@cloud-copilot/iam-data 0.21.202609121 → 0.21.202609161

package/data/actions/directconnect.json

@@ -146,6 +146,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "associateconnectionstoresiliencygroup": {
+    "name": "AssociateConnectionsToResiliencyGroup",
+    "description": "Grants permission to associate one or more connections with a resiliency group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dx-resiliency-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dxcon",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "associatehostedconnection": {
     "name": "AssociateHostedConnection",
     "description": "Grants permission to associate a hosted connection and its virtual interfaces with a link aggregation group (LAG) or interconnect",
@@ -447,6 +468,17 @@
     ],
     "dependentActions": []
   },
+  "createresiliencygroup": {
+    "name": "CreateResiliencyGroup",
+    "description": "Grants permission to create a resiliency group",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createtransitvirtualinterface": {
     "name": "CreateTransitVirtualInterface",
     "description": "Grants permission to create a new transit virtual interface",
@@ -569,6 +601,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteresiliencygroup": {
+    "name": "DeleteResiliencyGroup",
+    "description": "Grants permission to delete a resiliency group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dx-resiliency-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletevirtualinterface": {
     "name": "DeleteVirtualInterface",
     "description": "Grants permission to delete a virtual interface",
@@ -818,6 +865,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "dx-resiliency-group",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "dxcon",
         "required": false,
@@ -896,6 +949,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disassociateconnectionsfromresiliencygroup": {
+    "name": "DisassociateConnectionsFromResiliencyGroup",
+    "description": "Grants permission to disassociate one or more connections from a resiliency group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dx-resiliency-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dxcon",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disassociatemacseckey": {
     "name": "DisassociateMacSecKey",
     "description": "Grants permission to remove the association between a MAC Security (MACsec) security key and an AWS Direct Connect dedicated connection",
@@ -917,6 +991,44 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getresiliencygroup": {
+    "name": "GetResiliencyGroup",
+    "description": "Grants permission to describe a resiliency group",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "dx-resiliency-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listresiliencygroupassociations": {
+    "name": "ListResiliencyGroupAssociations",
+    "description": "Grants permission to list the connection associations of a resiliency group",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "dx-resiliency-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listresiliencygroups": {
+    "name": "ListResiliencyGroups",
+    "description": "Grants permission to list all resiliency groups owned by the AWS account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listvirtualinterfaceroutes": {
     "name": "ListVirtualInterfaceRoutes",
     "description": "Grants permission to list the routes accepted and advertised over a virtual interface",
@@ -988,6 +1100,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "dx-resiliency-group",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "dxcon",
         "required": false,
@@ -1024,6 +1142,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "dx-resiliency-group",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "dxcon",
         "required": false,
@@ -1063,6 +1187,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateconnectionsbillingmode": {
+    "name": "UpdateConnectionsBillingMode",
+    "description": "Grants permission to update the billing mode for up to 200 AWS Direct Connect connections in a single request",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dxcon",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatedirectconnectgateway": {
     "name": "UpdateDirectConnectGateway",
     "description": "Grants permission to update the name of a Direct Connect gateway",
@@ -1101,6 +1240,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateresiliencygroup": {
+    "name": "UpdateResiliencyGroup",
+    "description": "Grants permission to update the attributes of a resiliency group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dx-resiliency-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatevirtualinterfaceattributes": {
     "name": "UpdateVirtualInterfaceAttributes",
     "description": "Grants permission to update the specified attributes of the specified virtual private interface",

package/data/actions/identitystore.json

@@ -3,7 +3,14 @@
     "name": "AddRegion",
     "description": "Grants permission to add a region to an IdentityStore",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "Identitystore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -144,7 +151,14 @@
     "name": "DeleteIdentityStore",
     "description": "Grants permission to delete an IdentityStore",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "Identitystore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -235,7 +249,14 @@
     "name": "DescribeRegion",
     "description": "Grants permission to retrieve configuration details for a specific IdentityStore region",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "Identitystore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "identitystore:PrimaryRegion"
     ],
@@ -243,7 +264,7 @@
   },
   "describeuser": {
     "name": "DescribeUser",
-    "description": "Grants permission to retrieve information about user in the specified IdentityStore",
+    "description": "Grants permission to retrieve information about a user in the specified IdentityStore",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -267,7 +288,7 @@
   },
   "getgroupid": {
     "name": "GetGroupId",
-    "description": "Grants permission to retrieve ID information about group in the specified IdentityStore",
+    "description": "Grants permission to retrieve ID information about a group in the specified IdentityStore",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -325,7 +346,7 @@
   },
   "getuserid": {
     "name": "GetUserId",
-    "description": "Grants permission to retrieves ID information about user in the specified IdentityStore",
+    "description": "Grants permission to retrieve ID information about a user in the specified IdentityStore",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -441,7 +462,7 @@
   },
   "listgroups": {
     "name": "ListGroups",
-    "description": "Grants permission to search for groups within the specified IdentityStore",
+    "description": "Grants permission to retrieve information about all groups in the specified IdentityStore",
     "accessLevel": "List",
     "resourceTypes": [
       {
@@ -467,7 +488,14 @@
     "name": "ListRegions",
     "description": "Grants permission to list all regions configured for an IdentityStore",
     "accessLevel": "List",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "Identitystore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "identitystore:PrimaryRegion"
     ],
@@ -475,7 +503,7 @@
   },
   "listusers": {
     "name": "ListUsers",
-    "description": "Grants permission to search for users in the specified IdentityStore",
+    "description": "Grants permission to retrieve information about all users in the specified IdentityStore",
     "accessLevel": "List",
     "resourceTypes": [
       {
@@ -501,7 +529,14 @@
     "name": "RemoveRegion",
     "description": "Grants permission to remove a region from an IdentityStore",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "Identitystore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -550,7 +585,14 @@
     "name": "UpdateIdentityStore",
     "description": "Grants permission to update the configuration of an IdentityStore",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "Identitystore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },

package/data/actions/resiliencehub.json

@@ -1472,6 +1472,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listtestrundependencies": {
+    "name": "ListTestRunDependencies",
+    "description": "Grants permission to list snapshotted dependencies for a test run",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtestrunevents": {
     "name": "ListTestRunEvents",
     "description": "Grants permission to list events for a test run",
@@ -1489,6 +1506,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listtestrunsourceevents": {
+    "name": "ListTestRunSourceEvents",
+    "description": "Grants permission to list source events for a test run",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtestrunsources": {
     "name": "ListTestRunSources",
     "description": "Grants permission to list test run source snapshots",

package/data/actions/ses.json

@@ -2512,6 +2512,17 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "applytrackingconfigurationoverrides": {
+    "name": "ApplyTrackingConfigurationOverrides",
+    "description": "Grants permission to apply tracking configuration overrides when sending email",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ses:ClickTrackingEnabled",
+      "ses:OpenTrackingEnabled"
+    ],
+    "dependentActions": []
+  },
   "replicateemailidentitydkimsigningkey": {
     "name": "ReplicateEmailIdentityDkimSigningKey",
     "description": "Grants permission to replicate email identity DKIM signing key",
@@ -2529,6 +2540,25 @@
     ],
     "dependentActions": []
   },
+  "associateemailidentitycertificate": {
+    "name": "AssociateEmailIdentityCertificate",
+    "description": "Grants permission to associate a certificate with an email identity",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "identity",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ses:ApiVersion",
+      "ses:FromAddress"
+    ],
+    "dependentActions": []
+  },
   "batchgetmetricdata": {
     "name": "BatchGetMetricData",
     "description": "Grants permission to get metric data on your activity",
@@ -2896,6 +2926,25 @@
     ],
     "dependentActions": []
   },
+  "disassociateemailidentitycertificate": {
+    "name": "DisassociateEmailIdentityCertificate",
+    "description": "Grants permission to disassociate a certificate from an email identity",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "identity",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ses:ApiVersion",
+      "ses:FromAddress"
+    ],
+    "dependentActions": []
+  },
   "getcontact": {
     "name": "GetContact",
     "description": "Grants permission to return a contact from a contact list",
@@ -3139,6 +3188,24 @@
     ],
     "dependentActions": []
   },
+  "listemailidentitycertificates": {
+    "name": "ListEmailIdentityCertificates",
+    "description": "Grants permission to list the certificates associated with an email identity",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "identity",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ses:ApiVersion"
+    ],
+    "dependentActions": []
+  },
   "listemailtemplates": {
     "name": "ListEmailTemplates",
     "description": "Grants permission to list all of the email templates for your account",
@@ -3536,6 +3603,25 @@
     ],
     "dependentActions": []
   },
+  "updateconfigurationset": {
+    "name": "UpdateConfigurationSet",
+    "description": "Grants permission to update a configuration set",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "configuration-set",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ses:ApiVersion",
+      "ses:ConfigurationSetOptions"
+    ],
+    "dependentActions": []
+  },
   "updatecontact": {
     "name": "UpdateContact",
     "description": "Grants permission to update a contact's preferences for a list",

package/data/conditionKeys/ses.json

@@ -59,6 +59,16 @@
     "description": "Filters access by SES Mail Manager traffic policy ARN",
     "type": "ARN"
   },
+  "ses:clicktrackingenabled": {
+    "key": "ses:ClickTrackingEnabled",
+    "description": "Filters access by the click tracking override value specified in configuration overrides",
+    "type": "String"
+  },
+  "ses:configurationsetoptions": {
+    "key": "ses:ConfigurationSetOptions",
+    "description": "Filters access by the configuration set options included in the request",
+    "type": "ArrayOfString"
+  },
   "ses:exportsourcetype": {
     "key": "ses:ExportSourceType",
     "description": "Filters access by the export source type",
@@ -69,6 +79,11 @@
     "description": "Filters access by the multi-region endpoint ID that is used to send email",
     "type": "String"
   },
+  "ses:opentrackingenabled": {
+    "key": "ses:OpenTrackingEnabled",
+    "description": "Filters access by the open tracking override value specified in configuration overrides",
+    "type": "String"
+  },
   "ses:replicaregion": {
     "key": "ses:ReplicaRegion",
     "description": "Filters access by the replica regions for Replicating domain DKIM signing key",

package/data/rcpSupportedServices.json

@@ -3,9 +3,13 @@
   "appconfig",
   "appstream",
   "autoscaling",
+  "autoscaling-plans",
+  "budgets",
   "clouddirectory",
   "cloudfront",
   "cloudsearch",
+  "cloudtrail-data",
+  "codeartifact",
   "codebuild",
   "codecommit",
   "codepipeline",
@@ -13,13 +17,18 @@
   "cognito-idp",
   "comprehend",
   "comprehendmedical",
+  "compute-optimizer",
   "cost-optimization-hub",
   "dax",
+  "dsql",
   "dynamodb",
   "ecr",
+  "ecr-public",
   "events",
   "firehose",
   "fis",
+  "fms",
+  "gamelift",
   "health",
   "inspector-scan",
   "kendra",
@@ -28,20 +37,28 @@
   "logs",
   "memorydb",
   "networkmonitor",
+  "notifications",
   "opensearch",
   "pca-connector-ad",
+  "personalize",
   "polly",
   "pricing",
+  "resource-groups",
+  "rolesanywhere",
   "s3",
   "secretsmanager",
+  "servicediscovery",
   "signin",
   "sqs",
   "sts",
   "support",
+  "swf",
   "textract",
   "timestream-influxdb",
   "transcribe",
   "transfer",
   "translate",
-  "wafv2"
+  "wafv2",
+  "workspaces",
+  "xray"
 ]

package/data/resourceTypes/directconnect.json

@@ -6,6 +6,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "dx-resiliency-group": {
+    "key": "dx-resiliency-group",
+    "arn": "arn:${Partition}:directconnect::${Account}:dx-resiliency-group/${ResiliencyGroupId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "dxcon": {
     "key": "dxcon",
     "arn": "arn:${Partition}:directconnect:${Region}:${Account}:dxcon/${ConnectionId}",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.21.202609121",
+  "version": "0.21.202609161",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/act-security-labs/iam-data.git"
   },
-  "updatedAt": "2026-09-12T04:44:56.691Z",
+  "updatedAt": "2026-09-16T04:47:06.792Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",