          "config:GetConnector",
+          "config:PutThirdPartyServiceLinkedConfigurationRecorder",
+          "ssm:ListAssociations"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deletedocument": {
     "name": "DeleteDocument",
     "description": "Grants permission to delete a specified SSM document and its instance associations",
@@ -1082,6 +1132,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getcloudconnector": {
+    "name": "GetCloudConnector",
+    "description": "Grants permission to view details about a specified cloud connector",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cloud-connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "getcommandinvocation": {
     "name": "GetCommandInvocation",
     "description": "Grants permission to view details about the command execution of a specified invocation or plugin",
@@ -1468,6 +1535,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcloudconnectors": {
+    "name": "ListCloudConnectors",
+    "description": "Grants permission to list cloud connectors in your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcommandinvocations": {
     "name": "ListCommandInvocations",
     "description": "Grants permission to list information about command invocations sent to a specified instance",
@@ -1662,6 +1737,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "cloud-connector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "document",
         "required": false,
@@ -1921,6 +2002,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "cloud-connector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "document",
         "required": false,
@@ -2338,6 +2425,26 @@
     ],
     "dependentActions": []
   },
+  "updatecloudconnector": {
+    "name": "UpdateCloudConnector",
+    "description": "Grants permission to update a specified cloud connector",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cloud-connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "config:GetConnector",
+          "config:PutThirdPartyServiceLinkedConfigurationRecorder"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "updatedocument": {
     "name": "UpdateDocument",
     "description": "Grants permission to update one or more values for an SSM document",
@@ -2601,5 +2708,22 @@
     ],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "validatecloudconnector": {
+    "name": "ValidateCloudConnector",
+    "description": "Grants permission to verify that a specified cloud connector is functioning properly and to retrieve any validation findings or issues detected",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cloud-connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
   }
 }

package/data/resourceTypes/config.json

@@ -58,5 +58,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "connector": {
+    "key": "Connector",
+    "arn": "arn:${Partition}:config:${Region}:${Account}:connector/${Provider}/${ProviderId}/${ConnectorId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/inspector2.json

@@ -30,5 +30,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "connector": {
+    "key": "Connector",
+    "arn": "arn:${Partition}:inspector2:${Region}:${Account}:connector/${ConnectorId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/securityhub.json

@@ -49,6 +49,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "connector": {
+    "key": "connector",
+    "arn": "arn:${Partition}:securityhub:${Region}:${Account}:connector/${ConnectorId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "connectorv2": {
     "key": "connectorv2",
     "arn": "arn:${Partition}:securityhub:${Region}:${Account}:connectorv2/${ConnectorV2Id}",

package/data/resourceTypes/ssm.json

@@ -25,6 +25,13 @@
     "key": "bucket",
     "arn": "arn:${Partition}:s3:::${BucketName}"
   },
+  "cloud-connector": {
+    "key": "cloud-connector",
+    "arn": "arn:${Partition}:ssm:${Region}:${Account}:cloud-connector/${CloudConnectorId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "document": {
     "key": "document",
     "arn": "arn:${Partition}:ssm:${Region}:${Account}:document/${DocumentName}",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.19.202606241",
+  "version": "0.19.202606261",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-06-24T06:00:42.161Z",
+  "updatedAt": "2026-06-26T06:01:08.887Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",