@cloud-copilot/iam-data 0.20.202607181 → 0.20.202607221

package/data/actions/aws-marketplace.json

@@ -137,6 +137,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettaxcomplianceprofile": {
+    "name": "GetTaxComplianceProfile",
+    "description": "Grants permission to retrieve details of a tax compliance profile including artifacts with download URLs",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "TaxComplianceProfile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getverification": {
     "name": "GetVerification",
     "description": "Grants permission to retrieve the detailed status of a specific verification process, including PSP validation results",
@@ -227,6 +242,22 @@
     ],
     "dependentActions": []
   },
+  "listtaxcomplianceprofilechangetasks": {
+    "name": "ListTaxComplianceProfileChangeTasks",
+    "description": "Grants permission to list tax compliance profile change tasks with optional filters",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtaxcomplianceprofiles": {
+    "name": "ListTaxComplianceProfiles",
+    "description": "Grants permission to list tax compliance profiles with optional filters",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listverificationevidence": {
     "name": "ListVerificationEvidence",
     "description": "Grants permission to list verification evidence resources with summary metadata",
@@ -298,6 +329,24 @@
     ],
     "dependentActions": []
   },
+  "starttaxcomplianceprofilechangetask": {
+    "name": "StartTaxComplianceProfileChangeTask",
+    "description": "Grants permission to initiate asynchronous processing of a tax compliance profile create or update with artifact validation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "TaxComplianceProfileChangeTask",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "startverification": {
     "name": "StartVerification",
     "description": "Grants permission to submit verification evidence to a Payment Service Provider and enable data sharing for a specified jurisdiction",

package/data/actions/events.json

@@ -170,12 +170,6 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
-      },
-      {
-        "name": "event-busv2",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -299,12 +293,6 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
-      },
-      {
-        "name": "event-busv2",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -425,12 +413,6 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
-      },
-      {
-        "name": "event-busv2",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -658,18 +640,6 @@
         "conditionKeys": [],
         "dependentActions": []
       },
-      {
-        "name": "event-busv2",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "publisher",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "rule-on-custom-event-bus",
         "required": false,
@@ -681,12 +651,6 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
-      },
-      {
-        "name": "subscriber",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -727,17 +691,9 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
-      },
-      {
-        "name": "event-busv2",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "events:ResourceArn",
-      "events:SystemMetadata/EventGroupId",
       "events:detail-type",
       "events:eventBusInvocation",
       "events:source"
@@ -886,18 +842,6 @@
         "conditionKeys": [],
         "dependentActions": []
       },
-      {
-        "name": "event-busv2",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "publisher",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "rule-on-custom-event-bus",
         "required": false,
@@ -909,12 +853,6 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
-      },
-      {
-        "name": "subscriber",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -943,18 +881,6 @@
         "conditionKeys": [],
         "dependentActions": []
       },
-      {
-        "name": "event-busv2",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "publisher",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "rule-on-custom-event-bus",
         "required": false,
@@ -966,12 +892,6 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
-      },
-      {
-        "name": "subscriber",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1064,12 +984,6 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
-      },
-      {
-        "name": "event-busv2",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [],

package/data/actions/invoicing.json

@@ -160,6 +160,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "procurement-portal-preference",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -177,6 +183,16 @@
     ],
     "dependentActions": []
   },
+  "sendprocurementportalvalidation": {
+    "name": "SendProcurementPortalValidation",
+    "description": "Grants permission to send a one-time passcode (OTP) to validate a procurement portal preference",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource",
@@ -187,6 +203,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "procurement-portal-preference",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -206,6 +228,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "procurement-portal-preference",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -240,5 +268,15 @@
       "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
+  },
+  "verifyprocurementportalvalidation": {
+    "name": "VerifyProcurementPortalValidation",
+    "description": "Grants permission to verify the one-time passcode (OTP) to validate a procurement portal preference",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
   }
 }

package/data/actions/supportplans.json

@@ -1,4 +1,28 @@
 {
+  "acceptsupportagreement": {
+    "name": "AcceptSupportAgreement",
+    "description": "Grants permission to accept a support agreement for this AWS account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "cancelsupportagreement": {
+    "name": "CancelSupportAgreement",
+    "description": "Grants permission to cancel a support agreement for this AWS account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createsupportagreement": {
+    "name": "CreateSupportAgreement",
+    "description": "Grants permission to create a support agreement for this AWS account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createsupportplanschedule": {
     "name": "CreateSupportPlanSchedule",
     "description": "Grants permission to create support plan schedules for this AWS account",
@@ -7,6 +31,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getsupportagreement": {
+    "name": "GetSupportAgreement",
+    "description": "Grants permission to view details about a support agreement for this AWS account",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getsupportplan": {
     "name": "GetSupportPlan",
     "description": "Grants permission to view details about the current support plan for this AWS account",
@@ -23,14 +55,38 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listsupportagreementrevisions": {
+    "name": "ListSupportAgreementRevisions",
+    "description": "Grants permission to list support agreement revisions for this AWS account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listsupportagreements": {
+    "name": "ListSupportAgreements",
+    "description": "Grants permission to list support agreements for this AWS account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listsupportplanmodifiers": {
     "name": "ListSupportPlanModifiers",
-    "description": "Grants permission to view a list of all support plan modifiers for this AWS account",
+    "description": "Grants permission to view a list of all support plan modifiers for this account",
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
+  "rejectsupportagreement": {
+    "name": "RejectSupportAgreement",
+    "description": "Grants permission to reject a support agreement for this AWS account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startsupportplanupdate": {
     "name": "StartSupportPlanUpdate",
     "description": "Grants permission to update the support plan for this AWS account",
@@ -38,5 +94,13 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "updatesupportagreement": {
+    "name": "UpdateSupportAgreement",
+    "description": "Grants permission to update a support agreement for this AWS account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

package/data/actions/transform-custom.json

@@ -4,7 +4,11 @@
     "description": "Grants permission to invoke BatchCreateFindings on AWS Transform custom",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "batchupdatefindings": {

package/data/conditionKeys/airflow.json

@@ -1,4 +1,29 @@
 {
+  "airflow:dagaccessentity": {
+    "key": "airflow:DagAccessEntity",
+    "description": "Filters access by the DAG sub-resource being accessed",
+    "type": "String"
+  },
+  "airflow:resourceaction": {
+    "key": "airflow:ResourceAction",
+    "description": "Filters access by the action being performed on the Airflow resource",
+    "type": "String"
+  },
+  "airflow:resourceid": {
+    "key": "airflow:ResourceId",
+    "description": "Filters access by the identifier of the specific Airflow resource, such as a DAG ID or connection ID",
+    "type": "String"
+  },
+  "airflow:resourcetype": {
+    "key": "airflow:ResourceType",
+    "description": "Filters access by the Airflow resource type specified in the request",
+    "type": "String"
+  },
+  "airflow:teamname": {
+    "key": "airflow:TeamName",
+    "description": "Filters access by the team name associated with the caller's identity, enabling team-based access control for Airflow resources",
+    "type": "String"
+  },
   "aws:requesttag/${tagkey}": {
     "key": "aws:RequestTag/${TagKey}",
     "description": "Filters access by the presence of tag key-value pairs in the request",

package/data/resourceTypes/airflow.json

@@ -1,10 +1,16 @@
 {
   "environment": {
     "key": "environment",
-    "arn": "arn:${Partition}:airflow:${Region}:${Account}:environment/${EnvironmentName}"
+    "arn": "arn:${Partition}:airflow:${Region}:${Account}:environment/${EnvironmentName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "rbac-role": {
     "key": "rbac-role",
-    "arn": "arn:${Partition}:airflow:${Region}:${Account}:role/${EnvironmentName}/${RoleName}"
+    "arn": "arn:${Partition}:airflow:${Region}:${Account}:role/${EnvironmentName}/${RoleName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/aws-marketplace.json

@@ -33,6 +33,20 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "taxcomplianceprofile": {
+    "key": "TaxComplianceProfile",
+    "arn": "arn:${Partition}:aws-marketplace:${Region}:${Account}:tax-compliance-profile/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "taxcomplianceprofilechangetask": {
+    "key": "TaxComplianceProfileChangeTask",
+    "arn": "arn:${Partition}:aws-marketplace:${Region}:${Account}:tax-compliance-profile-change-task/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "verificationevidence": {
     "key": "VerificationEvidence",
     "arn": "arn:${Partition}:aws-marketplace:${Region}:${Account}:verification-type/${VerificationType}/verification-evidence/${ResourceId}",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.20.202607181",
+  "version": "0.20.202607221",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-07-18T05:30:08.794Z",
+  "updatedAt": "2026-07-22T05:38:31.943Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",