@cloud-copilot/iam-data 0.20.202607291 → 0.21.202607301

package/data/actions/kafka.json

@@ -29,6 +29,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createchannel": {
+    "name": "CreateChannel",
+    "description": "Grants permission to create an MSK Data Channel for an MSK cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createcluster": {
     "name": "CreateCluster",
     "description": "Grants permission to create an MSK cluster",
@@ -137,6 +155,27 @@
     ],
     "dependentActions": []
   },
+  "deletechannel": {
+    "name": "DeleteChannel",
+    "description": "Grants permission to delete an MSK Data Channel",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletecluster": {
     "name": "DeleteCluster",
     "description": "Grants permission to delete an MSK cluster",
@@ -227,6 +266,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describechannel": {
+    "name": "DescribeChannel",
+    "description": "Grants permission to describe an MSK Data Channel",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describecluster": {
     "name": "DescribeCluster",
     "description": "Grants permission to describe an MSK cluster",
@@ -394,6 +454,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listchannels": {
+    "name": "ListChannels",
+    "description": "Grants permission to list all MSK Data Channels for a specified MSK cluster",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listclientvpcconnections": {
     "name": "ListClientVpcConnections",
     "description": "Grants permission to list all MSK VPC connections created for a cluster",
@@ -705,6 +780,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatechannel": {
+    "name": "UpdateChannel",
+    "description": "Grants permission to update the configuration of an MSK Data Channel",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateclusterconfiguration": {
     "name": "UpdateClusterConfiguration",
     "description": "Grants permission to update the configuration of the MSK cluster",

package/data/conditionKeys/iotsitewise.json

@@ -59,6 +59,11 @@
     "description": "Filters access by the ID of an asset property",
     "type": "String"
   },
+  "iotsitewise:taskarns": {
+    "key": "iotsitewise:taskArns",
+    "description": "Filters access by the task ARNs specified in the pipeline request",
+    "type": "ArrayOfARN"
+  },
   "iotsitewise:user": {
     "key": "iotsitewise:user",
     "description": "Filters access by the ID of an AWS Single Sign-On user",

package/data/rcpSupportedServices.json

@@ -0,0 +1,45 @@
+[
+  "aoss",
+  "appconfig",
+  "appstream",
+  "autoscaling",
+  "cloudfront",
+  "cloudsearch",
+  "codebuild",
+  "codecommit",
+  "codepipeline",
+  "cognito-identity",
+  "comprehend",
+  "comprehendmedical",
+  "cost-optimization-hub",
+  "dax",
+  "dynamodb",
+  "ecr",
+  "firehose",
+  "fis",
+  "health",
+  "inspector2",
+  "kendra",
+  "kendra-ranking",
+  "kinesisvideo",
+  "kms",
+  "logs",
+  "mediastore",
+  "memorydb",
+  "networkmonitor",
+  "pca-connector-ad",
+  "polly",
+  "pricing",
+  "s3",
+  "secretsmanager",
+  "signin",
+  "sqs",
+  "sts",
+  "support",
+  "textract",
+  "timestream-influxdb",
+  "transcribe",
+  "transfer",
+  "translate",
+  "wafv2"
+]

package/data/resourceTypes/iotsitewise.json

@@ -6,6 +6,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "application": {
+    "key": "application",
+    "arn": "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/${WorkspaceName}/application/${ApplicationId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "asset": {
     "key": "asset",
     "arn": "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/${AssetId}",
@@ -48,6 +55,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "pipeline": {
+    "key": "pipeline",
+    "arn": "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/${WorkspaceName}/pipeline/${PipelineName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "portal": {
     "key": "portal",
     "arn": "arn:${Partition}:iotsitewise:${Region}:${Account}:portal/${PortalId}",
@@ -62,11 +76,25 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "task": {
+    "key": "task",
+    "arn": "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/${WorkspaceName}/task/${TaskName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "time-series": {
     "key": "time-series",
     "arn": "arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/${TimeSeriesId}",
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "workspace": {
+    "key": "workspace",
+    "arn": "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/${WorkspaceName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/kafka.json

@@ -1,4 +1,11 @@
 {
+  "channel": {
+    "key": "channel",
+    "arn": "arn:${Partition}:kafka:${Region}:${Account}:channel/${ClusterName}/${ClusterUuid}/${ChannelName}/${Uuid}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "cluster": {
     "key": "cluster",
     "arn": "arn:${Partition}:kafka:${Region}:${Account}:cluster/${ClusterName}/${Uuid}",

package/dist/cjs/services.d.ts

@@ -4,6 +4,12 @@
  * @returns an array of all service keys
  */
 export declare function iamServiceKeys(): Promise<string[]>;
+/**
+ * Get keys for all services with RCP support
+ *
+ * @returns an array of service keys that support RCPs
+ */
+export declare function servicesWithRcpSupport(): Promise<string[]>;
 /**
  * Check if a service exists
  *

package/dist/cjs/services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAExD;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG3E;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOxE"}
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAExD;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAEhE;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG3E;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOxE"}

package/dist/cjs/services.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.iamServiceKeys = iamServiceKeys;
+exports.servicesWithRcpSupport = servicesWithRcpSupport;
 exports.iamServiceExists = iamServiceExists;
 exports.iamServiceName = iamServiceName;
 const data_js_1 = require("./data.js");
@@ -12,6 +13,14 @@ const data_js_1 = require("./data.js");
 async function iamServiceKeys() {
     return (0, data_js_1.readDataFile)('services.json');
 }
+/**
+ * Get keys for all services with RCP support
+ *
+ * @returns an array of service keys that support RCPs
+ */
+async function servicesWithRcpSupport() {
+    return (0, data_js_1.readDataFile)('rcpSupportedServices.json');
+}
 /**
  * Check if a service exists
  *

package/dist/cjs/services.js.map

@@ -1 +1 @@
-{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":";;AAOA,wCAEC;AAQD,4CAGC;AASD,wCAOC;AApCD,uCAAwC;AAExC;;;;GAIG;AACI,KAAK,UAAU,cAAc;IAClC,OAAO,IAAA,sBAAY,EAAW,eAAe,CAAC,CAAA;AAChD,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,gBAAgB,CAAC,UAAkB;IACvD,MAAM,IAAI,GAAG,MAAM,IAAA,sBAAY,EAAyB,mBAAmB,CAAC,CAAA;IAC5E,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,cAAc,CAAC,UAAkB;IACrD,MAAM,IAAI,GAAG,MAAM,IAAA,sBAAY,EAAyB,mBAAmB,CAAC,CAAA;IAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,iBAAiB,CAAC,CAAA;IACzD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":";;AAOA,wCAEC;AAOD,wDAEC;AAQD,4CAGC;AASD,wCAOC;AA7CD,uCAAwC;AAExC;;;;GAIG;AACI,KAAK,UAAU,cAAc;IAClC,OAAO,IAAA,sBAAY,EAAW,eAAe,CAAC,CAAA;AAChD,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,sBAAsB;IAC1C,OAAO,IAAA,sBAAY,EAAW,2BAA2B,CAAC,CAAA;AAC5D,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,gBAAgB,CAAC,UAAkB;IACvD,MAAM,IAAI,GAAG,MAAM,IAAA,sBAAY,EAAyB,mBAAmB,CAAC,CAAA;IAC5E,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,cAAc,CAAC,UAAkB;IACrD,MAAM,IAAI,GAAG,MAAM,IAAA,sBAAY,EAAyB,mBAAmB,CAAC,CAAA;IAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,iBAAiB,CAAC,CAAA;IACzD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/esm/services.d.ts

@@ -4,6 +4,12 @@
  * @returns an array of all service keys
  */
 export declare function iamServiceKeys(): Promise<string[]>;
+/**
+ * Get keys for all services with RCP support
+ *
+ * @returns an array of service keys that support RCPs
+ */
+export declare function servicesWithRcpSupport(): Promise<string[]>;
 /**
  * Check if a service exists
  *

package/dist/esm/services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAExD;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG3E;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOxE"}
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAExD;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAEhE;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG3E;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOxE"}

package/dist/esm/services.js

@@ -7,6 +7,14 @@ import { readDataFile } from './data.js';
 export async function iamServiceKeys() {
     return readDataFile('services.json');
 }
+/**
+ * Get keys for all services with RCP support
+ *
+ * @returns an array of service keys that support RCPs
+ */
+export async function servicesWithRcpSupport() {
+    return readDataFile('rcpSupportedServices.json');
+}
 /**
  * Check if a service exists
  *

package/dist/esm/services.js.map

@@ -1 +1 @@
-{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAExC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,OAAO,YAAY,CAAW,eAAe,CAAC,CAAA;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAkB;IACvD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAyB,mBAAmB,CAAC,CAAA;IAC5E,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAAkB;IACrD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAyB,mBAAmB,CAAC,CAAA;IAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,iBAAiB,CAAC,CAAA;IACzD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAExC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,OAAO,YAAY,CAAW,eAAe,CAAC,CAAA;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,OAAO,YAAY,CAAW,2BAA2B,CAAC,CAAA;AAC5D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAkB;IACvD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAyB,mBAAmB,CAAC,CAAA;IAC5E,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAAkB;IACrD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAyB,mBAAmB,CAAC,CAAA;IAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,iBAAiB,CAAC,CAAA;IACzD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.20.202607291",
+  "version": "0.21.202607301",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-07-29T05:39:04.942Z",
+  "updatedAt": "2026-07-30T05:31:27.562Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",