@cloud-copilot/iam-data 0.21.202609041 → 0.21.202609091

package/data/actions/payment-cryptography.json

@@ -66,6 +66,7 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
+      "payment-cryptography:DeriveKeyUsage",
       "payment-cryptography:KeyAlgorithm",
       "payment-cryptography:KeyClass",
       "payment-cryptography:KeyUsage"
@@ -213,7 +214,11 @@
     ],
     "conditionKeys": [
       "payment-cryptography:CertificateAuthorityPublicKeyIdentifier",
+      "payment-cryptography:ExportDukptInitialKey",
+      "payment-cryptography:ExportKeyMaterial",
+      "payment-cryptography:PrivateKeyIdentifier",
       "payment-cryptography:RequestAlias",
+      "payment-cryptography:SigningKeyIdentifier",
       "payment-cryptography:WrappingKeyIdentifier"
     ],
     "dependentActions": []
@@ -241,6 +246,29 @@
     ],
     "dependentActions": []
   },
+  "generateauthrequestcryptogram": {
+    "name": "GenerateAuthRequestCryptogram",
+    "description": "Grants permission to generate an Authorization Request Cryptogram (ARQC) for an EMV chip payment card authorization",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "alias",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "key",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "payment-cryptography:RequestAlias"
+    ],
+    "dependentActions": []
+  },
   "generatecardvalidationdata": {
     "name": "GenerateCardValidationData",
     "description": "Grants permission to generate card-related data using algorithms such as Card Verification Values (CVV/CVV2), Dynamic Card Verification Values (dCVV/dCVV2) or Card Security Codes (CSC) that check the validity of a magnetic stripe card",
@@ -478,6 +506,7 @@
       "aws:TagKeys",
       "payment-cryptography:CertificateAuthorityPublicKeyIdentifier",
       "payment-cryptography:ImportKeyMaterial",
+      "payment-cryptography:PrivateKeyIdentifier",
       "payment-cryptography:WrappingKeyIdentifier"
     ],
     "dependentActions": []

package/data/actions/s3.json

@@ -3672,6 +3672,8 @@
       "s3:authType",
       "s3:if-match",
       "s3:if-none-match",
+      "s3:object-lock-event-hold",
+      "s3:object-lock-event-hold-duration-days",
       "s3:object-lock-legal-hold",
       "s3:object-lock-mode",
       "s3:object-lock-remaining-retention-days",
@@ -3814,6 +3816,8 @@
       "s3:ResourceAccount",
       "s3:TlsVersion",
       "s3:authType",
+      "s3:object-lock-event-hold",
+      "s3:object-lock-event-hold-duration-days",
       "s3:object-lock-mode",
       "s3:object-lock-remaining-retention-days",
       "s3:object-lock-retain-until-date",
@@ -4057,6 +4061,8 @@
       "s3:ResourceAccount",
       "s3:TlsVersion",
       "s3:authType",
+      "s3:object-lock-event-hold",
+      "s3:object-lock-event-hold-duration-days",
       "s3:signatureAge",
       "s3:signatureversion",
       "s3:x-amz-content-sha256",

package/data/conditionKeys/payment-cryptography.json

@@ -19,6 +19,21 @@
     "description": "Filters access by the CertificateAuthorityPublicKeyIdentifier specified in the request or the ImportKey, and ExportKey operations",
     "type": "String"
   },
+  "payment-cryptography:derivekeyusage": {
+    "key": "payment-cryptography:DeriveKeyUsage",
+    "description": "Filters access by the DeriveKeyUsage specified in the request for the CreateKey operation",
+    "type": "String"
+  },
+  "payment-cryptography:exportdukptinitialkey": {
+    "key": "payment-cryptography:ExportDukptInitialKey",
+    "description": "Filters access by whether the request is to export a DUKPT initial key for the ExportKey operation",
+    "type": "Bool"
+  },
+  "payment-cryptography:exportkeymaterial": {
+    "key": "payment-cryptography:ExportKeyMaterial",
+    "description": "Filters access by the type of key material being exported [Tr34KeyBlock, Tr31KeyBlock, DiffieHellmanTr31KeyBlock, As2805KeyCryptogram, KeyCryptogram] for the ExportKey operation",
+    "type": "String"
+  },
   "payment-cryptography:importkeymaterial": {
     "key": "payment-cryptography:ImportKeyMaterial",
     "description": "Filters access by the type of key material being imported [RootCertificatePublicKey, TrustedCertificatePublicKey, Tr34KeyBlock, Tr31KeyBlock, DiffieHellmanTr31KeyBlock, As2805KeyCryptogram, KeyCryptogram] for the ImportKey operation",
@@ -36,7 +51,12 @@
   },
   "payment-cryptography:keyusage": {
     "key": "payment-cryptography:KeyUsage",
-    "description": "Filters access by KeyClass specified in the request or associated with a key for the CreateKey operation",
+    "description": "Filters access by KeyUsage specified in the request or associated with a key for the CreateKey operation",
+    "type": "String"
+  },
+  "payment-cryptography:privatekeyidentifier": {
+    "key": "payment-cryptography:PrivateKeyIdentifier",
+    "description": "Filters access by the PrivateKeyIdentifier specified in the request for the ImportKey and ExportKey operations",
     "type": "String"
   },
   "payment-cryptography:requestalias": {
@@ -49,6 +69,11 @@
     "description": "Filters access by aliases associated with a key for the specified operation",
     "type": "ArrayOfString"
   },
+  "payment-cryptography:signingkeyidentifier": {
+    "key": "payment-cryptography:SigningKeyIdentifier",
+    "description": "Filters access by the SigningKeyIdentifier specified in the request for the ExportKey operation",
+    "type": "String"
+  },
   "payment-cryptography:wrappingkeyidentifier": {
     "key": "payment-cryptography:WrappingKeyIdentifier",
     "description": "Filters access by the WrappingKeyIdentifier specified in the request for the ImportKey, and ExportKey operations",

package/data/conditionKeys/s3.json

@@ -174,6 +174,16 @@
     "description": "Filters access by maximum number of keys returned in a ListBucket request",
     "type": "Numeric"
   },
+  "s3:object-lock-event-hold": {
+    "key": "s3:object-lock-event-hold",
+    "description": "Filters access by object event hold status (ON or OFF)",
+    "type": "String"
+  },
+  "s3:object-lock-event-hold-duration-days": {
+    "key": "s3:object-lock-event-hold-duration-days",
+    "description": "Filters access by object event hold duration in days",
+    "type": "Numeric"
+  },
   "s3:object-lock-legal-hold": {
     "key": "s3:object-lock-legal-hold",
     "description": "Filters access by object legal hold status",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.21.202609041",
+  "version": "0.21.202609091",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/act-security-labs/iam-data.git"
   },
-  "updatedAt": "2026-09-04T04:46:59.043Z",
+  "updatedAt": "2026-09-09T04:46:03.115Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",