@cloud-copilot/iam-data 0.21.202608271 → 0.21.202608291

package/data/actions/bedrock-mantle.json

@@ -90,6 +90,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "counttokens": {
+    "name": "CountTokens",
+    "description": "Grants permission to count the tokens in an inference request",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "project",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "bedrock-mantle:Model"
+    ],
+    "dependentActions": []
+  },
   "createcustomizedmodel": {
     "name": "CreateCustomizedModel",
     "description": "Grants permission to import a customized model with custom weights",
@@ -148,7 +167,7 @@
   },
   "createinference": {
     "name": "CreateInference",
-    "description": "Grants permission to create a chat completion inference request",
+    "description": "Grants permission to create an inference request",
     "accessLevel": "Write",
     "resourceTypes": [
       {

package/data/actions/codecommit.json

@@ -29,6 +29,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getblobdifferences": {
+    "name": "GetBlobDifferences",
+    "description": "Grants permission to compute a structured, line-level diff between two blob versions in an AWS CodeCommit repository",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getcommithistory": {
     "name": "GetCommitHistory",
     "description": "Grants permission to get information about the history of commits in a repository",

package/data/actions/healthlake.json

@@ -586,6 +586,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "restorefhirdatastore": {
+    "name": "RestoreFHIRDatastore",
+    "description": "Grants permission to restore a backup-enabled datastore to a point in time, creating a new datastore from the backup",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "datastore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "retrieveattributionstatus": {
     "name": "RetrieveAttributionStatus",
     "description": "Grants permission to retrieve member attribution status",

package/data/actions/sagemaker.json

@@ -757,6 +757,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "batchrebootclusternodes": {
+    "name": "BatchRebootClusterNodes",
+    "description": "Grants permission to reboot nodes in a SageMaker HyperPod cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchreplaceclusternodes": {
+    "name": "BatchReplaceClusterNodes",
+    "description": "Grants permission to replace nodes in a SageMaker HyperPod cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchwriterecord": {
     "name": "BatchWriteRecord",
     "description": "Grants permission to put a batch of records to one or more feature groups",
@@ -1208,6 +1238,7 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
       "sagemaker:AppNetworkAccessType",
+      "sagemaker:AuthMode",
       "sagemaker:DomainSharingOutputKmsKeyArn",
       "sagemaker:ImageArns",
       "sagemaker:ImageVersionArns",
@@ -4813,6 +4844,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describetrainingplanextensionhistory": {
+    "name": "DescribeTrainingPlanExtensionHistory",
+    "description": "Grants permission to retrieve the extension history for a specified training plan",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "training-plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describetransformjob": {
     "name": "DescribeTransformJob",
     "description": "Grants permission to return information about a transform job",
@@ -4961,6 +5007,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "extendtrainingplan": {
+    "name": "ExtendTrainingPlan",
+    "description": "Grants permission to extend an existing training plan by purchasing an extension offering",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdeployments": {
     "name": "GetDeployments",
     "description": "Grants permission to get deployment plan for device",
@@ -6443,7 +6497,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:IsUpdateRecord",
+      "sagemaker:UpdatableFeatures"
+    ],
     "dependentActions": []
   },
   "querylineage": {

package/data/actions/support.json

@@ -15,6 +15,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "addrelateditemtocase": {
+    "name": "AddRelatedItemToCase",
+    "description": "Grants permission to add a related item to an AWS Support case. This is an internally managed function",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createcase": {
     "name": "CreateCase",
     "description": "Grants permission to creates a new AWS Support case",
@@ -87,6 +95,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describerelateditems": {
+    "name": "DescribeRelatedItems",
+    "description": "Grants permission to list the related items for an AWS Support case. This is an internally managed function",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeservices": {
     "name": "DescribeServices",
     "description": "Grants permission to list AWS services and categories that applies to each service",
@@ -151,6 +167,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disconnectlivecontactforcase": {
+    "name": "DisconnectLiveContactForCase",
+    "description": "Grants permission to disconnect a live contact on AWS Support Center. This is an internally managed function",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "downloadattachment": {
+    "name": "DownloadAttachment",
+    "description": "Grants permission to get a presigned URL to download an attachment from an AWS Support case",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getinteraction": {
     "name": "GetInteraction",
     "description": "Grants permission to retrieve personalized troubleshooting assistance for account and technical issues for a specific interaction",
@@ -270,5 +302,13 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "uploadattachment": {
+    "name": "UploadAttachment",
+    "description": "Grants permission to get a presigned URL to upload an attachment to an AWS Support case",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

package/data/conditionKeys/sagemaker.json

@@ -24,6 +24,11 @@
     "description": "Filters access by the app network access type associated with the resource in the request",
     "type": "String"
   },
+  "sagemaker:authmode": {
+    "key": "sagemaker:AuthMode",
+    "description": "Filters access by the authentication mode specified in the request",
+    "type": "String"
+  },
   "sagemaker:bearertokentype": {
     "key": "sagemaker:BearerTokenType",
     "description": "Filters access by the type of bearer token used in the request",
@@ -169,6 +174,11 @@
     "description": "Filters access by the inter container traffic encryption associated with the resource in the request",
     "type": "Bool"
   },
+  "sagemaker:isupdaterecord": {
+    "key": "sagemaker:IsUpdateRecord",
+    "description": "Filters access by whether the PutRecord authorization was triggered by an UpdateRecord API call. Set to true on UpdateRecord and false on direct PutRecord calls",
+    "type": "Bool"
+  },
   "sagemaker:keepaliveperiod": {
     "key": "sagemaker:KeepAlivePeriod",
     "description": "Filters access by the keep-alive period associated with the resource in the request",
@@ -289,6 +299,11 @@
     "description": "Filters access by the target model associated with the Multi-Model Endpoint in the request",
     "type": "String"
   },
+  "sagemaker:updatablefeatures": {
+    "key": "sagemaker:UpdatableFeatures",
+    "description": "Filters access by the list of feature names being updated by an UpdateRecord API call. Absent on direct PutRecord calls",
+    "type": "ArrayOfString"
+  },
   "sagemaker:userprofilename": {
     "key": "sagemaker:UserProfileName",
     "description": "You can use the UserProfileName as a policy variable to filter requests from specific user profiles within a SageMaker Domain. This context key is not applicable to user profiles within shared spaces",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.21.202608271",
+  "version": "0.21.202608291",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-08-27T07:00:44.525Z",
+  "updatedAt": "2026-08-29T04:43:23.319Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",