@cloud-copilot/iam-data 0.21.202610131 → 0.21.202610151

package/data/actions/aidevops.json

@@ -19,7 +19,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aidevops:ServiceType"
+    ],
     "dependentActions": []
   },
   "createaccesstoken": {
@@ -374,7 +376,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aidevops:ServiceType"
+    ],
     "dependentActions": []
   },
   "discovertopology": {
@@ -534,7 +538,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aidevops:ServiceType"
+    ],
     "dependentActions": []
   },
   "getbacklogtask": {
@@ -978,7 +984,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aidevops:ServiceType"
+    ],
     "dependentActions": []
   },
   "registerservice": {
@@ -1218,7 +1226,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aidevops:ServiceType"
+    ],
     "dependentActions": []
   },
   "updatebacklogtask": {

package/data/actions/aws-external-anthropic.json

@@ -26,6 +26,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "archivedeployment": {
+    "name": "ArchiveDeployment",
+    "description": "Grants permission to archive a managed agent deployment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "archiveenvironment": {
     "name": "ArchiveEnvironment",
     "description": "Grants permission to archive a managed agent environment",
@@ -189,6 +206,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createdeployment": {
+    "name": "CreateDeployment",
+    "description": "Grants permission to create a managed agent deployment in a workspace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createenvironment": {
     "name": "CreateEnvironment",
     "description": "Grants permission to create a managed agent environment in a workspace",
@@ -541,6 +575,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdeployment": {
+    "name": "GetDeployment",
+    "description": "Grants permission to retrieve details of a managed agent deployment or its runs",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getenvironment": {
     "name": "GetEnvironment",
     "description": "Grants permission to retrieve details of a managed agent environment",
@@ -746,6 +797,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdeployments": {
+    "name": "ListDeployments",
+    "description": "Grants permission to list managed agent deployments in a workspace",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listenvironments": {
     "name": "ListEnvironments",
     "description": "Grants permission to list managed agent environments in a workspace",
@@ -923,6 +991,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "pausedeployment": {
+    "name": "PauseDeployment",
+    "description": "Grants permission to pause a managed agent deployment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "processenvironmentwork": {
     "name": "ProcessEnvironmentWork",
     "description": "Grants permission to process work items in a self-hosted managed agent environment",
@@ -965,6 +1050,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "rundeployment": {
+    "name": "RunDeployment",
+    "description": "Grants permission to trigger a managed agent deployment run",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource",
@@ -984,6 +1086,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "unpausedeployment": {
+    "name": "UnpauseDeployment",
+    "description": "Grants permission to resume a paused managed agent deployment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a resource",
@@ -1019,6 +1138,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatedeployment": {
+    "name": "UpdateDeployment",
+    "description": "Grants permission to update a managed agent deployment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateenvironment": {
     "name": "UpdateEnvironment",
     "description": "Grants permission to update a managed agent environment",

package/data/actions/cloudwatch.json

@@ -1592,7 +1592,8 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "cloudwatch:AlarmActions"
+      "cloudwatch:AlarmActions",
+      "cloudwatch:AlarmTagsPropagationEnabled"
     ],
     "dependentActions": []
   },
@@ -1658,7 +1659,8 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "cloudwatch:AlarmActions"
+      "cloudwatch:AlarmActions",
+      "cloudwatch:AlarmTagsPropagationEnabled"
     ],
     "dependentActions": []
   },
@@ -1697,7 +1699,8 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "cloudwatch:AlarmActions"
+      "cloudwatch:AlarmActions",
+      "cloudwatch:AlarmTagsPropagationEnabled"
     ],
     "dependentActions": []
   },

package/data/actions/datazone.json

@@ -371,6 +371,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createdataapp": {
+    "name": "CreateDataApp",
+    "description": "Grants permission to create data apps",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createdataproduct": {
     "name": "CreateDataProduct",
     "description": "Grants permission to create data product",
@@ -574,6 +582,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteagentapprovalpolicy": {
+    "name": "DeleteAgentApprovalPolicy",
+    "description": "Grants permission to delete an agent approval policy",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteasset": {
     "name": "DeleteAsset",
     "description": "Grants permission to delete an asset",
@@ -622,6 +638,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteconversation": {
+    "name": "DeleteConversation",
+    "description": "Grants permission to delete conversations",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedataapp": {
+    "name": "DeleteDataApp",
+    "description": "Grants permission to delete data apps",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletedataexportconfiguration": {
     "name": "DeleteDataExportConfiguration",
     "description": "Grants permission to delete DataZone catalog data export configuration",
@@ -829,6 +861,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deregisteragentartifact": {
+    "name": "DeregisterAgentArtifact",
+    "description": "Grants permission to deregister agent artifacts",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disassociateenvironmentrole": {
     "name": "DisassociateEnvironmentRole",
     "description": "Grants permission to disassociate a role in a default service blueprint environment",
@@ -861,6 +901,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getagentapprovalpolicy": {
+    "name": "GetAgentApprovalPolicy",
+    "description": "Grants permission to get an agent approval policy",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getasset": {
     "name": "GetAsset",
     "description": "Grants permission to retrieve an asset",
@@ -941,6 +989,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdataapp": {
+    "name": "GetDataApp",
+    "description": "Grants permission to get data apps",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdataexportconfiguration": {
     "name": "GetDataExportConfiguration",
     "description": "Grants permission to retrieve DataZone catalog data export configuration",
@@ -1244,6 +1300,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "invokeagent": {
+    "name": "InvokeAgent",
+    "description": "Grants permission to invoke agent",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listaccountenvironments": {
     "name": "ListAccountEnvironments",
     "description": "Grants permission to list Environments across all domains in an AWS Account",
@@ -1268,6 +1332,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listagentartifacts": {
+    "name": "ListAgentArtifacts",
+    "description": "Grants permission to list agent artifacts",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listagentsessionrecords": {
+    "name": "ListAgentSessionRecords",
+    "description": "Grants permission to list agent session records",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listassetfilters": {
     "name": "ListAssetFilters",
     "description": "Grants permission to list asset filters",
@@ -1308,6 +1388,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdataapps": {
+    "name": "ListDataApps",
+    "description": "Grants permission to list data apps",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdataproductrevisions": {
     "name": "ListDataProductRevisions",
     "description": "Grants permission to list data product revisions",
@@ -1516,6 +1604,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listshareddataapps": {
+    "name": "ListSharedDataApps",
+    "description": "Grants permission to list shared data apps",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listsubscriptiongrants": {
     "name": "ListSubscriptionGrants",
     "description": "Grants permission to List subscription grants for a subscribed principal",
@@ -1587,6 +1683,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putagentapprovalpolicy": {
+    "name": "PutAgentApprovalPolicy",
+    "description": "Grants permission to create or update an agent approval policy",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putcellrunresult": {
     "name": "PutCellRunResult",
     "description": "Grants permission to put cell run results",
@@ -1619,6 +1723,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "registeragentartifact": {
+    "name": "RegisterAgentArtifact",
+    "description": "Grants permission to register agent artifacts",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "rejectpredictions": {
     "name": "RejectPredictions",
     "description": "Grants permission to reject prediction",
@@ -1779,6 +1891,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "stopagent": {
+    "name": "StopAgent",
+    "description": "Grants permission to stop agent",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "stopcompute": {
     "name": "StopCompute",
     "description": "Grants permission to stop compute",
@@ -1886,6 +2006,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateconversation": {
+    "name": "UpdateConversation",
+    "description": "Grants permission to update conversations",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatedataapp": {
+    "name": "UpdateDataApp",
+    "description": "Grants permission to update data apps",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatedatasource": {
     "name": "UpdateDataSource",
     "description": "Grants permission to update existing DataSource",

package/data/actions/lakeformation.json

@@ -7,6 +7,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "attachrlspolicy": {
+    "name": "AttachRLSPolicy",
+    "description": "Grants permission to attach a Lake Formation row-level security policy to a resource for one or more principals",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchgrantpermissions": {
     "name": "BatchGrantPermissions",
     "description": "Grants permission to data lake permissions to one or more principals in a batch",
@@ -79,6 +87,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createrlspolicy": {
+    "name": "CreateRLSPolicy",
+    "description": "Grants permission to create a Lake Formation row-level security policy",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletedatacellsfilter": {
     "name": "DeleteDataCellsFilter",
     "description": "Grants permission to delete a Lake Formation data cell filter",
@@ -127,6 +143,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleterlspolicy": {
+    "name": "DeleteRLSPolicy",
+    "description": "Grants permission to delete a Lake Formation row-level security policy",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deregisterresource": {
     "name": "DeregisterResource",
     "description": "Grants permission to deregister a registered location",
@@ -159,6 +183,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "detachrlspolicy": {
+    "name": "DetachRLSPolicy",
+    "description": "Grants permission to detach a Lake Formation row-level security policy from a resource for one or more principals",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "extendtransaction": {
     "name": "ExtendTransaction",
     "description": "Grants permission to extend the timeout of the given transaction",
@@ -241,6 +273,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getrlspolicy": {
+    "name": "GetRLSPolicy",
+    "description": "Grants permission to retrieve a Lake Formation row-level security policy",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getresourcelftags": {
     "name": "GetResourceLFTags",
     "description": "Grants permission to retrieve lakeformation tags on a catalog resource",
@@ -337,6 +377,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listrlspolicies": {
+    "name": "ListRLSPolicies",
+    "description": "Grants permission to list Lake Formation row-level security policies",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listrlspolicyattachments": {
+    "name": "ListRLSPolicyAttachments",
+    "description": "Grants permission to list the resource and principal attachments of Lake Formation row-level security policies",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listresources": {
     "name": "ListResources",
     "description": "Grants permission to List registered locations",
@@ -465,6 +521,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updaterlspolicy": {
+    "name": "UpdateRLSPolicy",
+    "description": "Grants permission to update the filter expression of a Lake Formation row-level security policy",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateresource": {
     "name": "UpdateResource",
     "description": "Grants permission to update a registered location",

package/data/actions/resiliencehub.json

@@ -758,6 +758,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdependencyinsights": {
+    "name": "GetDependencyInsights",
+    "description": "Grants permission to retrieve dependency insights for a service",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getfailuremodefinding": {
     "name": "GetFailureModeFinding",
     "description": "Grants permission to retrieve a failure mode finding",
@@ -1210,6 +1227,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listpolicyevents": {
+    "name": "ListPolicyEvents",
+    "description": "Grants permission to list events for a resilience policy",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "policy",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listrecommendationtemplates": {
     "name": "ListRecommendationTemplates",
     "description": "Grants permission to list recommendation templates",
@@ -1741,6 +1775,23 @@
     ],
     "dependentActions": []
   },
+  "startdependencyinsights": {
+    "name": "StartDependencyInsights",
+    "description": "Grants permission to start generating dependency insights for a service",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startfailuremodeassessment": {
     "name": "StartFailureModeAssessment",
     "description": "Grants permission to start a failure mode assessment",

package/data/actions/route53domains.json

@@ -111,6 +111,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdomainprices": {
+    "name": "GetDomainPrices",
+    "description": "Grants permission to get the prices of operations for the given domain name",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdomainsuggestions": {
     "name": "GetDomainSuggestions",
     "description": "Grants permission to get a list of suggested domain names given a string, which can either be a domain name or simply a word or phrase (without spaces)",

package/data/conditionKeys/aidevops.json

@@ -1,4 +1,9 @@
 {
+  "aidevops:servicetype": {
+    "key": "aidevops:ServiceType",
+    "description": "Filters access by the type of service in the association, such as github, slack, aws or sourceAws. Set by the service from the association's configuration, not supplied by the caller",
+    "type": "String"
+  },
   "aidevops:sourceagentspacearn": {
     "key": "aidevops:SourceAgentSpaceArn",
     "description": "Filters access by the source AgentSpace ARN on the request. Set by the service from the request context, not supplied by the caller",

package/data/conditionKeys/cloudwatch.json

@@ -19,6 +19,11 @@
     "description": "Filters access by defined alarm actions",
     "type": "ArrayOfString"
   },
+  "cloudwatch:alarmtagspropagationenabled": {
+    "key": "cloudwatch:AlarmTagsPropagationEnabled",
+    "description": "Filters access by whether the request enables propagation of the alarm's tags in notification payloads",
+    "type": "Bool"
+  },
   "cloudwatch:hasaccessgrant": {
     "key": "cloudwatch:HasAccessGrant",
     "description": "Filters access by the presence of access grants associated with the request",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.21.202610131",
+  "version": "0.21.202610151",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/act-security-labs/iam-data.git"
   },
-  "updatedAt": "2026-10-13T04:56:05.720Z",
+  "updatedAt": "2026-10-15T04:47:27.364Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",