@cloud-copilot/iam-data 0.21.202607291 → 0.21.202608031

package/data/actions/kafka.json

@@ -29,6 +29,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createchannel": {
+    "name": "CreateChannel",
+    "description": "Grants permission to create an MSK Data Channel for an MSK cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createcluster": {
     "name": "CreateCluster",
     "description": "Grants permission to create an MSK cluster",
@@ -137,6 +155,27 @@
     ],
     "dependentActions": []
   },
+  "deletechannel": {
+    "name": "DeleteChannel",
+    "description": "Grants permission to delete an MSK Data Channel",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletecluster": {
     "name": "DeleteCluster",
     "description": "Grants permission to delete an MSK cluster",
@@ -227,6 +266,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describechannel": {
+    "name": "DescribeChannel",
+    "description": "Grants permission to describe an MSK Data Channel",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describecluster": {
     "name": "DescribeCluster",
     "description": "Grants permission to describe an MSK cluster",
@@ -394,6 +454,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listchannels": {
+    "name": "ListChannels",
+    "description": "Grants permission to list all MSK Data Channels for a specified MSK cluster",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listclientvpcconnections": {
     "name": "ListClientVpcConnections",
     "description": "Grants permission to list all MSK VPC connections created for a cluster",
@@ -705,6 +780,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatechannel": {
+    "name": "UpdateChannel",
+    "description": "Grants permission to update the configuration of an MSK Data Channel",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateclusterconfiguration": {
     "name": "UpdateClusterConfiguration",
     "description": "Grants permission to update the configuration of the MSK cluster",

package/data/actions/pricingplanmanager.json

@@ -1,4 +1,12 @@
 {
+  "approvepaidsubscription": {
+    "name": "ApprovePaidSubscription",
+    "description": "Grants permission to approve paid subscription",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "associateresourcestosubscription": {
     "name": "AssociateResourcesToSubscription",
     "description": "Grants permission to associate resources with a subscription",
@@ -17,7 +25,7 @@
   },
   "cancelsubscriptionchange": {
     "name": "CancelSubscriptionChange",
-    "description": "Grants permission to cancel a pending a change for a subscription",
+    "description": "Grants permission to cancel a scheduled change for a subscription",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],

package/data/actions/resiliencehub.json

@@ -283,6 +283,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createtest": {
+    "name": "CreateTest",
+    "description": "Grants permission to create a test instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createuserjourney": {
     "name": "CreateUserJourney",
     "description": "Grants permission to create a user journey within a system",
@@ -532,6 +549,40 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletetest": {
+    "name": "DeleteTest",
+    "description": "Grants permission to delete a test",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletetestsources": {
+    "name": "DeleteTestSources",
+    "description": "Grants permission to delete test sources from a test",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteuserjourney": {
     "name": "DeleteUserJourney",
     "description": "Grants permission to delete a user journey",
@@ -775,6 +826,48 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettest": {
+    "name": "GetTest",
+    "description": "Grants permission to retrieve a test",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gettestrun": {
+    "name": "GetTestRun",
+    "description": "Grants permission to retrieve a test run",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gettesttemplate": {
+    "name": "GetTestTemplate",
+    "description": "Grants permission to retrieve a test template",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getuserjourney": {
     "name": "GetUserJourney",
     "description": "Grants permission to retrieve a user journey",
@@ -1157,6 +1250,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listresolvedtestruntargetresources": {
+    "name": "ListResolvedTestRunTargetResources",
+    "description": "Grants permission to list resolved target resources for a test run",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listresourcegroupingrecommendations": {
     "name": "ListResourceGroupingRecommendations",
     "description": "Grants permission to list resource grouping recommendations",
@@ -1362,6 +1472,99 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listtestrunevents": {
+    "name": "ListTestRunEvents",
+    "description": "Grants permission to list events for a test run",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtestrunsources": {
+    "name": "ListTestRunSources",
+    "description": "Grants permission to list test run source snapshots",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtestruns": {
+    "name": "ListTestRuns",
+    "description": "Grants permission to list test runs for a target",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtestsources": {
+    "name": "ListTestSources",
+    "description": "Grants permission to list test sources on a test",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtesttemplates": {
+    "name": "ListTestTemplates",
+    "description": "Grants permission to list available test templates",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtests": {
+    "name": "ListTests",
+    "description": "Grants permission to list tests for a target",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listunsupportedappversionresources": {
     "name": "ListUnsupportedAppVersionResources",
     "description": "Grants permission to list unsupported application version resources",
@@ -1424,6 +1627,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "puttestsources": {
+    "name": "PutTestSources",
+    "description": "Grants permission to put test sources on a test",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "rejectresourcegroupingrecommendations": {
     "name": "RejectResourceGroupingRecommendations",
     "description": "Grants permission to reject resource grouping recommendations",
@@ -1527,6 +1747,40 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "starttestrun": {
+    "name": "StartTestRun",
+    "description": "Grants permission to start a test run",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stoptestrun": {
+    "name": "StopTestRun",
+    "description": "Grants permission to stop a test run",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to assign a resource tag",
@@ -1844,6 +2098,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatetest": {
+    "name": "UpdateTest",
+    "description": "Grants permission to update a test",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateuserjourney": {
     "name": "UpdateUserJourney",
     "description": "Grants permission to update a user journey",

package/data/actions/ses.json

@@ -3302,6 +3302,16 @@
     ],
     "dependentActions": []
   },
+  "putaccountpricingattributes": {
+    "name": "PutAccountPricingAttributes",
+    "description": "Grants permission to set the pricing plan for your account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ses:ApiVersion"
+    ],
+    "dependentActions": []
+  },
   "putaccountsuppressionattributes": {
     "name": "PutAccountSuppressionAttributes",
     "description": "Grants permission to change the settings for the account-level suppression list",

package/data/conditionKeys/airflow.json

@@ -21,8 +21,8 @@
   },
   "airflow:teamname": {
     "key": "airflow:TeamName",
-    "description": "Filters access by the team name associated with the caller's identity, enabling team-based access control for Airflow resources",
-    "type": "String"
+    "description": "Filters access by the team names associated with the caller's identity, enabling team-based access control for Airflow resources",
+    "type": "ArrayOfString"
   },
   "aws:requesttag/${tagkey}": {
     "key": "aws:RequestTag/${TagKey}",

package/data/conditionKeys/iotsitewise.json

@@ -59,6 +59,11 @@
     "description": "Filters access by the ID of an asset property",
     "type": "String"
   },
+  "iotsitewise:taskarns": {
+    "key": "iotsitewise:taskArns",
+    "description": "Filters access by the task ARNs specified in the pipeline request",
+    "type": "ArrayOfARN"
+  },
   "iotsitewise:user": {
     "key": "iotsitewise:user",
     "description": "Filters access by the ID of an AWS Single Sign-On user",

package/data/rcpSupportedServices.json

@@ -9,6 +9,7 @@
   "codecommit",
   "codepipeline",
   "cognito-identity",
+  "cognito-idp",
   "comprehend",
   "comprehendmedical",
   "cost-optimization-hub",
@@ -20,11 +21,9 @@
   "health",
   "inspector2",
   "kendra",
-  "kendra-ranking",
   "kinesisvideo",
   "kms",
   "logs",
-  "mediastore",
   "memorydb",
   "networkmonitor",
   "pca-connector-ad",

package/data/resourceTypes/aidevops.json

@@ -6,6 +6,10 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "asset": {
+    "key": "asset",
+    "arn": "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/${AgentSpaceId}/asset/${AssetId}"
+  },
   "associations": {
     "key": "associations",
     "arn": "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/${AgentSpaceId}/association/${AssociationId}"
@@ -23,5 +27,9 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "trigger": {
+    "key": "trigger",
+    "arn": "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/${AgentSpaceId}/trigger/${TriggerId}"
   }
 }

package/data/resourceTypes/iotsitewise.json

@@ -6,6 +6,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "application": {
+    "key": "application",
+    "arn": "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/${WorkspaceName}/application/${ApplicationId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "asset": {
     "key": "asset",
     "arn": "arn:${Partition}:iotsitewise:${Region}:${Account}:asset/${AssetId}",
@@ -48,6 +55,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "pipeline": {
+    "key": "pipeline",
+    "arn": "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/${WorkspaceName}/pipeline/${PipelineName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "portal": {
     "key": "portal",
     "arn": "arn:${Partition}:iotsitewise:${Region}:${Account}:portal/${PortalId}",
@@ -62,11 +76,25 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "task": {
+    "key": "task",
+    "arn": "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/${WorkspaceName}/task/${TaskName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "time-series": {
     "key": "time-series",
     "arn": "arn:${Partition}:iotsitewise:${Region}:${Account}:time-series/${TimeSeriesId}",
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "workspace": {
+    "key": "workspace",
+    "arn": "arn:${Partition}:iotsitewise:${Region}:${Account}:workspace/${WorkspaceName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/kafka.json

@@ -1,4 +1,11 @@
 {
+  "channel": {
+    "key": "channel",
+    "arn": "arn:${Partition}:kafka:${Region}:${Account}:channel/${ClusterName}/${ClusterUuid}/${ChannelName}/${Uuid}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "cluster": {
     "key": "cluster",
     "arn": "arn:${Partition}:kafka:${Region}:${Account}:cluster/${ClusterName}/${Uuid}",

package/data/resourceTypes/resiliencehub.json

@@ -47,5 +47,9 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "test-template": {
+    "key": "test-template",
+    "arn": "arn:${Partition}:resiliencehub:${Region}:${Account}:test-template/${TestTemplateId}"
   }
 }

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.21.202607291",
+  "version": "0.21.202608031",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-07-29T05:39:04.942Z",
+  "updatedAt": "2026-08-03T14:03:09.771Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",