@cloud-copilot/iam-data 0.19.202606271 → 0.19.202607011

package/data/actions/events.json

@@ -138,7 +138,13 @@
     "resourceTypes": [
       {
         "name": "event-bus",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "event-busv2",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -261,7 +267,13 @@
     "resourceTypes": [
       {
         "name": "event-bus",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "event-busv2",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -384,6 +396,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "event-busv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -627,6 +645,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "event-busv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "publisher",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "rule-on-custom-event-bus",
         "required": false,
@@ -638,6 +668,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "subscriber",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -853,6 +889,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "event-busv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "publisher",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "rule-on-custom-event-bus",
         "required": false,
@@ -864,6 +912,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "subscriber",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -892,6 +946,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "event-busv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "publisher",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "rule-on-custom-event-bus",
         "required": false,
@@ -903,6 +969,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "subscriber",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -992,7 +1064,13 @@
     "resourceTypes": [
       {
         "name": "event-bus",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "event-busv2",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }

package/data/actions/partnercentral.json

@@ -377,6 +377,35 @@
     ],
     "dependentActions": []
   },
+  "createmarketplacerevenueshare": {
+    "name": "CreateMarketplaceRevenueShare",
+    "description": "Grants permission to create marketplace revenue shares in AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "createmarketplacerevenueshareallocation": {
+    "name": "CreateMarketplaceRevenueShareAllocation",
+    "description": "Grants permission to create marketplace revenue share allocations in AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "MarketplaceRevenueShare",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
   "createopportunity": {
     "name": "CreateOpportunity",
     "description": "Grants permission to create new Opportunities on AWS Partner Central",
@@ -478,6 +507,18 @@
     ],
     "dependentActions": []
   },
+  "createrevenueattribution": {
+    "name": "CreateRevenueAttribution",
+    "description": "Grants permission to create revenue attributions in AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
   "deleteprogrammanagementaccount": {
     "name": "DeleteProgramManagementAccount",
     "description": "Grants permission to delete program management accounts in AWS Partner Central",
@@ -798,6 +839,40 @@
     ],
     "dependentActions": []
   },
+  "getmarketplacerevenueshare": {
+    "name": "GetMarketplaceRevenueShare",
+    "description": "Grants permission to retrieve marketplace revenue share details in AWS Partner Central",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "MarketplaceRevenueShare",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "getmarketplacerevenueshareallocation": {
+    "name": "GetMarketplaceRevenueShareAllocation",
+    "description": "Grants permission to retrieve marketplace revenue share allocation details in AWS Partner Central",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "MarketplaceRevenueShare",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
   "getopportunity": {
     "name": "GetOpportunity",
     "description": "Grants permission to retrieve details of Opportunities on AWS Partner Central",
@@ -975,6 +1050,57 @@
     ],
     "dependentActions": []
   },
+  "getrevenueattribution": {
+    "name": "GetRevenueAttribution",
+    "description": "Grants permission to retrieve revenue attribution details in AWS Partner Central",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "RevenueAttribution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "getrevenueattributionallocation": {
+    "name": "GetRevenueAttributionAllocation",
+    "description": "Grants permission to retrieve revenue attribution allocation details in AWS Partner Central",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "RevenueAttribution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "getrevenueattributionallocationstask": {
+    "name": "GetRevenueAttributionAllocationsTask",
+    "description": "Grants permission to retrieve revenue attribution allocations task details in AWS Partner Central",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "RevenueAttribution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
   "getsellingsystemsettings": {
     "name": "GetSellingSystemSettings",
     "description": "Grants permission to retrieving selling system settings in AWS Partner Central",
@@ -1182,6 +1308,33 @@
     ],
     "dependentActions": []
   },
+  "listmarketplacerevenueshareallocations": {
+    "name": "ListMarketplaceRevenueShareAllocations",
+    "description": "Grants permission to list marketplace revenue share allocations in AWS Partner Central",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "MarketplaceRevenueShare",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "listmarketplacerevenueshares": {
+    "name": "ListMarketplaceRevenueShares",
+    "description": "Grants permission to list marketplace revenue shares in AWS Partner Central",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
   "listopportunities": {
     "name": "ListOpportunities",
     "description": "Grants permission to list Opportunities on AWS Partner Central",
@@ -1292,6 +1445,33 @@
     ],
     "dependentActions": []
   },
+  "listrevenueattributionallocations": {
+    "name": "ListRevenueAttributionAllocations",
+    "description": "Grants permission to list revenue attribution allocations in AWS Partner Central",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "RevenueAttribution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "listrevenueattributions": {
+    "name": "ListRevenueAttributions",
+    "description": "Grants permission to list revenue attributions in AWS Partner Central",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
   "listsolutions": {
     "name": "ListSolutions",
     "description": "Grants permission to list Solutions on AWS Partner Central",
@@ -1595,6 +1775,23 @@
     ],
     "dependentActions": []
   },
+  "startrevenueattributionallocationstask": {
+    "name": "StartRevenueAttributionAllocationsTask",
+    "description": "Grants permission to initiate tasks that manage revenue attribution allocations in AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "RevenueAttribution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
   "startverification": {
     "name": "StartVerification",
     "description": "Grants permission to start verification processes in AWS Partner Central",
@@ -1677,6 +1874,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "MarketplaceRevenueShare",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "Opportunity",
         "required": false,
@@ -1701,6 +1904,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "RevenueAttribution",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "resource-snapshot-job",
         "required": false,
@@ -1735,6 +1944,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "MarketplaceRevenueShare",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "Opportunity",
         "required": false,
@@ -1759,6 +1974,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "RevenueAttribution",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "resource-snapshot-job",
         "required": false,
@@ -1822,6 +2043,23 @@
     ],
     "dependentActions": []
   },
+  "updatemarketplacerevenueshareallocation": {
+    "name": "UpdateMarketplaceRevenueShareAllocation",
+    "description": "Grants permission to update marketplace revenue share allocations in AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "MarketplaceRevenueShare",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
   "updateopportunity": {
     "name": "UpdateOpportunity",
     "description": "Grants permission to update Opportunities on AWS Partner Central",
@@ -1875,6 +2113,23 @@
     ],
     "dependentActions": []
   },
+  "updaterevenueattribution": {
+    "name": "UpdateRevenueAttribution",
+    "description": "Grants permission to update revenue attributions in AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "RevenueAttribution",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
   "usesession": {
     "name": "UseSession",
     "isPermissionOnly": true,

package/data/actions/sagemaker.json

@@ -593,6 +593,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "batchwriterecord": {
+    "name": "BatchWriteRecord",
+    "description": "Grants permission to put a batch of records to one or more feature groups",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "feature-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "callmlflowappapi": {
     "name": "CallMlflowAppApi",
     "description": "Grants permission to invoke MLflow APIs",
@@ -5969,6 +5984,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listrecords": {
+    "name": "ListRecords",
+    "description": "Grants permission to list record identifiers from a feature group",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "feature-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listresourcecatalogs": {
     "name": "ListResourceCatalogs",
     "description": "Grants permission to list resource catalogs",

package/data/actions/transform-custom.json

@@ -557,6 +557,14 @@
     ],
     "dependentActions": []
   },
+  "sendtelemetryevent": {
+    "name": "SendTelemetryEvent",
+    "description": "Grants permission to send a CLI telemetry event",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "sharetransformationpackage": {
     "name": "ShareTransformationPackage",
     "description": "Grants permission to share a Transformation Package with another AWS account or AWS Organization",

package/data/actions/wafv2.json

@@ -14,6 +14,7 @@
           "apprunner:AssociateWebAcl",
           "appsync:AssociateWebACL",
           "appsync:SetWebACL",
+          "bedrock-agentcore:GatewayAssociateWebACL",
           "cognito-idp:AssociateWebACL",
           "ec2:AssociateVerifiedAccessInstanceWebAcl",
           "elasticloadbalancing:CreateWebACLAssociation",
@@ -22,6 +23,12 @@
           "wafv2:PutPermissionPolicy"
         ]
       },
+      {
+        "name": "agentcore-gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "amplify-app",
         "required": false,
@@ -361,7 +368,7 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "amplify-app",
+        "name": "agentcore-gateway",
         "required": false,
         "conditionKeys": [],
         "dependentActions": [
@@ -370,6 +377,7 @@
           "apprunner:DisassociateWebAcl",
           "appsync:DisassociateWebACL",
           "appsync:SetWebACL",
+          "bedrock-agentcore:GatewayDisassociateWebACL",
           "cognito-idp:DisassociateWebACL",
           "ec2:DisassociateVerifiedAccessInstanceWebAcl",
           "elasticloadbalancing:DeleteWebACLAssociation",
@@ -377,6 +385,12 @@
           "wafv2:PutPermissionPolicy"
         ]
       },
+      {
+        "name": "amplify-app",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "apigateway",
         "required": false,
@@ -641,12 +655,19 @@
           "amplify:GetWebACLForResource",
           "apprunner:DescribeWebAclForService",
           "appsync:GetWebACLForResource",
+          "bedrock-agentcore:GatewayGetWebACLForResource",
           "cognito-idp:GetWebACLForResource",
           "ec2:GetVerifiedAccessInstanceWebAcl",
           "elasticloadbalancing:GetLoadBalancerWebACL",
           "wafv2:GetWebACL"
         ]
       },
+      {
+        "name": "agentcore-gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "amplify-app",
         "required": false,
@@ -772,11 +793,18 @@
           "amplify:ListResourcesForWebACL",
           "apprunner:ListAssociatedServicesForWebAcl",
           "appsync:ListResourcesForWebACL",
+          "bedrock-agentcore:GatewayListResourcesForWebACL",
           "cognito-idp:ListResourcesForWebACL",
           "ec2:DescribeVerifiedAccessInstanceWebAclAssociations",
           "elasticloadbalancing:DescribeWebACLAssociation"
         ]
       },
+      {
+        "name": "agentcore-gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "amplify-app",
         "required": false,

package/data/conditionKeys/acm.json

@@ -4,6 +4,11 @@
     "description": "Filters access by certificateAuthority in the request. Can be used to restrict which Certificate Authorites certificates can be issued from",
     "type": "String"
   },
+  "acm:certificatekeypairorigin": {
+    "key": "acm:CertificateKeyPairOrigin",
+    "description": "Filters access by certificateKeyPairOrigin in the request. Can be used to restrict which certificate provisioning paths are permitted",
+    "type": "String"
+  },
   "acm:certificatetransparencylogging": {
     "key": "acm:CertificateTransparencyLogging",
     "description": "Filters access by certificateTransparencyLogging option in the request. Default 'ENABLED' if no key is present in the request",

package/data/conditionKeys/artifact.json

@@ -8,5 +8,20 @@
     "key": "artifact:ReportSeries",
     "description": "Filters access by which series reports are associated with",
     "type": "String"
+  },
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
   }
 }