@cloud-copilot/iam-data 0.21.202610101 → 0.21.202610141

package/data/actions/acm.json

@@ -69,6 +69,14 @@
     ],
     "dependentActions": []
   },
+  "createtimestamp": {
+    "name": "CreateTimeStamp",
+    "description": "Grants permission to create an RFC 3161 timestamp token over a submitted message digest",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteacmedomainvalidation": {
     "name": "DeleteAcmeDomainValidation",
     "description": "Grants permission to delete an ACME domain validation",

package/data/actions/datazone.json

@@ -371,6 +371,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createdataapp": {
+    "name": "CreateDataApp",
+    "description": "Grants permission to create data apps",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createdataproduct": {
     "name": "CreateDataProduct",
     "description": "Grants permission to create data product",
@@ -574,6 +582,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteagentapprovalpolicy": {
+    "name": "DeleteAgentApprovalPolicy",
+    "description": "Grants permission to delete an agent approval policy",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteasset": {
     "name": "DeleteAsset",
     "description": "Grants permission to delete an asset",
@@ -622,6 +638,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteconversation": {
+    "name": "DeleteConversation",
+    "description": "Grants permission to delete conversations",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedataapp": {
+    "name": "DeleteDataApp",
+    "description": "Grants permission to delete data apps",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletedataexportconfiguration": {
     "name": "DeleteDataExportConfiguration",
     "description": "Grants permission to delete DataZone catalog data export configuration",
@@ -829,6 +861,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deregisteragentartifact": {
+    "name": "DeregisterAgentArtifact",
+    "description": "Grants permission to deregister agent artifacts",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disassociateenvironmentrole": {
     "name": "DisassociateEnvironmentRole",
     "description": "Grants permission to disassociate a role in a default service blueprint environment",
@@ -861,6 +901,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getagentapprovalpolicy": {
+    "name": "GetAgentApprovalPolicy",
+    "description": "Grants permission to get an agent approval policy",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getasset": {
     "name": "GetAsset",
     "description": "Grants permission to retrieve an asset",
@@ -941,6 +989,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdataapp": {
+    "name": "GetDataApp",
+    "description": "Grants permission to get data apps",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdataexportconfiguration": {
     "name": "GetDataExportConfiguration",
     "description": "Grants permission to retrieve DataZone catalog data export configuration",
@@ -1244,6 +1300,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "invokeagent": {
+    "name": "InvokeAgent",
+    "description": "Grants permission to invoke agent",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listaccountenvironments": {
     "name": "ListAccountEnvironments",
     "description": "Grants permission to list Environments across all domains in an AWS Account",
@@ -1268,6 +1332,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listagentartifacts": {
+    "name": "ListAgentArtifacts",
+    "description": "Grants permission to list agent artifacts",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listagentsessionrecords": {
+    "name": "ListAgentSessionRecords",
+    "description": "Grants permission to list agent session records",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listassetfilters": {
     "name": "ListAssetFilters",
     "description": "Grants permission to list asset filters",
@@ -1308,6 +1388,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdataapps": {
+    "name": "ListDataApps",
+    "description": "Grants permission to list data apps",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdataproductrevisions": {
     "name": "ListDataProductRevisions",
     "description": "Grants permission to list data product revisions",
@@ -1516,6 +1604,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listshareddataapps": {
+    "name": "ListSharedDataApps",
+    "description": "Grants permission to list shared data apps",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listsubscriptiongrants": {
     "name": "ListSubscriptionGrants",
     "description": "Grants permission to List subscription grants for a subscribed principal",
@@ -1587,6 +1683,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putagentapprovalpolicy": {
+    "name": "PutAgentApprovalPolicy",
+    "description": "Grants permission to create or update an agent approval policy",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putcellrunresult": {
     "name": "PutCellRunResult",
     "description": "Grants permission to put cell run results",
@@ -1619,6 +1723,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "registeragentartifact": {
+    "name": "RegisterAgentArtifact",
+    "description": "Grants permission to register agent artifacts",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "rejectpredictions": {
     "name": "RejectPredictions",
     "description": "Grants permission to reject prediction",
@@ -1779,6 +1891,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "stopagent": {
+    "name": "StopAgent",
+    "description": "Grants permission to stop agent",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "stopcompute": {
     "name": "StopCompute",
     "description": "Grants permission to stop compute",
@@ -1886,6 +2006,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateconversation": {
+    "name": "UpdateConversation",
+    "description": "Grants permission to update conversations",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatedataapp": {
+    "name": "UpdateDataApp",
+    "description": "Grants permission to update data apps",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatedatasource": {
     "name": "UpdateDataSource",
     "description": "Grants permission to update existing DataSource",

package/data/actions/lakeformation.json

@@ -7,6 +7,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "attachrlspolicy": {
+    "name": "AttachRLSPolicy",
+    "description": "Grants permission to attach a Lake Formation row-level security policy to a resource for one or more principals",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchgrantpermissions": {
     "name": "BatchGrantPermissions",
     "description": "Grants permission to data lake permissions to one or more principals in a batch",
@@ -79,6 +87,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createrlspolicy": {
+    "name": "CreateRLSPolicy",
+    "description": "Grants permission to create a Lake Formation row-level security policy",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletedatacellsfilter": {
     "name": "DeleteDataCellsFilter",
     "description": "Grants permission to delete a Lake Formation data cell filter",
@@ -127,6 +143,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleterlspolicy": {
+    "name": "DeleteRLSPolicy",
+    "description": "Grants permission to delete a Lake Formation row-level security policy",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deregisterresource": {
     "name": "DeregisterResource",
     "description": "Grants permission to deregister a registered location",
@@ -159,6 +183,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "detachrlspolicy": {
+    "name": "DetachRLSPolicy",
+    "description": "Grants permission to detach a Lake Formation row-level security policy from a resource for one or more principals",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "extendtransaction": {
     "name": "ExtendTransaction",
     "description": "Grants permission to extend the timeout of the given transaction",
@@ -241,6 +273,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getrlspolicy": {
+    "name": "GetRLSPolicy",
+    "description": "Grants permission to retrieve a Lake Formation row-level security policy",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getresourcelftags": {
     "name": "GetResourceLFTags",
     "description": "Grants permission to retrieve lakeformation tags on a catalog resource",
@@ -337,6 +377,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listrlspolicies": {
+    "name": "ListRLSPolicies",
+    "description": "Grants permission to list Lake Formation row-level security policies",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listrlspolicyattachments": {
+    "name": "ListRLSPolicyAttachments",
+    "description": "Grants permission to list the resource and principal attachments of Lake Formation row-level security policies",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listresources": {
     "name": "ListResources",
     "description": "Grants permission to List registered locations",
@@ -465,6 +521,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updaterlspolicy": {
+    "name": "UpdateRLSPolicy",
+    "description": "Grants permission to update the filter expression of a Lake Formation row-level security policy",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateresource": {
     "name": "UpdateResource",
     "description": "Grants permission to update a registered location",

package/data/actions/lambda.json

@@ -1358,6 +1358,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listnetworkconnectorversions": {
+    "name": "ListNetworkConnectorVersions",
+    "description": "Grants permission to retrieve a list of versions of an AWS Lambda network connector",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "networkConnector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listnetworkconnectors": {
     "name": "ListNetworkConnectors",
     "description": "Grants permission to retrieve a list of AWS Lambda network connectors",

package/data/actions/partnercentral.json

@@ -970,6 +970,26 @@
     ],
     "dependentActions": []
   },
+  "getpartnercentralcontentdocument": {
+    "name": "GetPartnerCentralContentDocument",
+    "description": "Grants permission to retrieve a content document in AWS Partner Central",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "getpartnercentralcontentmetadata": {
+    "name": "GetPartnerCentralContentMetadata",
+    "description": "Grants permission to retrieve content metadata in AWS Partner Central",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
   "getpartnerdashboard": {
     "name": "GetPartnerDashboard",
     "description": "Grants permission to retrieve partner dashboard information in AWS Partner Central",
@@ -1433,6 +1453,16 @@
     ],
     "dependentActions": []
   },
+  "listpartnercentralcontent": {
+    "name": "ListPartnerCentralContent",
+    "description": "Grants permission to list content in AWS Partner Central",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
   "listpartners": {
     "name": "ListPartners",
     "description": "Grants permission to list partners in AWS Partner Central",
@@ -1683,6 +1713,16 @@
     ],
     "dependentActions": []
   },
+  "searchpartnercentralcontent": {
+    "name": "SearchPartnerCentralContent",
+    "description": "Grants permission to search content in AWS Partner Central",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
   "sendemailverificationcode": {
     "name": "SendEmailVerificationCode",
     "description": "Grants permission to send email verification codes in AWS Partner Central",

package/data/actions/resiliencehub.json

@@ -758,6 +758,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdependencyinsights": {
+    "name": "GetDependencyInsights",
+    "description": "Grants permission to retrieve dependency insights for a service",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getfailuremodefinding": {
     "name": "GetFailureModeFinding",
     "description": "Grants permission to retrieve a failure mode finding",
@@ -1210,6 +1227,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listpolicyevents": {
+    "name": "ListPolicyEvents",
+    "description": "Grants permission to list events for a resilience policy",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "policy",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listrecommendationtemplates": {
     "name": "ListRecommendationTemplates",
     "description": "Grants permission to list recommendation templates",
@@ -1741,6 +1775,23 @@
     ],
     "dependentActions": []
   },
+  "startdependencyinsights": {
+    "name": "StartDependencyInsights",
+    "description": "Grants permission to start generating dependency insights for a service",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startfailuremodeassessment": {
     "name": "StartFailureModeAssessment",
     "description": "Grants permission to start a failure mode assessment",

package/data/actions/route53domains.json

@@ -111,6 +111,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdomainprices": {
+    "name": "GetDomainPrices",
+    "description": "Grants permission to get the prices of operations for the given domain name",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdomainsuggestions": {
     "name": "GetDomainSuggestions",
     "description": "Grants permission to get a list of suggested domain names given a string, which can either be a domain name or simply a word or phrase (without spaces)",

package/data/actions/sagemaker.json

@@ -2257,6 +2257,27 @@
     ],
     "dependentActions": []
   },
+  "createtrainingsession": {
+    "name": "CreateTrainingSession",
+    "description": "Grants permission to create a SageMaker training session",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "training-session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "sagemaker:OutputKmsKeyArn",
+      "sagemaker:VpcSecurityGroupIds",
+      "sagemaker:VpcSubnets"
+    ],
+    "dependentActions": []
+  },
   "createtransformjob": {
     "name": "CreateTransformJob",
     "description": "Grants permission to start a transform job. After the results are obtained, Amazon SageMaker saves them to an Amazon S3 location that you specify",
@@ -3695,6 +3716,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletetrainingsession": {
+    "name": "DeleteTrainingSession",
+    "description": "Grants permission to delete a SageMaker training session",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "training-session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletetrial": {
     "name": "DeleteTrial",
     "description": "Grants permission to delete a trial",
@@ -4872,6 +4908,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describetrainingsession": {
+    "name": "DescribeTrainingSession",
+    "description": "Grants permission to return information about a SageMaker training session",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "training-session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describetransformjob": {
     "name": "DescribeTransformJob",
     "description": "Grants permission to return information about a transform job",
@@ -5020,6 +5071,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "executesamplingoperation": {
+    "name": "ExecuteSamplingOperation",
+    "description": "Grants permission to execute a sampling operation against a training session",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "training-session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "executetrainingoperation": {
+    "name": "ExecuteTrainingOperation",
+    "description": "Grants permission to execute a training operation against a training session",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "training-session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "extendtrainingplan": {
     "name": "ExtendTrainingPlan",
     "description": "Grants permission to extend an existing training plan by purchasing an extension offering",
@@ -5119,6 +5200,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getsamplingoperationresult": {
+    "name": "GetSamplingOperationResult",
+    "description": "Grants permission to get the result of a sampling operation for a training session",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "training-session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getscalingconfigurationrecommendation": {
     "name": "GetScalingConfigurationRecommendation",
     "description": "Grants permission to get a scaling policy configuration recommendation",
@@ -5142,6 +5238,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettrainingoperationresult": {
+    "name": "GetTrainingOperationResult",
+    "description": "Grants permission to get the result of a training operation for a training session",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "training-session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "importhubcontent": {
     "name": "ImportHubContent",
     "description": "Grants permission to import hub content",
@@ -6412,6 +6523,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listtrainingsessions": {
+    "name": "ListTrainingSessions",
+    "description": "Grants permission to list SageMaker training sessions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtransformjobs": {
     "name": "ListTransformJobs",
     "description": "Grants permission to list transform jobs",
@@ -6580,6 +6699,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "sampletrainingsession": {
+    "name": "SampleTrainingSession",
+    "description": "Grants permission to invoke a synchronous sample request against a training session",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "training-session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "sampletrainingsessionwithresponsestream": {
+    "name": "SampleTrainingSessionWithResponseStream",
+    "description": "Grants permission to invoke a streaming sample request against a training session",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "training-session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "samplewithresponsestream": {
     "name": "SampleWithResponseStream",
     "description": "Grants permission to invoke a streaming sample request against a job",
@@ -7086,6 +7235,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "stoptrainingsession": {
+    "name": "StopTrainingSession",
+    "description": "Grants permission to stop a SageMaker training session",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "training-session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "stoptransformjob": {
     "name": "StopTransformJob",
     "description": "Grants permission to stop a transform job.  When Amazon SageMaker receives a StopTransformJob request, the status of the job changes to Stopping.  After Amazon SageMaker stops the job, the status is set to Stopped",

package/data/actions/securityagent.json

@@ -104,6 +104,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "batchdisassociatefindingissue": {
+    "name": "BatchDisassociateFindingIssue",
+    "description": "Grants permission to disassociate issues from findings",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchexportfindings": {
+    "name": "BatchExportFindings",
+    "description": "Grants permission to create issues for the findings",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AgentSpace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchgetagentspaces": {
     "name": "BatchGetAgentSpaces",
     "description": "Grants permission to retrieve multiple agent spaces in a single request",

package/data/resourceTypes/sagemaker.json

@@ -530,6 +530,14 @@
       "sagemaker:ResourceTag/${TagKey}"
     ]
   },
+  "training-session": {
+    "key": "training-session",
+    "arn": "arn:${Partition}:sagemaker:${Region}:${Account}:training-session/${SessionName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "sagemaker:ResourceTag/${TagKey}"
+    ]
+  },
   "transform-job": {
     "key": "transform-job",
     "arn": "arn:${Partition}:sagemaker:${Region}:${Account}:transform-job/${TransformJobName}",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.21.202610101",
+  "version": "0.21.202610141",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/act-security-labs/iam-data.git"
   },
-  "updatedAt": "2026-10-10T04:51:05.935Z",
+  "updatedAt": "2026-10-14T04:50:04.090Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",