@cloud-copilot/iam-data 0.21.202610021 → 0.21.202610091

package/data/actions/agentaccess-mcp.json

@@ -39,6 +39,16 @@
     ],
     "dependentActions": []
   },
+  "getsessioninfo": {
+    "name": "GetSessionInfo",
+    "description": "Grants permission to retrieve information about the current session",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "agentaccess-mcp:StackArn"
+    ],
+    "dependentActions": []
+  },
   "holdkey": {
     "name": "HoldKey",
     "description": "Grants permission to hold key down",
@@ -69,6 +79,16 @@
     ],
     "dependentActions": []
   },
+  "launchapplication": {
+    "name": "LaunchApplication",
+    "description": "Grants permission to launch an application on a streaming session",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "agentaccess-mcp:StackArn"
+    ],
+    "dependentActions": []
+  },
   "leftclick": {
     "name": "LeftClick",
     "description": "Grants permission to perform left mouse click at coordinates",
@@ -149,6 +169,16 @@
     ],
     "dependentActions": []
   },
+  "toggleappswitcher": {
+    "name": "ToggleAppSwitcher",
+    "description": "Grants permission to toggle the application switcher overlay",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "agentaccess-mcp:StackArn"
+    ],
+    "dependentActions": []
+  },
   "tripleclick": {
     "name": "TripleClick",
     "description": "Grants permission to perform triple click at coordinates",

package/data/actions/billing.json

@@ -313,6 +313,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcreditentitlementperiods": {
+    "name": "ListCreditEntitlementPeriods",
+    "description": "Grants permission to view the measurement periods of a credit entitlement",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcreditentitlements": {
+    "name": "ListCreditEntitlements",
+    "description": "Grants permission to view the credit entitlements the caller's account is set to receive",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listenterprisesupportlinkedaccountcharges": {
     "name": "ListEnterpriseSupportLinkedAccountCharges",
     "description": "Grants permission to view Enterprise Support charges broken down by linked account",
@@ -363,6 +379,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "splitcredit": {
+    "name": "SplitCredit",
+    "description": "Grants permission to split a credit into multiple child credits in the same account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a specified billing view",
@@ -382,6 +406,14 @@
     ],
     "dependentActions": []
   },
+  "transfercredit": {
+    "name": "TransferCredit",
+    "description": "Grants permission to transfer a credit to another account under the same payer",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove a tag from a specified billing view",

package/data/actions/cloudwatch.json

@@ -100,6 +100,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "submitalarmfeedback": {
+    "name": "SubmitAlarmFeedback",
+    "description": "Grants permission to submit feedback on an anomaly detection alarm to improve its anomaly detection model",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateotelenrichment": {
     "name": "UpdateOTelEnrichment",
     "description": "Grants permission to update the metric filters of OTel Enrichment of vended metrics for PromQL querying",
@@ -1028,7 +1036,7 @@
   },
   "getrecords": {
     "name": "GetRecords",
-    "description": "Grants permission to fetch logs, metrics, and traces",
+    "description": "Grants permission to fetch logs and traces",
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [
@@ -1730,6 +1738,16 @@
     ],
     "dependentActions": []
   },
+  "putrecords": {
+    "name": "PutRecords",
+    "description": "Grants permission to put logs and traces",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "cloudwatch:HasAccessGrant"
+    ],
+    "dependentActions": []
+  },
   "querytraces": {
     "name": "QueryTraces",
     "description": "Grants permission to query traces",

package/data/actions/end-user-messaging.json

@@ -0,0 +1,385 @@
+{
+  "createbrandprofile": {
+    "name": "CreateBrandProfile",
+    "description": "Grants permission to create a brand profile",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createbrandprofileattributes": {
+    "name": "CreateBrandProfileAttributes",
+    "description": "Grants permission to create attributes for a brand profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "brand-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createbrandprofilefromregistration": {
+    "name": "CreateBrandProfileFromRegistration",
+    "description": "Grants permission to create a new brand profile populated from an existing registration via Bedrock mapping",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createnotifycodeconfiguration": {
+    "name": "CreateNotifyCodeConfiguration",
+    "description": "Grants permission to create a notify code configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createregistrationsfrombrandprofile": {
+    "name": "CreateRegistrationsFromBrandProfile",
+    "description": "Grants permission to create DRAFT registrations pre-filled from brand profile attributes via Bedrock mapping",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "brand-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletebrandprofile": {
+    "name": "DeleteBrandProfile",
+    "description": "Grants permission to delete a brand profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "brand-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletebrandprofileattribute": {
+    "name": "DeleteBrandProfileAttribute",
+    "description": "Grants permission to delete a brand profile attribute",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "brand-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletenotifycodeconfiguration": {
+    "name": "DeleteNotifyCodeConfiguration",
+    "description": "Grants permission to delete a notify code configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "notify-code-configuration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getbrandprofile": {
+    "name": "GetBrandProfile",
+    "description": "Grants permission to get a brand profile",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "brand-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getbrandprofileattribute": {
+    "name": "GetBrandProfileAttribute",
+    "description": "Grants permission to get a brand profile attribute",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "brand-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getjob": {
+    "name": "GetJob",
+    "description": "Grants permission to get the details of an asynchronous job",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getnotifycodeconfiguration": {
+    "name": "GetNotifyCodeConfiguration",
+    "description": "Grants permission to get a notify code configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "notify-code-configuration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listbrandprofileattributes": {
+    "name": "ListBrandProfileAttributes",
+    "description": "Grants permission to list the attributes for a brand profile",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "brand-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listbrandprofiles": {
+    "name": "ListBrandProfiles",
+    "description": "Grants permission to list brand profiles",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listjobs": {
+    "name": "ListJobs",
+    "description": "Grants permission to list asynchronous jobs in your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnotifycodeconfigurations": {
+    "name": "ListNotifyCodeConfigurations",
+    "description": "Grants permission to list notify code configurations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listregistrationsfrombrandprofile": {
+    "name": "ListRegistrationsFromBrandProfile",
+    "description": "Grants permission to list the registrations created from a brand profile",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "brand-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list tags for a resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "brand-profile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "notify-code-configuration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "sendnotifycodeverification": {
+    "name": "SendNotifyCodeVerification",
+    "description": "Grants permission to send a notify code verification",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "notify-code-configuration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to tag a resource",
+    "accessLevel": "Tagging, Write",
+    "resourceTypes": [
+      {
+        "name": "brand-profile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "notify-code-configuration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to untag a resource",
+    "accessLevel": "Tagging, Write",
+    "resourceTypes": [
+      {
+        "name": "brand-profile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "notify-code-configuration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updatebrandprofile": {
+    "name": "UpdateBrandProfile",
+    "description": "Grants permission to update a brand profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "brand-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatebrandprofileattribute": {
+    "name": "UpdateBrandProfileAttribute",
+    "description": "Grants permission to update a brand profile attribute",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "brand-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatebrandprofilefromregistration": {
+    "name": "UpdateBrandProfileFromRegistration",
+    "description": "Grants permission to update a brand profile from a registration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "brand-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatenotifycodeconfiguration": {
+    "name": "UpdateNotifyCodeConfiguration",
+    "description": "Grants permission to update a notify code configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "notify-code-configuration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateregistrationsfrombrandprofile": {
+    "name": "UpdateRegistrationsFromBrandProfile",
+    "description": "Grants permission to update registrations from a brand profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "brand-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "validatenotifycodeverification": {
+    "name": "ValidateNotifyCodeVerification",
+    "description": "Grants permission to validate a notify code verification",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/glue.json

@@ -3239,6 +3239,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getsystemlogsforjobrun": {
+    "name": "GetSystemLogsForJobRun",
+    "description": "Grants permission to retrieve system logs for a job run",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getsystemlogsforsession": {
+    "name": "GetSystemLogsForSession",
+    "description": "Grants permission to retrieve system logs for an interactive session",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "gettable": {
     "name": "GetTable",
     "description": "Grants permission to retrieve a table",

package/data/actions/profile.json

@@ -69,12 +69,6 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
-      },
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -108,12 +102,6 @@
           "aws:TagKeys"
         ],
         "dependentActions": []
-      },
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -142,12 +130,6 @@
     "description": "Grants permission to create a layout in the domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "layouts",
         "required": true,
@@ -166,12 +148,6 @@
     "description": "Grants permission to put an event stream in a domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "event-streams",
         "required": true,
@@ -190,12 +166,6 @@
     "description": "Grants permission to create an event trigger in the domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "event-triggers",
         "required": true,
@@ -253,12 +223,6 @@
     "description": "Grants permission to create a Recommender in the domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "recommenders",
         "required": true,
@@ -277,12 +241,6 @@
     "description": "Grants permission to create a recommender filter in the domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "recommender-filters",
         "required": true,
@@ -301,12 +259,6 @@
     "description": "Grants permission to create a recommender schema in the domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "recommender-schemas",
         "required": true,
@@ -325,12 +277,6 @@
     "description": "Grants permission to create a segment definition in the domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "segment-definitions",
         "required": true,
@@ -364,12 +310,6 @@
     "description": "Grants permission to create a segment snapshot in the domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "segment-definitions",
         "required": true,
@@ -405,12 +345,6 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
-      },
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -436,12 +370,6 @@
     "description": "Grants permission to delete a layout in the domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "layouts",
         "required": true,
@@ -462,12 +390,6 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
-      },
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -478,12 +400,6 @@
     "description": "Grants permission to delete an event stream in a domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "event-streams",
         "required": true,
@@ -499,12 +415,6 @@
     "description": "Grants permission to delete an event trigger in the domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "event-triggers",
         "required": true,
@@ -520,12 +430,6 @@
     "description": "Grants permission to delete a integration in a domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "integrations",
         "required": true,
@@ -571,12 +475,6 @@
     "description": "Grants permission to delete a profile object",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "object-types",
         "required": true,
@@ -592,12 +490,6 @@
     "description": "Grants permission to delete a specific profile object type in the domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "object-types",
         "required": true,
@@ -613,12 +505,6 @@
     "description": "Grants permission to delete a recommender in a domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "recommenders",
         "required": true,
@@ -634,12 +520,6 @@
     "description": "Grants permission to delete a recommender filter in the domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "recommender-filters",
         "required": true,
@@ -655,12 +535,6 @@
     "description": "Grants permission to delete a recommender schema in the domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "recommender-schemas",
         "required": true,
@@ -676,12 +550,6 @@
     "description": "Grants permission to delete a segment definition in the domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "segment-definitions",
         "required": true,
@@ -783,12 +651,6 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
-      },
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -804,12 +666,6 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
-      },
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -835,12 +691,6 @@
     "description": "Grants permission to get a layout in the domain",
     "accessLevel": "Read",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "layouts",
         "required": true,
@@ -861,12 +711,6 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
-      },
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -877,12 +721,6 @@
     "description": "Grants permission to get a specific event stream in a domain",
     "accessLevel": "Read",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "event-streams",
         "required": true,
@@ -898,12 +736,6 @@
     "description": "Grants permission to get an event trigger in the domain",
     "accessLevel": "Read",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "event-triggers",
         "required": true,
@@ -934,12 +766,6 @@
     "description": "Grants permission to get a specific integrations in a domain",
     "accessLevel": "Read",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "integrations",
         "required": true,
@@ -970,12 +796,6 @@
     "description": "Grants permission to get statistics of a specific attribute for object type in the domain",
     "accessLevel": "Read",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "object-types",
         "required": true,
@@ -1021,12 +841,6 @@
     "description": "Grants permission to get a specific profile object type in the domain",
     "accessLevel": "Read",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "object-types",
         "required": true,
@@ -1050,12 +864,6 @@
     "description": "Grants permission to list recommendations for a profile",
     "accessLevel": "Read",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "recommenders",
         "required": true,
@@ -1071,12 +879,6 @@
     "description": "Grants permission to get Recommender details in a domain",
     "accessLevel": "Read",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "recommenders",
         "required": true,
@@ -1092,12 +894,6 @@
     "description": "Grants permission to get recommender filter details in the domain",
     "accessLevel": "Read",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "recommender-filters",
         "required": true,
@@ -1113,12 +909,6 @@
     "description": "Grants permission to get recommender schema details in the domain",
     "accessLevel": "Read",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "recommender-schemas",
         "required": true,
@@ -1134,12 +924,6 @@
     "description": "Grants permission to get a segment definition in the domain",
     "accessLevel": "Read",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "segment-definitions",
         "required": true,
@@ -1191,12 +975,6 @@
     "description": "Grants permission to get a segment snapshot in the domain",
     "accessLevel": "Read",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "segment-definitions",
         "required": true,
@@ -1396,12 +1174,6 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
-      },
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -1480,12 +1252,6 @@
     "description": "Grants permission to list values of a specific attribute for object type in the domain",
     "accessLevel": "List",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "object-types",
         "required": true,
@@ -1501,12 +1267,6 @@
     "description": "Grants permission to list all the attributes of a specific object type in the domain",
     "accessLevel": "List",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "object-types",
         "required": true,
@@ -1575,12 +1335,6 @@
     "description": "Grants permission to list all the profile objects for a profile",
     "accessLevel": "List",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "object-types",
         "required": true,
@@ -1834,12 +1588,6 @@
           "aws:TagKeys"
         ],
         "dependentActions": []
-      },
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -1850,12 +1598,6 @@
     "description": "Grants permission to put a integration in a domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "integrations",
         "required": true,
@@ -1874,12 +1616,6 @@
     "description": "Grants permission to put an object for a profile",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "object-types",
         "required": true,
@@ -1895,12 +1631,6 @@
     "description": "Grants permission to put a specific profile object type in the domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "object-types",
         "required": true,
@@ -1955,12 +1685,6 @@
     "description": "Grants permission to start a recommender in a domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "recommenders",
         "required": true,
@@ -1991,12 +1715,6 @@
     "description": "Grants permission to stop a recommender in a domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "recommenders",
         "required": true,
@@ -2199,12 +1917,6 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
-      },
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -2230,12 +1942,6 @@
     "description": "Grants permission to update a layout in the domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "layouts",
         "required": true,
@@ -2251,12 +1957,6 @@
     "description": "Grants permission to update an event trigger in the domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "event-triggers",
         "required": true,
@@ -2287,12 +1987,6 @@
     "description": "Grants permission to update a Recommender in the domain",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "domains",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "recommenders",
         "required": true,

package/data/actions/securityhub.json

@@ -414,6 +414,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "cancelexportjobv2": {
+    "name": "CancelExportJobV2",
+    "description": "Grants permission to cancel an export job",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "connectorregistrationsv2": {
     "name": "ConnectorRegistrationsV2",
     "description": "Grants permission to complete the OAuth 2.0 authorization code flow based on input parameters",
@@ -1146,6 +1154,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getexportjobv2": {
+    "name": "GetExportJobV2",
+    "description": "Grants permission to retrieve an export job",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getfindingaggregator": {
     "name": "GetFindingAggregator",
     "description": "Grants permission to retrieve details for a finding aggregator, which configures finding aggregation across Regions",
@@ -1456,6 +1472,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listexportjobsv2": {
+    "name": "ListExportJobsV2",
+    "description": "Grants permission to list export jobs",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listexposuresbyremediationv2": {
     "name": "ListExposuresByRemediationV2",
     "description": "Grants permission to retrieve a list of exposure findings associated with a remediation target",
@@ -1612,6 +1636,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startexportjobv2": {
+    "name": "StartExportJobV2",
+    "description": "Grants permission to start an export job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a Security Hub resource",

package/data/categories/business-applications.json

@@ -12,6 +12,7 @@
     "connect-campaigns",
     "customer-verification",
     "elemental-support-cases",
+    "end-user-messaging",
     "health-agent",
     "honeycode",
     "mechanicalturk",

package/data/conditionKeys/end-user-messaging.json

@@ -0,0 +1,17 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags attached to the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/resourceTypes/end-user-messaging.json

@@ -0,0 +1,16 @@
+{
+  "brand-profile": {
+    "key": "brand-profile",
+    "arn": "arn:${Partition}:end-user-messaging:${Region}:${Account}:brand-profile/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "notify-code-configuration": {
+    "key": "notify-code-configuration",
+    "arn": "arn:${Partition}:end-user-messaging:${Region}:${Account}:notify-code-configuration/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

package/data/serviceCategories.json

@@ -164,6 +164,7 @@
   "elemental-support-content": "media",
   "emr-containers": "analytics",
   "emr-serverless": "analytics",
+  "end-user-messaging": "business-applications",
   "entityresolution": "analytics",
   "es": "analytics",
   "events": "application-integration",

package/data/serviceNames.json

@@ -164,6 +164,7 @@
   "elemental-support-content": "AWS Elemental Support Content",
   "emr-containers": "Amazon EMR on EKS (EMR Containers)",
   "emr-serverless": "Amazon EMR Serverless",
+  "end-user-messaging": "AWS End User Messaging",
   "entityresolution": "AWS Entity Resolution",
   "es": "Amazon OpenSearch Service",
   "events": "Amazon EventBridge",

package/data/services.json

@@ -164,6 +164,7 @@
   "elemental-support-content",
   "emr-containers",
   "emr-serverless",
+  "end-user-messaging",
   "entityresolution",
   "es",
   "events",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.21.202610021",
+  "version": "0.21.202610091",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/act-security-labs/iam-data.git"
   },
-  "updatedAt": "2026-10-02T04:50:27.939Z",
+  "updatedAt": "2026-10-09T15:38:39.845Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",