@cloud-copilot/iam-data 0.19.202606251 → 0.19.202606261

package/data/actions/securityhub.json

@@ -285,6 +285,17 @@
     ],
     "dependentActions": []
   },
+  "createconnector": {
+    "name": "CreateConnector",
+    "description": "Grants permission to create a connector based on input parameters",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createconnectorv2": {
     "name": "CreateConnectorV2",
     "description": "Grants permission to create a connector V2 based on input parameters",
@@ -424,6 +435,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteconnector": {
+    "name": "DeleteConnector",
+    "description": "Grants permission to delete a connector in Security Hub CSPM",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteconnectorv2": {
     "name": "DeleteConnectorV2",
     "description": "Grants permission to delete a connector V2 in Security Hub",
@@ -661,6 +687,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disablesecurityhubfeaturev2": {
+    "name": "DisableSecurityHubFeatureV2",
+    "description": "Grants permission to disable a Security Hub V2 feature",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disablesecurityhubv2": {
     "name": "DisableSecurityHubV2",
     "description": "Grants permission to disable Security Hub V2",
@@ -768,6 +809,21 @@
     ],
     "dependentActions": []
   },
+  "enablesecurityhubfeaturev2": {
+    "name": "EnableSecurityHubFeatureV2",
+    "description": "Grants permission to enable a Security Hub V2 feature",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "enablesecurityhubv2": {
     "name": "EnableSecurityHubV2",
     "description": "Grants permission to enable Security Hub V2",
@@ -884,6 +940,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getconnector": {
+    "name": "GetConnector",
+    "description": "Grants permission to retrieve details for a connector from Security Hub CSPM based on connector id",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getconnectorv2": {
     "name": "GetConnectorV2",
     "description": "Grants permission to retrieve details for a connector V2 from Security Hub based on connector id",
@@ -1292,6 +1363,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listconnectors": {
+    "name": "ListConnectors",
+    "description": "Grants permission to retrieve a list of connectors and their metadata for the calling account from Security Hub CSPM",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listconnectorsv2": {
     "name": "ListConnectorsV2",
     "description": "Grants permission to retrieve a list of connectors V2 and their metadata for the calling account from Security Hub",
@@ -1523,6 +1602,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "connector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "connectorv2",
         "required": false,
@@ -1574,6 +1659,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "connector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "connectorv2",
         "required": false,
@@ -1656,6 +1747,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateconnector": {
+    "name": "UpdateConnector",
+    "description": "Grants permission to update a connector in Security Hub CSPM based on connector id and input parameters",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateconnectorv2": {
     "name": "UpdateConnectorV2",
     "description": "Grants permission to update a connector V2 in Security Hub based on connector id and input parameters",

package/data/actions/ssm.json

@@ -16,6 +16,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "cloud-connector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "document",
         "required": false,
@@ -195,6 +201,28 @@
     ],
     "dependentActions": []
   },
+  "createcloudconnector": {
+    "name": "CreateCloudConnector",
+    "description": "Grants permission to create a cloud connector for managing instances in other cloud environments",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cloud-connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "config:GetConnector",
+          "config:PutThirdPartyServiceLinkedConfigurationRecorder",
+          "iam:PassRole"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createdocument": {
     "name": "CreateDocument",
     "description": "Grants permission to create a Systems Manager SSM document",
@@ -320,6 +348,28 @@
     ],
     "dependentActions": []
   },
+  "deletecloudconnector": {
+    "name": "DeleteCloudConnector",
+    "description": "Grants permission to delete a specified cloud connector",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cloud-connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "config:DeleteServiceLinkedConfigurationRecorder",
+          "config:GetConnector",
+          "config:PutThirdPartyServiceLinkedConfigurationRecorder",
+          "ssm:ListAssociations"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deletedocument": {
     "name": "DeleteDocument",
     "description": "Grants permission to delete a specified SSM document and its instance associations",
@@ -1082,6 +1132,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getcloudconnector": {
+    "name": "GetCloudConnector",
+    "description": "Grants permission to view details about a specified cloud connector",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cloud-connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "getcommandinvocation": {
     "name": "GetCommandInvocation",
     "description": "Grants permission to view details about the command execution of a specified invocation or plugin",
@@ -1468,6 +1535,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcloudconnectors": {
+    "name": "ListCloudConnectors",
+    "description": "Grants permission to list cloud connectors in your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcommandinvocations": {
     "name": "ListCommandInvocations",
     "description": "Grants permission to list information about command invocations sent to a specified instance",
@@ -1662,6 +1737,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "cloud-connector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "document",
         "required": false,
@@ -1921,6 +2002,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "cloud-connector",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "document",
         "required": false,
@@ -2338,6 +2425,26 @@
     ],
     "dependentActions": []
   },
+  "updatecloudconnector": {
+    "name": "UpdateCloudConnector",
+    "description": "Grants permission to update a specified cloud connector",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cloud-connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "config:GetConnector",
+          "config:PutThirdPartyServiceLinkedConfigurationRecorder"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "updatedocument": {
     "name": "UpdateDocument",
     "description": "Grants permission to update one or more values for an SSM document",
@@ -2601,5 +2708,22 @@
     ],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "validatecloudconnector": {
+    "name": "ValidateCloudConnector",
+    "description": "Grants permission to verify that a specified cloud connector is functioning properly and to retrieve any validation findings or issues detected",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cloud-connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
   }
 }

package/data/resourceTypes/securityhub.json

@@ -49,6 +49,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "connector": {
+    "key": "connector",
+    "arn": "arn:${Partition}:securityhub:${Region}:${Account}:connector/${ConnectorId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "connectorv2": {
     "key": "connectorv2",
     "arn": "arn:${Partition}:securityhub:${Region}:${Account}:connectorv2/${ConnectorV2Id}",

package/data/resourceTypes/ssm.json

@@ -25,6 +25,13 @@
     "key": "bucket",
     "arn": "arn:${Partition}:s3:::${BucketName}"
   },
+  "cloud-connector": {
+    "key": "cloud-connector",
+    "arn": "arn:${Partition}:ssm:${Region}:${Account}:cloud-connector/${CloudConnectorId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "document": {
     "key": "document",
     "arn": "arn:${Partition}:ssm:${Region}:${Account}:document/${DocumentName}",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.19.202606251",
+  "version": "0.19.202606261",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-06-25T06:00:10.464Z",
+  "updatedAt": "2026-06-26T06:01:08.887Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",