@cloud-copilot/iam-data 0.21.202608281 → 0.21.202608301

package/data/actions/healthlake.json

@@ -586,6 +586,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "restorefhirdatastore": {
+    "name": "RestoreFHIRDatastore",
+    "description": "Grants permission to restore a backup-enabled datastore to a point in time, creating a new datastore from the backup",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "datastore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "retrieveattributionstatus": {
     "name": "RetrieveAttributionStatus",
     "description": "Grants permission to retrieve member attribution status",

package/data/actions/profile.json

@@ -44,6 +44,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "associatestreamforsegments": {
+    "name": "AssociateStreamForSegments",
+    "description": "Grants permission to associate an Amazon Kinesis data stream to receive segment membership events for a domain",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchgetcalculatedattributeforprofile": {
     "name": "BatchGetCalculatedAttributeForProfile",
     "description": "Grants permission to retrieve a calculated attribute for the specific profiles in the domain",
@@ -677,6 +692,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletesegmentsubscription": {
+    "name": "DeleteSegmentSubscription",
+    "description": "Grants permission to delete a segment subscription for membership events",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "segment-definitions",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteworkflow": {
     "name": "DeleteWorkflow",
     "description": "Grants permission to delete a workflow in a domain",
@@ -707,6 +743,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disassociatestreamforsegments": {
+    "name": "DisassociateStreamForSegments",
+    "description": "Grants permission to disassociate the Amazon Kinesis data stream configured for segment membership events in a domain",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getautomergingpreview": {
     "name": "GetAutoMergingPreview",
     "description": "Grants permission to get a preview of auto merging in a domain",
@@ -1156,6 +1207,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getsegmentsubscription": {
+    "name": "GetSegmentSubscription",
+    "description": "Grants permission to get the configuration, schedule, and status of a segment subscription for membership events",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "segment-definitions",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getsimilarprofiles": {
     "name": "GetSimilarProfiles",
     "description": "Grants permission to get all the similar profiles in the domain",
@@ -1171,6 +1243,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getstreamforsegments": {
+    "name": "GetStreamForSegments",
+    "description": "Grants permission to get information about the segment membership event stream configured for a domain",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getuploadjob": {
     "name": "GetUploadJob",
     "description": "Grants permission to get details of an upload job in the domain",
@@ -1587,6 +1674,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listsegmentsubscriptionevents": {
+    "name": "ListSegmentSubscriptionEvents",
+    "description": "Grants permission to list the most recent segment membership events for a segment",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "segment-definitions",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list tags for a resource",
@@ -1806,6 +1914,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putsegmentsubscription": {
+    "name": "PutSegmentSubscription",
+    "description": "Grants permission to create or update a segment subscription for membership events",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "segment-definitions",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "searchprofiles": {
     "name": "SearchProfiles",
     "description": "Grants permission to search for profiles in a domain",

package/data/actions/sagemaker.json

@@ -757,6 +757,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "batchrebootclusternodes": {
+    "name": "BatchRebootClusterNodes",
+    "description": "Grants permission to reboot nodes in a SageMaker HyperPod cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchreplaceclusternodes": {
+    "name": "BatchReplaceClusterNodes",
+    "description": "Grants permission to replace nodes in a SageMaker HyperPod cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchwriterecord": {
     "name": "BatchWriteRecord",
     "description": "Grants permission to put a batch of records to one or more feature groups",
@@ -1208,6 +1238,7 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
       "sagemaker:AppNetworkAccessType",
+      "sagemaker:AuthMode",
       "sagemaker:DomainSharingOutputKmsKeyArn",
       "sagemaker:ImageArns",
       "sagemaker:ImageVersionArns",
@@ -4813,6 +4844,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describetrainingplanextensionhistory": {
+    "name": "DescribeTrainingPlanExtensionHistory",
+    "description": "Grants permission to retrieve the extension history for a specified training plan",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "training-plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describetransformjob": {
     "name": "DescribeTransformJob",
     "description": "Grants permission to return information about a transform job",
@@ -4961,6 +5007,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "extendtrainingplan": {
+    "name": "ExtendTrainingPlan",
+    "description": "Grants permission to extend an existing training plan by purchasing an extension offering",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdeployments": {
     "name": "GetDeployments",
     "description": "Grants permission to get deployment plan for device",
@@ -6443,7 +6497,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "sagemaker:IsUpdateRecord",
+      "sagemaker:UpdatableFeatures"
+    ],
     "dependentActions": []
   },
   "querylineage": {

package/data/actions/support.json

@@ -15,6 +15,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "addrelateditemtocase": {
+    "name": "AddRelatedItemToCase",
+    "description": "Grants permission to add a related item to an AWS Support case. This is an internally managed function",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createcase": {
     "name": "CreateCase",
     "description": "Grants permission to creates a new AWS Support case",
@@ -87,6 +95,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describerelateditems": {
+    "name": "DescribeRelatedItems",
+    "description": "Grants permission to list the related items for an AWS Support case. This is an internally managed function",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeservices": {
     "name": "DescribeServices",
     "description": "Grants permission to list AWS services and categories that applies to each service",
@@ -151,6 +167,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disconnectlivecontactforcase": {
+    "name": "DisconnectLiveContactForCase",
+    "description": "Grants permission to disconnect a live contact on AWS Support Center. This is an internally managed function",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "downloadattachment": {
+    "name": "DownloadAttachment",
+    "description": "Grants permission to get a presigned URL to download an attachment from an AWS Support case",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getinteraction": {
     "name": "GetInteraction",
     "description": "Grants permission to retrieve personalized troubleshooting assistance for account and technical issues for a specific interaction",
@@ -270,5 +302,13 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "uploadattachment": {
+    "name": "UploadAttachment",
+    "description": "Grants permission to get a presigned URL to upload an attachment to an AWS Support case",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

package/data/conditionKeys/sagemaker.json

@@ -24,6 +24,11 @@
     "description": "Filters access by the app network access type associated with the resource in the request",
     "type": "String"
   },
+  "sagemaker:authmode": {
+    "key": "sagemaker:AuthMode",
+    "description": "Filters access by the authentication mode specified in the request",
+    "type": "String"
+  },
   "sagemaker:bearertokentype": {
     "key": "sagemaker:BearerTokenType",
     "description": "Filters access by the type of bearer token used in the request",
@@ -169,6 +174,11 @@
     "description": "Filters access by the inter container traffic encryption associated with the resource in the request",
     "type": "Bool"
   },
+  "sagemaker:isupdaterecord": {
+    "key": "sagemaker:IsUpdateRecord",
+    "description": "Filters access by whether the PutRecord authorization was triggered by an UpdateRecord API call. Set to true on UpdateRecord and false on direct PutRecord calls",
+    "type": "Bool"
+  },
   "sagemaker:keepaliveperiod": {
     "key": "sagemaker:KeepAlivePeriod",
     "description": "Filters access by the keep-alive period associated with the resource in the request",
@@ -289,6 +299,11 @@
     "description": "Filters access by the target model associated with the Multi-Model Endpoint in the request",
     "type": "String"
   },
+  "sagemaker:updatablefeatures": {
+    "key": "sagemaker:UpdatableFeatures",
+    "description": "Filters access by the list of feature names being updated by an UpdateRecord API call. Absent on direct PutRecord calls",
+    "type": "ArrayOfString"
+  },
   "sagemaker:userprofilename": {
     "key": "sagemaker:UserProfileName",
     "description": "You can use the UserProfileName as a policy variable to filter requests from specific user profiles within a SageMaker Domain. This context key is not applicable to user profiles within shared spaces",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.21.202608281",
+  "version": "0.21.202608301",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-08-28T07:06:27.422Z",
+  "updatedAt": "2026-08-30T04:45:34.657Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",