@cloud-copilot/iam-data 0.21.202608031 → 0.21.202608041

package/data/actions/bedrock-websearch.json

@@ -0,0 +1,40 @@
+{
+  "externalwebaccess": {
+    "name": "ExternalWebAccess",
+    "description": "Grants permission to retrieve content from external web sites outside the AWS boundary",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invokefetch": {
+    "name": "InvokeFetch",
+    "description": "Grants permission to invoke web fetch tools",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "tool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invokesearch": {
+    "name": "InvokeSearch",
+    "description": "Grants permission to invoke web search tools",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "tool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/bedrock.json

@@ -353,7 +353,26 @@
     "name": "CreateAdvancedPromptOptimizationJob",
     "description": "Grants permission to create an advanced prompt optimization job",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "application-inference-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "foundation-model",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "inference-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"

package/data/actions/ec2.json

@@ -4411,12 +4411,6 @@
     "description": "Grants permission to create a route in a VPC route table",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "instance",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "route-table",
         "required": true,
@@ -19373,12 +19367,6 @@
     "description": "Grants permission to replace a route within a route table in a VPC",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "instance",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "route-table",
         "required": true,

package/data/actions/es.json

@@ -1037,6 +1037,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getmigration": {
+    "name": "GetMigration",
+    "description": "Grants permission to get the status and progress of a migration job for an OpenSearch Application",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getpackageversionhistory": {
     "name": "GetPackageVersionHistory",
     "description": "Grants permission to fetch the version history for a package",
@@ -1228,6 +1243,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listmigrations": {
+    "name": "ListMigrations",
+    "description": "Grants permission to list migration jobs for an OpenSearch Application",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listpackagesfordomain": {
     "name": "ListPackagesForDomain",
     "description": "Grants permission to list all packages associated with the OpenSearch Service domain",
@@ -1476,6 +1506,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startmigration": {
+    "name": "StartMigration",
+    "description": "Grants permission to initiate a migration of saved objects to an OpenSearch Application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startservicesoftwareupdate": {
     "name": "StartServiceSoftwareUpdate",
     "description": "Grants permission to start a service software update of a domain",

package/data/actions/organizations.json

@@ -17,7 +17,7 @@
   "attachpolicy": {
     "name": "AttachPolicy",
     "description": "Grants permission to attach a policy to a root, an organizational unit, or an individual account",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "account",
@@ -139,7 +139,14 @@
     "name": "CreatePolicy",
     "description": "Grants permission to create a policy that you can attach to a root, an organizational unit (OU), or an individual AWS account",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "policy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:ResourceTag/${TagKey}",
@@ -206,7 +213,7 @@
   "deleteresourcepolicy": {
     "name": "DeleteResourcePolicy",
     "description": "Grants permission to delete a resource policy from your organization",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
@@ -352,7 +359,7 @@
   "detachpolicy": {
     "name": "DetachPolicy",
     "description": "Grants permission to detach a policy from a target root, organizational unit, or account",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "account",
@@ -832,7 +839,7 @@
   "putresourcepolicy": {
     "name": "PutResourcePolicy",
     "description": "Grants permission to create or update a resource policy",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "resourcepolicy",
@@ -1020,7 +1027,7 @@
   "updatepolicy": {
     "name": "UpdatePolicy",
     "description": "Grants permission to update an existing policy with a new name, description, or content",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "policy",

package/data/actions/quicksight.json

@@ -292,6 +292,24 @@
     ],
     "dependentActions": []
   },
+  "passtopic": {
+    "name": "PassTopic",
+    "description": "Grants permission to use a topic for a template",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "topic",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "quicksuiteusagemetrics": {
     "name": "QuickSuiteUsageMetrics",
     "description": "Grants permission to get QuickSuite usage metrics",

package/data/actions/timestream-influxdb.json

@@ -1,4 +1,22 @@
 {
+  "createdbbackup": {
+    "name": "CreateDbBackup",
+    "description": "Grants permission to create a Timestream InfluxDB Backup for a DbInstance or DbCluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db-backup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createdbcluster": {
     "name": "CreateDbCluster",
     "description": "Grants permission to create a new Timestream InfluxDB Cluster",
@@ -46,6 +64,21 @@
     ],
     "dependentActions": []
   },
+  "deletedbbackup": {
+    "name": "DeleteDbBackup",
+    "description": "Grants permission to delete a Timestream InfluxDB backup",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db-backup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletedbcluster": {
     "name": "DeleteDbCluster",
     "description": "Grants permission to delete a Timestream InfluxDB Cluster",
@@ -76,6 +109,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdbbackup": {
+    "name": "GetDbBackup",
+    "description": "Grants permission to get information about a Timestream InfluxDB Backup",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "db-backup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdbcluster": {
     "name": "GetDbCluster",
     "description": "Grants permission to get information about a Timestream InfluxDB Cluster",
@@ -121,6 +169,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdbbackups": {
+    "name": "ListDbBackups",
+    "description": "Grants permission to list information about all Timestream InfluxDB backups in the account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdbclusters": {
     "name": "ListDbClusters",
     "description": "Grants permission to list information about all Timestream InfluxDB clusters in the account",
@@ -165,6 +221,12 @@
     "description": "Grants permission to list tags for a Timestream InfluxDB resource",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "db-backup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "db-cluster",
         "required": false,
@@ -225,11 +287,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "restorefromdbbackup": {
+    "name": "RestoreFromDbBackup",
+    "description": "Grants permission to restore from a Timestream InfluxDB backup",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db-backup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "timestream-influxdb:RestoreMode"
+    ],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a Timestream InfluxDB resource",
     "accessLevel": "Tagging, Write",
     "resourceTypes": [
+      {
+        "name": "db-backup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "db-cluster",
         "required": false,
@@ -261,6 +348,12 @@
     "description": "Grants permission to untag a Timestream InfluxDB resource",
     "accessLevel": "Tagging, Write",
     "resourceTypes": [
+      {
+        "name": "db-backup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "db-cluster",
         "required": false,

package/data/categories/machine-learning-and-ai.json

@@ -8,6 +8,7 @@
     "bedrock",
     "bedrock-agentcore",
     "bedrock-mantle",
+    "bedrock-websearch",
     "cleanrooms-ml",
     "codeguru",
     "codewhisperer",

package/data/conditionKeys/bedrock-websearch.json

@@ -0,0 +1 @@
+{}

package/data/conditionKeys/timestream-influxdb.json

@@ -13,5 +13,10 @@
     "key": "aws:TagKeys",
     "description": "Filters access by a list of tag keys that are allowed in the request",
     "type": "ArrayOfString"
+  },
+  "timestream-influxdb:restoremode": {
+    "key": "timestream-influxdb:RestoreMode",
+    "description": "Filters access by the restore mode specified in the request",
+    "type": "String"
   }
 }

package/data/resourceTypes/bedrock-websearch.json

@@ -0,0 +1,6 @@
+{
+  "tool": {
+    "key": "tool",
+    "arn": "arn:${Partition}:bedrock-websearch:${Region}:aws:tool/${ToolName}"
+  }
+}

package/data/resourceTypes/timestream-influxdb.json

@@ -1,4 +1,11 @@
 {
+  "db-backup": {
+    "key": "db-backup",
+    "arn": "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-backup/${DbBackupId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "db-cluster": {
     "key": "db-cluster",
     "arn": "arn:${Partition}:timestream-influxdb:${Region}:${Account}:db-cluster/${DbClusterId}",

package/data/serviceCategories.json

@@ -61,6 +61,7 @@
   "bedrock": "machine-learning-and-ai",
   "bedrock-agentcore": "machine-learning-and-ai",
   "bedrock-mantle": "machine-learning-and-ai",
+  "bedrock-websearch": "machine-learning-and-ai",
   "billing": "cloud-financial-management",
   "billingconductor": "cloud-financial-management",
   "braket": "quantum-technologies",

package/data/serviceNames.json

@@ -61,6 +61,7 @@
   "bedrock": "Amazon Bedrock",
   "bedrock-agentcore": "Amazon Bedrock Agentcore",
   "bedrock-mantle": "Amazon Bedrock Powered by AWS Mantle",
+  "bedrock-websearch": "Amazon Bedrock Web Search",
   "billing": "AWS Billing",
   "billingconductor": "AWS Billing Conductor",
   "braket": "Amazon Braket",

package/data/services.json

@@ -61,6 +61,7 @@
   "bedrock",
   "bedrock-agentcore",
   "bedrock-mantle",
+  "bedrock-websearch",
   "billing",
   "billingconductor",
   "braket",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.21.202608031",
+  "version": "0.21.202608041",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-08-03T14:03:09.771Z",
+  "updatedAt": "2026-08-04T14:19:20.374Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",