@cloud-copilot/iam-data 0.21.202609051 → 0.21.202609111

package/data/actions/bedrock-agentcore.json

@@ -471,6 +471,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createconsentportal": {
+    "name": "CreateConsentPortal",
+    "description": "Grants permission to create a new consent portal",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "consent-portal",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createdataset": {
     "name": "CreateDataset",
     "description": "Grants permission to create a new dataset",
@@ -992,6 +1010,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteconsentportal": {
+    "name": "DeleteConsentPortal",
+    "description": "Grants permission to delete a consent portal",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "consent-portal",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletedataset": {
     "name": "DeleteDataset",
     "description": "Grants permission to delete a dataset",
@@ -1682,6 +1715,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getconsentportal": {
+    "name": "GetConsentPortal",
+    "description": "Grants permission to retrieve information about a consent portal",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "consent-portal",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdataset": {
     "name": "GetDataset",
     "description": "Grants permission to get details of a dataset",
@@ -2731,6 +2779,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listconsentportals": {
+    "name": "ListConsentPortals",
+    "description": "Grants permission to list all of the consent portals in your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdatasetexamples": {
     "name": "ListDatasetExamples",
     "description": "Grants permission to list examples in a dataset",
@@ -3991,6 +4047,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateconsentportal": {
+    "name": "UpdateConsentPortal",
+    "description": "Grants permission to update an existing consent portal",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "consent-portal",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatedataset": {
     "name": "UpdateDataset",
     "description": "Grants permission to update a dataset",

package/data/actions/connect.json

@@ -4134,6 +4134,23 @@
     ],
     "dependentActions": []
   },
+  "listevaluationformaiversions": {
+    "name": "ListEvaluationFormAIVersions",
+    "description": "Grants permission to list the AI versions for evaluation forms in the specified Amazon Connect instance",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "instance",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "connect:InstanceId"
+    ],
+    "dependentActions": []
+  },
   "listevaluationformversions": {
     "name": "ListEvaluationFormVersions",
     "description": "Grants permission to list versions of an evaluation form in the specified Amazon Connect instance",

package/data/actions/ecs.json

@@ -1138,7 +1138,9 @@
       "ecs:capacity-provider",
       "ecs:cluster",
       "ecs:enable-ebs-volumes",
-      "ecs:enable-execute-command"
+      "ecs:enable-execute-command",
+      "ecs:task-cpu",
+      "ecs:task-memory"
     ],
     "dependentActions": []
   },

package/data/actions/s3.json

@@ -3672,6 +3672,8 @@
       "s3:authType",
       "s3:if-match",
       "s3:if-none-match",
+      "s3:object-lock-event-hold",
+      "s3:object-lock-event-hold-duration-days",
       "s3:object-lock-legal-hold",
       "s3:object-lock-mode",
       "s3:object-lock-remaining-retention-days",
@@ -3814,6 +3816,8 @@
       "s3:ResourceAccount",
       "s3:TlsVersion",
       "s3:authType",
+      "s3:object-lock-event-hold",
+      "s3:object-lock-event-hold-duration-days",
       "s3:object-lock-mode",
       "s3:object-lock-remaining-retention-days",
       "s3:object-lock-retain-until-date",
@@ -4057,6 +4061,8 @@
       "s3:ResourceAccount",
       "s3:TlsVersion",
       "s3:authType",
+      "s3:object-lock-event-hold",
+      "s3:object-lock-event-hold-duration-days",
       "s3:signatureAge",
       "s3:signatureversion",
       "s3:x-amz-content-sha256",

package/data/actions/vpc-lattice-svcs.json

@@ -7,7 +7,9 @@
       {
         "name": "TCP Service",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -28,7 +30,9 @@
       {
         "name": "Service",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],

package/data/conditionKeys/s3.json

@@ -174,6 +174,16 @@
     "description": "Filters access by maximum number of keys returned in a ListBucket request",
     "type": "Numeric"
   },
+  "s3:object-lock-event-hold": {
+    "key": "s3:object-lock-event-hold",
+    "description": "Filters access by object event hold status (ON or OFF)",
+    "type": "String"
+  },
+  "s3:object-lock-event-hold-duration-days": {
+    "key": "s3:object-lock-event-hold-duration-days",
+    "description": "Filters access by object event hold duration in days",
+    "type": "Numeric"
+  },
   "s3:object-lock-legal-hold": {
     "key": "s3:object-lock-legal-hold",
     "description": "Filters access by object legal hold status",

package/data/conditionKeys/vpc-lattice-svcs.json

@@ -1,4 +1,9 @@
 {
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by tag key-value pairs attached to the resource",
+    "type": "String"
+  },
   "vpc-lattice-svcs:port": {
     "key": "vpc-lattice-svcs:Port",
     "description": "Filters access by the destination port the request is made to",

package/data/resourceTypes/bedrock-agentcore.json

@@ -63,6 +63,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "consent-portal": {
+    "key": "consent-portal",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:consent-portal/${ConsentPortalId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "dataset": {
     "key": "dataset",
     "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:dataset/${DatasetId}",

package/data/resourceTypes/vpc-lattice-svcs.json

@@ -1,10 +1,16 @@
 {
   "service": {
     "key": "Service",
-    "arn": "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/${ServiceId}/${RequestPath}"
+    "arn": "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/${ServiceId}/${RequestPath}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "tcp service": {
     "key": "TCP Service",
-    "arn": "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/${ServiceId}"
+    "arn": "arn:${Partition}:vpc-lattice:${Region}:${Account}:service/${ServiceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.21.202609051",
+  "version": "0.21.202609111",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/act-security-labs/iam-data.git"
   },
-  "updatedAt": "2026-09-05T04:43:28.720Z",
+  "updatedAt": "2026-09-11T04:45:45.798Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",