@cloud-copilot/iam-data 0.19.202606261 → 0.19.202606301

package/data/actions/aidevops.json

@@ -1129,6 +1129,21 @@
     ],
     "dependentActions": []
   },
+  "updateapprovalaction": {
+    "name": "UpdateApprovalAction",
+    "description": "Grants permission to update an approval action (approve or reject) for an agent tool invocation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "agentspace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateasset": {
     "name": "UpdateAsset",
     "description": "Grants permission to update an asset",

package/data/actions/artifact.json

@@ -29,6 +29,39 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createcomplianceinquiry": {
+    "name": "CreateComplianceInquiry",
+    "description": "Grants permission to create a compliance inquiry",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "compliance-inquiry",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "exportcomplianceinquiry": {
+    "name": "ExportComplianceInquiry",
+    "description": "Grants permission to export a compliance inquiry",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "compliance-inquiry",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getaccountsettings": {
     "name": "GetAccountSettings",
     "description": "Grants permission to get the account settings for Artifact",
@@ -52,6 +85,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getcomplianceinquirymetadata": {
+    "name": "GetComplianceInquiryMetadata",
+    "description": "Grants permission to get metadata associated with a compliance inquiry",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "compliance-inquiry",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getcustomeragreement": {
     "name": "GetCustomerAgreement",
     "description": "Grants permission to get an AWS agreement that has been accepted by the customer account",
@@ -135,6 +183,29 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcomplianceinquiries": {
+    "name": "ListComplianceInquiries",
+    "description": "Grants permission to list compliance inquiries submitted by the customer account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcomplianceinquiryqueries": {
+    "name": "ListComplianceInquiryQueries",
+    "description": "Grants permission to list queries for a compliance inquiry",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "compliance-inquiry",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcustomeragreements": {
     "name": "ListCustomerAgreements",
     "description": "Grants permission to list customer-agreement resources that have been accepted by the customer account",
@@ -159,6 +230,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list all tags on an AWS Artifact resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "compliance-inquiry",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putaccountsettings": {
     "name": "PutAccountSettings",
     "description": "Grants permission to put account settings for Artifact",
@@ -167,6 +253,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to associate a set of tags with an AWS Artifact resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "compliance-inquiry",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "terminateagreement": {
     "name": "TerminateAgreement",
     "description": "Grants permission to terminate a customer agreement that was previously accepted by the customer account",
@@ -181,5 +285,22 @@
     ],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove the association of tags from an AWS Artifact resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "compliance-inquiry",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
   }
 }

package/data/actions/ec2.json

@@ -1220,6 +1220,31 @@
     ],
     "dependentActions": []
   },
+  "attachimagewatermark": {
+    "name": "AttachImageWatermark",
+    "description": "Grants permission to attach a watermark to an Amazon Machine Image (AMI)",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "image",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ImageID",
+          "ec2:ImageType",
+          "ec2:Owner",
+          "ec2:Public",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:RootDeviceType"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "attachinternetgateway": {
     "name": "AttachInternetGateway",
     "description": "Grants permission to attach an internet gateway to a VPC",
@@ -2001,15 +2026,24 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "capacity-reservation-cancellation-quote",
+        "name": "capacity-reservation",
         "required": true,
         "conditionKeys": [
-          "aws:RequestTag/${TagKey}",
-          "aws:TagKeys"
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": [
           "ec2:CreateTags"
         ]
+      },
+      {
+        "name": "capacity-reservation-cancellation-quote",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -2506,12 +2540,15 @@
           "aws:TagKeys"
         ],
         "dependentActions": [
+          "autoscaling:DescribeTags",
           "ec2:CreateTags",
+          "ec2:DescribeTags",
           "ecs:ListClusters",
           "ecs:ListContainerInstances",
           "ecs:ListServices",
           "ecs:ListTaskDefinitions",
           "ecs:ListTasks",
+          "iam:CreateServiceLinkedRole",
           "iam:PassRole"
         ]
       },
@@ -12675,6 +12712,31 @@
     ],
     "dependentActions": []
   },
+  "detachimagewatermark": {
+    "name": "DetachImageWatermark",
+    "description": "Grants permission to detach a watermark from an Amazon Machine Image (AMI)",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "image",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ImageID",
+          "ec2:ImageType",
+          "ec2:Owner",
+          "ec2:Public",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:RootDeviceType"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "detachinternetgateway": {
     "name": "DetachInternetGateway",
     "description": "Grants permission to detach an internet gateway from a VPC",
@@ -20519,6 +20581,15 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "secondary-interface",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "secondary-subnet",
         "required": false,
@@ -20544,6 +20615,15 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "spot-instances-request",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "volume",
         "required": false,

package/data/actions/es.json

@@ -1075,6 +1075,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "insightfeedback": {
+    "name": "InsightFeedback",
+    "description": "Grants permission to submit feedback for OpenSearch domain insight",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listapplications": {
     "name": "ListApplications",
     "description": "Grants permission to list OpenSearch Applications",

package/data/actions/transform-custom.json

@@ -557,6 +557,14 @@
     ],
     "dependentActions": []
   },
+  "sendtelemetryevent": {
+    "name": "SendTelemetryEvent",
+    "description": "Grants permission to send a CLI telemetry event",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "sharetransformationpackage": {
     "name": "ShareTransformationPackage",
     "description": "Grants permission to share a Transformation Package with another AWS account or AWS Organization",

package/data/actions/user-subscriptions.json

@@ -9,6 +9,22 @@
     ],
     "dependentActions": []
   },
+  "createclaimaddon": {
+    "name": "CreateClaimAddOn",
+    "description": "Grants permission to create a User subscription Claim add-on",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteautotopuprule": {
+    "name": "DeleteAutoTopUpRule",
+    "description": "Grants permission to delete a User subscription auto-top-up rule",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteclaim": {
     "name": "DeleteClaim",
     "description": "Grants permission to delete a User subscription Claim",
@@ -17,6 +33,30 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getautotopuprule": {
+    "name": "GetAutoTopUpRule",
+    "description": "Grants permission to get a User subscription auto-top-up rule",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "geteffectiveusagelimit": {
+    "name": "GetEffectiveUsageLimit",
+    "description": "Grants permission to get a User subscription effective usage limit",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getusagelimithistory": {
+    "name": "GetUsageLimitHistory",
+    "description": "Grants permission to get User subscription usage limit history",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listapplicationclaims": {
     "name": "ListApplicationClaims",
     "description": "Grants permission to list all User subscription Claims for Application",
@@ -25,6 +65,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listclaimaddons": {
+    "name": "ListClaimAddOns",
+    "description": "Grants permission to list all User subscription Claim add-ons",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listclaims": {
     "name": "ListClaims",
     "description": "Grants permission to list all User subscription Claims",
@@ -33,6 +81,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listentitlements": {
+    "name": "ListEntitlements",
+    "description": "Grants permission to list all User subscription entitlements",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listusagelimits": {
+    "name": "ListUsageLimits",
+    "description": "Grants permission to list all User subscription usage limits",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listusersubscriptions": {
     "name": "ListUserSubscriptions",
     "description": "Grants permission to list all User subscriptions",
@@ -41,6 +105,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "setautotopuprule": {
+    "name": "SetAutoTopUpRule",
+    "description": "Grants permission to set a User subscription auto-top-up rule",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "setoverageconfig": {
     "name": "SetOverageConfig",
     "description": "Grants permission to set a User subscription overage configuration",
@@ -49,6 +121,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "setusagelimit": {
+    "name": "SetUsageLimit",
+    "description": "Grants permission to set a User subscription usage limit",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateclaim": {
     "name": "UpdateClaim",
     "description": "Grants permission to update a User subscription Claim",

package/data/actions/wafv2.json

@@ -14,6 +14,7 @@
           "apprunner:AssociateWebAcl",
           "appsync:AssociateWebACL",
           "appsync:SetWebACL",
+          "bedrock-agentcore:GatewayAssociateWebACL",
           "cognito-idp:AssociateWebACL",
           "ec2:AssociateVerifiedAccessInstanceWebAcl",
           "elasticloadbalancing:CreateWebACLAssociation",
@@ -22,6 +23,12 @@
           "wafv2:PutPermissionPolicy"
         ]
       },
+      {
+        "name": "agentcore-gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "amplify-app",
         "required": false,
@@ -361,7 +368,7 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "amplify-app",
+        "name": "agentcore-gateway",
         "required": false,
         "conditionKeys": [],
         "dependentActions": [
@@ -370,6 +377,7 @@
           "apprunner:DisassociateWebAcl",
           "appsync:DisassociateWebACL",
           "appsync:SetWebACL",
+          "bedrock-agentcore:GatewayDisassociateWebACL",
           "cognito-idp:DisassociateWebACL",
           "ec2:DisassociateVerifiedAccessInstanceWebAcl",
           "elasticloadbalancing:DeleteWebACLAssociation",
@@ -377,6 +385,12 @@
           "wafv2:PutPermissionPolicy"
         ]
       },
+      {
+        "name": "amplify-app",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "apigateway",
         "required": false,
@@ -641,12 +655,19 @@
           "amplify:GetWebACLForResource",
           "apprunner:DescribeWebAclForService",
           "appsync:GetWebACLForResource",
+          "bedrock-agentcore:GatewayGetWebACLForResource",
           "cognito-idp:GetWebACLForResource",
           "ec2:GetVerifiedAccessInstanceWebAcl",
           "elasticloadbalancing:GetLoadBalancerWebACL",
           "wafv2:GetWebACL"
         ]
       },
+      {
+        "name": "agentcore-gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "amplify-app",
         "required": false,
@@ -772,11 +793,18 @@
           "amplify:ListResourcesForWebACL",
           "apprunner:ListAssociatedServicesForWebAcl",
           "appsync:ListResourcesForWebACL",
+          "bedrock-agentcore:GatewayListResourcesForWebACL",
           "cognito-idp:ListResourcesForWebACL",
           "ec2:DescribeVerifiedAccessInstanceWebAclAssociations",
           "elasticloadbalancing:DescribeWebACLAssociation"
         ]
       },
+      {
+        "name": "agentcore-gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "amplify-app",
         "required": false,

package/data/conditionKeys/artifact.json

@@ -8,5 +8,20 @@
     "key": "artifact:ReportSeries",
     "description": "Filters access by which series reports are associated with",
     "type": "String"
+  },
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
   }
 }

package/data/resourceTypes/artifact.json

@@ -14,5 +14,12 @@
       "artifact:ReportCategory",
       "artifact:ReportSeries"
     ]
+  },
+  "compliance-inquiry": {
+    "key": "compliance-inquiry",
+    "arn": "arn:${Partition}:artifact:${Region}:${Account}:compliance-inquiry/*",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/wafv2.json

@@ -58,5 +58,9 @@
   "amplify-app": {
     "key": "amplify-app",
     "arn": "arn:${Partition}:amplify:${Region}:${Account}:apps/${AppId}"
+  },
+  "agentcore-gateway": {
+    "key": "agentcore-gateway",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/${GatewayId}"
   }
 }

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.19.202606261",
+  "version": "0.19.202606301",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-06-26T06:01:08.887Z",
+  "updatedAt": "2026-06-30T06:01:16.985Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",