@cloud-copilot/iam-data 0.21.202610011 → 0.21.202610091

package/data/actions/securityhub.json

@@ -414,6 +414,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "cancelexportjobv2": {
+    "name": "CancelExportJobV2",
+    "description": "Grants permission to cancel an export job",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "connectorregistrationsv2": {
     "name": "ConnectorRegistrationsV2",
     "description": "Grants permission to complete the OAuth 2.0 authorization code flow based on input parameters",
@@ -1146,6 +1154,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getexportjobv2": {
+    "name": "GetExportJobV2",
+    "description": "Grants permission to retrieve an export job",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getfindingaggregator": {
     "name": "GetFindingAggregator",
     "description": "Grants permission to retrieve details for a finding aggregator, which configures finding aggregation across Regions",
@@ -1456,6 +1472,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listexportjobsv2": {
+    "name": "ListExportJobsV2",
+    "description": "Grants permission to list export jobs",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listexposuresbyremediationv2": {
     "name": "ListExposuresByRemediationV2",
     "description": "Grants permission to retrieve a list of exposure findings associated with a remediation target",
@@ -1612,6 +1636,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startexportjobv2": {
+    "name": "StartExportJobV2",
+    "description": "Grants permission to start an export job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a Security Hub resource",

package/data/actions/vpc-lattice.json

@@ -528,9 +528,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "vpc-lattice:ServiceArn",
-      "vpc-lattice:ServiceNetworkArn"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -799,9 +797,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "vpc-lattice:ServiceArn",
-      "vpc-lattice:ServiceNetworkArn"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -925,8 +921,7 @@
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [
-      "vpc-lattice:ServiceNetworkArn",
-      "vpc-lattice:VpcId"
+      "vpc-lattice:ServiceNetworkArn"
     ],
     "dependentActions": []
   },

package/data/actions/wafv2.json

@@ -1,4 +1,12 @@
 {
+  "describetopcontributorsbyevent": {
+    "name": "DescribeTopContributorsByEvent",
+    "description": "Grants permission to retrieve the top contributors of an event detected by the AWS WAF anti-DDoS managed rule group, used by shield:DescribeAttack",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disassociatefirewallmanager": {
     "name": "DisassociateFirewallManager",
     "description": "Grants permission to disassociate Firewall Manager from a WebACL",

package/data/categories/business-applications.json

@@ -12,6 +12,7 @@
     "connect-campaigns",
     "customer-verification",
     "elemental-support-cases",
+    "end-user-messaging",
     "health-agent",
     "honeycode",
     "mechanicalturk",

package/data/conditionKeys/aidevops.json

@@ -2,12 +2,12 @@
   "aidevops:sourceagentspacearn": {
     "key": "aidevops:SourceAgentSpaceArn",
     "description": "Filters access by the source AgentSpace ARN on the request. Set by the service from the request context, not supplied by the caller",
-    "type": "String"
+    "type": "ARN"
   },
   "aidevops:targetagentspacearn": {
     "key": "aidevops:TargetAgentSpaceArn",
     "description": "Filters access by the target AgentSpace ARN on the request. Set by the service from the request context, not supplied by the caller",
-    "type": "String"
+    "type": "ARN"
   },
   "aws:requesttag/${tagkey}": {
     "key": "aws:RequestTag/${TagKey}",

package/data/conditionKeys/cloudwatch.json

@@ -24,6 +24,11 @@
     "description": "Filters access by the presence of access grants associated with the request",
     "type": "String"
   },
+  "cloudwatch:resourcearn": {
+    "key": "cloudwatch:ResourceArn",
+    "description": "Filters access by the ARN of the AWS resource that a resource metrics configuration request targets",
+    "type": "ARN"
+  },
   "cloudwatch:namespace": {
     "key": "cloudwatch:namespace",
     "description": "Filters access by the presence of optional namespace values",

package/data/conditionKeys/end-user-messaging.json

@@ -0,0 +1,17 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags attached to the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/lambda.json

@@ -49,6 +49,16 @@
     "description": "Filters access by restricting the AWS service or account that can invoke a function",
     "type": "String"
   },
+  "lambda:request/webfunctionauthtype": {
+    "key": "lambda:Request/WebFunctionAuthType",
+    "description": "Filters access by the auth type specified in the request. Available during CreateWebFunction, CreateWebFunctionEndpoint, and UpdateWebFunctionEndpoint operations",
+    "type": "String"
+  },
+  "lambda:resource/webfunctionauthtype": {
+    "key": "lambda:Resource/WebFunctionAuthType",
+    "description": "Filters access by the auth type configured on the web function endpoint resource. Available during InvokeWebFunctionEndpoint, UpdateWebFunctionEndpoint, DeleteWebFunctionEndpoint, and GetWebFunctionEndpoint operations",
+    "type": "String"
+  },
   "lambda:securitygroupids": {
     "key": "lambda:SecurityGroupIds",
     "description": "Filters access by the ID of security groups configured for the AWS Lambda function",

package/data/resourceTypes/end-user-messaging.json

@@ -0,0 +1,16 @@
+{
+  "brand-profile": {
+    "key": "brand-profile",
+    "arn": "arn:${Partition}:end-user-messaging:${Region}:${Account}:brand-profile/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "notify-code-configuration": {
+    "key": "notify-code-configuration",
+    "arn": "arn:${Partition}:end-user-messaging:${Region}:${Account}:notify-code-configuration/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

package/data/resourceTypes/lambda.json

@@ -69,5 +69,26 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "webfunction": {
+    "key": "webFunction",
+    "arn": "arn:${Partition}:lambda:${Region}:${Account}:web-function/${FunctionName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "webfunctionendpoint": {
+    "key": "webFunctionEndpoint",
+    "arn": "arn:${Partition}:lambda:${Region}:${Account}:web-function/${FunctionName}/endpoint/${EndpointName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "webfunctionrevision": {
+    "key": "webFunctionRevision",
+    "arn": "arn:${Partition}:lambda:${Region}:${Account}:web-function/${FunctionName}/revision/${RevisionId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/serviceCategories.json

@@ -164,6 +164,7 @@
   "elemental-support-content": "media",
   "emr-containers": "analytics",
   "emr-serverless": "analytics",
+  "end-user-messaging": "business-applications",
   "entityresolution": "analytics",
   "es": "analytics",
   "events": "application-integration",

package/data/serviceNames.json

@@ -164,6 +164,7 @@
   "elemental-support-content": "AWS Elemental Support Content",
   "emr-containers": "Amazon EMR on EKS (EMR Containers)",
   "emr-serverless": "Amazon EMR Serverless",
+  "end-user-messaging": "AWS End User Messaging",
   "entityresolution": "AWS Entity Resolution",
   "es": "Amazon OpenSearch Service",
   "events": "Amazon EventBridge",

package/data/services.json

@@ -164,6 +164,7 @@
   "elemental-support-content",
   "emr-containers",
   "emr-serverless",
+  "end-user-messaging",
   "entityresolution",
   "es",
   "events",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.21.202610011",
+  "version": "0.21.202610091",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/act-security-labs/iam-data.git"
   },
-  "updatedAt": "2026-10-01T04:50:40.952Z",
+  "updatedAt": "2026-10-09T15:38:39.845Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",