@cloud-copilot/iam-data 0.21.202609011 → 0.21.202609041

package/data/actions/evs.json

@@ -145,6 +145,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getaccountsettings": {
+    "name": "GetAccountSettings",
+    "description": "Grants permission to get EVS account settings",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdepoturl": {
     "name": "GetDepotUrl",
     "description": "Grants permission to get an Amazon EVS environment depot url",
@@ -266,6 +274,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putaccountsettings": {
+    "name": "PutAccountSettings",
+    "description": "Grants permission to get EVS account settings",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a specified resource ARN",

package/data/actions/guardduty.json

@@ -23,6 +23,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createcustomdetectionruleassociation": {
+    "name": "CreateCustomDetectionRuleAssociation",
+    "description": "Grants permission to create a GuardDuty custom detection rule association",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createcustomdetectionruleorgconfiguration": {
+    "name": "CreateCustomDetectionRuleOrgConfiguration",
+    "description": "Grants permission to create the organization configuration for a GuardDuty custom detection rule",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createdetector": {
     "name": "CreateDetector",
     "description": "Grants permission to create a detector",
@@ -155,6 +174,29 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletecustomdetectionruleassociation": {
+    "name": "DeleteCustomDetectionRuleAssociation",
+    "description": "Grants permission to delete a GuardDuty custom detection rule association",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "customdetectionruleassociation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletecustomdetectionruleorgconfiguration": {
+    "name": "DeleteCustomDetectionRuleOrgConfiguration",
+    "description": "Grants permission to delete the organization configuration for a GuardDuty custom detection rule",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletedetector": {
     "name": "DeleteDetector",
     "description": "Grants permission to delete GuardDuty detectors",
@@ -385,6 +427,44 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getcustomdetectionrule": {
+    "name": "GetCustomDetectionRule",
+    "description": "Grants permission to retrieve a GuardDuty custom detection rule",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "customdetectionrule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getcustomdetectionruleassociation": {
+    "name": "GetCustomDetectionRuleAssociation",
+    "description": "Grants permission to retrieve a GuardDuty custom detection rule association",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "customdetectionruleassociation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getcustomdetectionruleorgconfiguration": {
+    "name": "GetCustomDetectionRuleOrgConfiguration",
+    "description": "Grants permission to retrieve the organization configuration for a GuardDuty custom detection rule",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdetector": {
     "name": "GetDetector",
     "description": "Grants permission to retrieve GuardDuty detectors",
@@ -609,6 +689,30 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcustomdetectionruleassociations": {
+    "name": "ListCustomDetectionRuleAssociations",
+    "description": "Grants permission to retrieve a list of GuardDuty custom detection rule associations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcustomdetectionruleorgconfigurations": {
+    "name": "ListCustomDetectionRuleOrgConfigurations",
+    "description": "Grants permission to retrieve a list of organization configurations for GuardDuty custom detection rules",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcustomdetectionrules": {
+    "name": "ListCustomDetectionRules",
+    "description": "Grants permission to retrieve a list of GuardDuty custom detection rules",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdetectors": {
     "name": "ListDetectors",
     "description": "Grants permission to retrieve a list of GuardDuty detectors",
@@ -702,6 +806,12 @@
     "description": "Grants permission to retrieve a list of tags associated with a GuardDuty resource",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "customdetectionruleassociation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "detector",
         "required": false,
@@ -823,6 +933,12 @@
     "description": "Grants permission to add tags to a GuardDuty resource",
     "accessLevel": "Tagging, Write",
     "resourceTypes": [
+      {
+        "name": "customdetectionruleassociation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "detector",
         "required": false,
@@ -891,6 +1007,12 @@
     "description": "Grants permission to remove tags from a GuardDuty resource",
     "accessLevel": "Tagging, Write",
     "resourceTypes": [
+      {
+        "name": "customdetectionruleassociation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "detector",
         "required": false,
@@ -945,6 +1067,29 @@
     ],
     "dependentActions": []
   },
+  "updatecustomdetectionruleassociation": {
+    "name": "UpdateCustomDetectionRuleAssociation",
+    "description": "Grants permission to update a GuardDuty custom detection rule association",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "customdetectionruleassociation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatecustomdetectionruleorgconfiguration": {
+    "name": "UpdateCustomDetectionRuleOrgConfiguration",
+    "description": "Grants permission to update the organization configuration for a GuardDuty custom detection rule",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatedetector": {
     "name": "UpdateDetector",
     "description": "Grants permission to update GuardDuty detectors",

package/data/actions/kinesis.json

@@ -30,6 +30,50 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "associatestreamswithchannel": {
+    "name": "AssociateStreamsWithChannel",
+    "description": "Grants permission to associate a stream with a channel",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channel",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createchannel": {
+    "name": "CreateChannel",
+    "description": "Grants permission to create a channel that delivers data from a selected single stream to a destination",
+    "accessLevel": "Tagging, Write",
+    "resourceTypes": [
+      {
+        "name": "channel",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createstream": {
     "name": "CreateStream",
     "description": "Grants permission to create a Amazon Kinesis stream",
@@ -66,6 +110,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletechannel": {
+    "name": "DeleteChannel",
+    "description": "Grants permission to delete the specified channel",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channel",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteresourcepolicy": {
     "name": "DeleteResourcePolicy",
     "description": "Grants permission to delete a resource policy associated with a specified stream or consumer",
@@ -133,6 +194,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describechannel": {
+    "name": "DescribeChannel",
+    "description": "Grants permission to describe the specified channel",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "channel",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describelimits": {
     "name": "DescribeLimits",
     "description": "Grants permission to describe the shard limits and usage for the account",
@@ -284,6 +362,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listchannels": {
+    "name": "ListChannels",
+    "description": "Grants permission to list the channels in the account, optionally filtered by stream",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listshards": {
     "name": "ListShards",
     "description": "Grants permission to list the shards in a stream and provides information about each shard",
@@ -331,6 +417,14 @@
     "description": "Grants permission to list the tags for the specified Amazon Kinesis resource",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "channel",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "consumer",
         "required": true,
@@ -566,6 +660,16 @@
     "description": "Grants permission to add or update tags for the specified Amazon Kinesis resource. Each resource can have up to 50 tags",
     "accessLevel": "Tagging, Write",
     "resourceTypes": [
+      {
+        "name": "channel",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "consumer",
         "required": true,
@@ -595,6 +699,15 @@
     "description": "Grants permission to remove tags from the specified Kinesis data resource. Removed tags are deleted and cannot be recovered after this operation successfully completes",
     "accessLevel": "Tagging, Write",
     "resourceTypes": [
+      {
+        "name": "channel",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "consumer",
         "required": true,
@@ -625,6 +738,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatechannel": {
+    "name": "UpdateChannel",
+    "description": "Grants permission to update the logging configuration and destination data freshness for the specified channel",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channel",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatemaxrecordsize": {
     "name": "UpdateMaxRecordSize",
     "description": "Grants permission to update the maximum record size for a Kinesis data stream",

package/data/actions/quicksight.json

@@ -64,6 +64,21 @@
     ],
     "dependentActions": []
   },
+  "createextension": {
+    "name": "CreateExtension",
+    "description": "Grants permission to create an extension",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "extension",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createextensionaccess": {
     "name": "CreateExtensionAccess",
     "description": "Grants permission to create an extension access",
@@ -124,6 +139,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteextension": {
+    "name": "DeleteExtension",
+    "description": "Grants permission to delete an extension",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "extension",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteextensionaccess": {
     "name": "DeleteExtensionAccess",
     "description": "Grants permission to delete an extension access",
@@ -177,6 +207,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeextension": {
+    "name": "DescribeExtension",
+    "description": "Grants permission to describe an extension",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "extension",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeextensionaccess": {
     "name": "DescribeExtensionAccess",
     "description": "Grants permission to describe an extension access",
@@ -192,6 +237,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeextensionpermissions": {
+    "name": "DescribeExtensionPermissions",
+    "description": "Grants permission to describe the permissions of an extension",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "extension",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describequickindexcapacity": {
     "name": "DescribeQuickIndexCapacity",
     "description": "Grants permission to describe index capacity",
@@ -271,6 +331,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listextensions": {
+    "name": "ListExtensions",
+    "description": "Grants permission to list extensions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listkmskeysforuser": {
     "name": "ListKMSKeysForUser",
     "description": "Grants permission to list a user's KMS keys",
@@ -419,6 +487,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startextensioninstallation": {
+    "name": "StartExtensionInstallation",
+    "description": "Grants permission to start installation of an extension",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "extension",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "subscribe": {
     "name": "Subscribe",
     "description": "Grants permission to subscribe to Amazon QuickSight, and also to allow the user to upgrade the subscription to Enterprise edition",
@@ -476,6 +559,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateextension": {
+    "name": "UpdateExtension",
+    "description": "Grants permission to update an extension",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "extension",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateextensionaccess": {
     "name": "UpdateExtensionAccess",
     "description": "Grants permission to update an extension access",
@@ -491,6 +589,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateextensionpermissions": {
+    "name": "UpdateExtensionPermissions",
+    "description": "Grants permission to update the permissions of an extension",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [
+      {
+        "name": "extension",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatequickindexcapacity": {
     "name": "UpdateQuickIndexCapacity",
     "description": "Grants permission to update index capacity",

package/data/resourceTypes/connect.json

@@ -94,6 +94,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "extraction-definition": {
+    "key": "extraction-definition",
+    "arn": "arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/extraction-definition/${ExtractionDefinitionId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "hierarchy-group": {
     "key": "hierarchy-group",
     "arn": "arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/agent-group/${HierarchyGroupId}",

package/data/resourceTypes/ec2.json

@@ -465,6 +465,19 @@
       "ec2:ResourceTag/${TagKey}"
     ]
   },
+  "ipam-internet-registry-association": {
+    "key": "ipam-internet-registry-association",
+    "arn": "arn:${Partition}:ec2::${Account}:ipam-internet-registry-association/${IpamInternetRegistryAssociationId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
   "ipam-policy": {
     "key": "ipam-policy",
     "arn": "arn:${Partition}:ec2::${Account}:ipam-policy/${IpamPolicyId}",

package/data/resourceTypes/guardduty.json

@@ -1,4 +1,15 @@
 {
+  "customdetectionrule": {
+    "key": "customdetectionrule",
+    "arn": "arn:${Partition}:guardduty::aws:detection-rule/custom/${RuleId}"
+  },
+  "customdetectionruleassociation": {
+    "key": "customdetectionruleassociation",
+    "arn": "arn:${Partition}:guardduty:${Region}:${Account}:detection-rule/custom/${RuleId}/association/${AssociationId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "detector": {
     "key": "detector",
     "arn": "arn:${Partition}:guardduty:${Region}:${Account}:detector/${DetectorId}",

package/data/resourceTypes/kinesis.json

@@ -1,4 +1,11 @@
 {
+  "channel": {
+    "key": "channel",
+    "arn": "arn:${Partition}:kinesis:${Region}:${Account}:channel/${ChannelId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "consumer": {
     "key": "consumer",
     "arn": "arn:${Partition}:kinesis:${Region}:${Account}:${StreamType}/${StreamName}/consumer/${ConsumerName}:${ConsumerCreationTimpstamp}",

package/data/resourceTypes/quicksight.json

@@ -119,6 +119,10 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "extension": {
+    "key": "extension",
+    "arn": "arn:${Partition}:quicksight:${Region}:${Account}:extension/${ResourceId}"
+  },
   "extensionaccess": {
     "key": "extensionaccess",
     "arn": "arn:${Partition}:quicksight:${Region}:${Account}:extension-access/${ResourceId}"

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.21.202609011",
+  "version": "0.21.202609041",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/act-security-labs/iam-data.git"
   },
-  "updatedAt": "2026-09-01T04:45:31.514Z",
+  "updatedAt": "2026-09-04T04:46:59.043Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",
@@ -34,11 +34,11 @@
   "author": "David Kerber <dave@cloudcopilot.io>",
   "license": "MIT",
   "devDependencies": {
-    "@cloud-copilot/prettier-config": "^0.1.1",
+    "@actsecurity/prettier-config": "^0.1.1",
     "@types/node": "^22.5.0",
     "@vitest/coverage-v8": "^4.0.18",
     "typescript": "^5.5.4",
     "vitest": "^4.0.18"
   },
-  "prettier": "@cloud-copilot/prettier-config"
+  "prettier": "@actsecurity/prettier-config"
 }