@cloud-copilot/iam-data 0.20.202607221 → 0.20.202607241

package/data/actions/artifact.json

@@ -253,6 +253,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putcomplianceinquiryfeedback": {
+    "name": "PutComplianceInquiryFeedback",
+    "description": "Grants permission to submit feedback on a compliance inquiry response",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "compliance-inquiry",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to associate a set of tags with an AWS Artifact resource",

package/data/actions/bedrock-agentcore.json

@@ -183,6 +183,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "adddatasetexamples": {
+    "name": "AddDatasetExamples",
+    "description": "Grants permission to add examples to a dataset",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchcreatememoryrecords": {
     "name": "BatchCreateMemoryRecords",
     "description": "Grants permission to create one or more memory records",
@@ -397,6 +412,33 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createdataset": {
+    "name": "CreateDataset",
+    "description": "Grants permission to create a new dataset",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createdatasetversion": {
+    "name": "CreateDatasetVersion",
+    "description": "Grants permission to create a new version of a dataset",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createevaluator": {
     "name": "CreateEvaluator",
     "description": "Grants permission to create a new evaluator",
@@ -606,7 +648,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "bedrock-agentcore:DiscoveryUrl"
     ],
     "dependentActions": []
   },
@@ -845,6 +888,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletedataset": {
+    "name": "DeleteDataset",
+    "description": "Grants permission to delete a dataset",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedatasetexamples": {
+    "name": "DeleteDatasetExamples",
+    "description": "Grants permission to delete examples from a dataset",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteevaluator": {
     "name": "DeleteEvaluator",
     "description": "Grants permission to delete an evaluator",
@@ -1475,6 +1548,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdataset": {
+    "name": "GetDataset",
+    "description": "Grants permission to get details of a dataset",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getevaluator": {
     "name": "GetEvaluator",
     "description": "Grants permission to get details of an evaluator",
@@ -2478,6 +2566,44 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdatasetexamples": {
+    "name": "ListDatasetExamples",
+    "description": "Grants permission to list examples in a dataset",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listdatasetversions": {
+    "name": "ListDatasetVersions",
+    "description": "Grants permission to list versions of a dataset",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listdatasets": {
+    "name": "ListDatasets",
+    "description": "Grants permission to list datasets",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listevaluators": {
     "name": "ListEvaluators",
     "description": "Grants permission to list evaluators",
@@ -3644,6 +3770,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatedataset": {
+    "name": "UpdateDataset",
+    "description": "Grants permission to update a dataset",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatedatasetexamples": {
+    "name": "UpdateDatasetExamples",
+    "description": "Grants permission to update examples in a dataset",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateevaluator": {
     "name": "UpdateEvaluator",
     "description": "Grants permission to update an evaluator",
@@ -3839,7 +3995,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "bedrock-agentcore:DiscoveryUrl"
+    ],
     "dependentActions": []
   },
   "updatepolicy": {

package/data/actions/billing.json

@@ -81,21 +81,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getcumulativetracking": {
-    "name": "GetCumulativeTracking",
-    "description": "Grants permission to retrieve cumulative spend and usage tracking data for a contract",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "contract",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getiamaccesspreference": {
     "name": "GetIAMAccessPreference",
     "description": "Grants permission to retrieve the state of the Allow IAM Access billing preference",
@@ -104,21 +89,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getmonthlytracking": {
-    "name": "GetMonthlyTracking",
-    "description": "Grants permission to retrieve monthly spend and usage tracking data for a contract",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "contract",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getsellerofrecord": {
     "name": "GetSellerOfRecord",
     "description": "Grants permission to retrieve the account's default Seller of Record",

package/data/actions/connect.json

@@ -5363,6 +5363,24 @@
     ],
     "dependentActions": []
   },
+  "searchrules": {
+    "name": "SearchRules",
+    "description": "Grants permission to search rules in an Amazon Connect instance",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "instance",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "connect:InstanceId",
+      "connect:SearchTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "searchsecurityprofiles": {
     "name": "SearchSecurityProfiles",
     "description": "Grants permission to search security profile resources in an Amazon Connect instance",

package/data/actions/gameliftstreams.json

@@ -285,7 +285,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "gameliftstreams:RoleArn"
+    ],
     "dependentActions": []
   },
   "tagresource": {

package/data/actions/quicksight.json

@@ -1142,6 +1142,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteapp": {
+    "name": "DeleteApp",
+    "description": "Grants permission to delete a QuickSight app",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletebrand": {
     "name": "DeleteBrand",
     "description": "Grants permission to delete an Amazon QuickSight brand",
@@ -1768,6 +1783,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeapp": {
+    "name": "DescribeApp",
+    "description": "Grants permission to describe a QuickSight app",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeapppermissions": {
+    "name": "DescribeAppPermissions",
+    "description": "Grants permission to describe permissions for a QuickSight app",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeassetbundleexportjob": {
     "name": "DescribeAssetBundleExportJob",
     "description": "Grants permission to describe an asset bundle export job",
@@ -2715,6 +2760,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listapps": {
+    "name": "ListApps",
+    "description": "Grants permission to list all apps in a QuickSight account",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listassetbundleexportjobs": {
     "name": "ListAssetBundleExportJobs",
     "description": "Grants permission to list all asset bundle export jobs",
@@ -3120,6 +3180,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "app",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "brand",
         "required": false,
@@ -3498,6 +3564,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "searchapps": {
+    "name": "SearchApps",
+    "description": "Grants permission to search for apps in a QuickSight account",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "searchautomationgroups": {
     "name": "SearchAutomationGroups",
     "description": "Grants permission to search for automation groups in an account",
@@ -3712,6 +3793,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "app",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "brand",
         "required": false,
@@ -3838,6 +3925,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "app",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "brand",
         "required": false,
@@ -4067,6 +4160,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateapppermissions": {
+    "name": "UpdateAppPermissions",
+    "description": "Grants permission to update permissions for a QuickSight app",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [
+      {
+        "name": "app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateapplicationwithtokenexchangegrant": {
     "name": "UpdateApplicationWithTokenExchangeGrant",
     "description": "Grants permission to update QuickSight IAM Identity Center application with Token Exchange grant",

package/data/actions/redshift-data.json

@@ -155,6 +155,16 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listsessions": {
+    "name": "ListSessions",
+    "description": "Grants permission to list sessions for a given principal",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "redshift-data:session-owner-iam-userid"
+    ],
+    "dependentActions": []
+  },
   "liststatements": {
     "name": "ListStatements",
     "description": "Grants permission to list queries for a given principal",

package/data/actions/workspaces.json

@@ -216,14 +216,13 @@
       {
         "name": "workspaceimage",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "createaccountlinkinvitation": {
@@ -279,20 +278,13 @@
       {
         "name": "directoryid",
         "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "workspaceid",
-        "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "createtags": {
@@ -314,14 +306,13 @@
       {
         "name": "workspaceimage",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "createworkspacebundle": {
@@ -329,23 +320,16 @@
     "description": "Grants permission to create a WorkSpace bundle",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "workspacebundle",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "workspaceimage",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "createworkspaceimage": {
@@ -356,14 +340,13 @@
       {
         "name": "workspaceid",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "createworkspaces": {
@@ -386,21 +369,9 @@
           "aws:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
-      },
-      {
-        "name": "workspaceid",
-        "required": true,
-        "conditionKeys": [
-          "aws:RequestTag/${TagKey}",
-          "aws:TagKeys"
-        ],
-        "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "createworkspacespool": {
@@ -411,26 +382,21 @@
       {
         "name": "directoryid",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "workspacebundle",
         "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "workspacespoolid",
-        "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "deleteaccountlinkinvitation": {
@@ -841,7 +807,7 @@
     "accessLevel": "List",
     "resourceTypes": [
       {
-        "name": "workspacespoolid",
+        "name": "workspacespool",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -1258,7 +1224,7 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "workspacespoolid",
+        "name": "workspacespool",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -1288,7 +1254,7 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "workspacespoolid",
+        "name": "workspacespool",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -1335,7 +1301,7 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "workspacespoolid",
+        "name": "workspacespool",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -1439,7 +1405,7 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "workspacespoolid",
+        "name": "workspacespool",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []

package/data/conditionKeys/gameliftstreams.json

@@ -13,5 +13,10 @@
     "key": "aws:TagKeys",
     "description": "Filters access by a list of tag keys that are allowed in the request",
     "type": "ArrayOfString"
+  },
+  "gameliftstreams:rolearn": {
+    "key": "gameliftstreams:RoleArn",
+    "description": "Filters access by the ARN of the IAM role passed to Amazon GameLift Streams to assume for the stream session",
+    "type": "ARN"
   }
 }

package/data/resourceTypes/bedrock-agentcore.json

@@ -56,6 +56,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "dataset": {
+    "key": "dataset",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:dataset/${DatasetId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "evaluator": {
     "key": "evaluator",
     "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:evaluator/${EvaluatorId}",

package/data/resourceTypes/billing.json

@@ -5,9 +5,5 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
-  },
-  "contract": {
-    "key": "contract",
-    "arn": "arn:${Partition}:billing::${Account}:contract/${ContractId}"
   }
 }

package/data/resourceTypes/quicksight.json

@@ -21,6 +21,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "app": {
+    "key": "app",
+    "arn": "arn:${Partition}:quicksight:${Region}:${Account}:app/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "approvalpolicy": {
     "key": "approvalPolicy",
     "arn": "arn:${Partition}:quicksight:${Region}:${Account}:approval-policy/${ResourceId}"

package/data/resourceTypes/workspaces.json

@@ -1,7 +1,10 @@
 {
   "certificateid": {
     "key": "certificateid",
-    "arn": "arn:${Partition}:workspaces:${Region}:${Account}:workspacecertificate/${CertificateId}"
+    "arn": "arn:${Partition}:workspaces:${Region}:${Account}:workspacecertificate/${CertificateId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "connectionalias": {
     "key": "connectionalias",
@@ -52,8 +55,8 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
-  "workspacespoolid": {
-    "key": "workspacespoolid",
+  "workspacespool": {
+    "key": "workspacespool",
     "arn": "arn:${Partition}:workspaces:${Region}:${Account}:workspacespool/${PoolId}",
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.20.202607221",
+  "version": "0.20.202607241",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-07-22T05:38:31.943Z",
+  "updatedAt": "2026-07-24T05:39:42.510Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",