@cloud-copilot/iam-data 0.21.202610141 → 0.21.202610151

package/data/actions/aidevops.json

@@ -19,7 +19,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aidevops:ServiceType"
+    ],
     "dependentActions": []
   },
   "createaccesstoken": {
@@ -374,7 +376,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aidevops:ServiceType"
+    ],
     "dependentActions": []
   },
   "discovertopology": {
@@ -534,7 +538,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aidevops:ServiceType"
+    ],
     "dependentActions": []
   },
   "getbacklogtask": {
@@ -978,7 +984,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aidevops:ServiceType"
+    ],
     "dependentActions": []
   },
   "registerservice": {
@@ -1218,7 +1226,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aidevops:ServiceType"
+    ],
     "dependentActions": []
   },
   "updatebacklogtask": {

package/data/actions/aws-external-anthropic.json

@@ -26,6 +26,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "archivedeployment": {
+    "name": "ArchiveDeployment",
+    "description": "Grants permission to archive a managed agent deployment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "archiveenvironment": {
     "name": "ArchiveEnvironment",
     "description": "Grants permission to archive a managed agent environment",
@@ -189,6 +206,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createdeployment": {
+    "name": "CreateDeployment",
+    "description": "Grants permission to create a managed agent deployment in a workspace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createenvironment": {
     "name": "CreateEnvironment",
     "description": "Grants permission to create a managed agent environment in a workspace",
@@ -541,6 +575,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdeployment": {
+    "name": "GetDeployment",
+    "description": "Grants permission to retrieve details of a managed agent deployment or its runs",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getenvironment": {
     "name": "GetEnvironment",
     "description": "Grants permission to retrieve details of a managed agent environment",
@@ -746,6 +797,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdeployments": {
+    "name": "ListDeployments",
+    "description": "Grants permission to list managed agent deployments in a workspace",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listenvironments": {
     "name": "ListEnvironments",
     "description": "Grants permission to list managed agent environments in a workspace",
@@ -923,6 +991,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "pausedeployment": {
+    "name": "PauseDeployment",
+    "description": "Grants permission to pause a managed agent deployment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "processenvironmentwork": {
     "name": "ProcessEnvironmentWork",
     "description": "Grants permission to process work items in a self-hosted managed agent environment",
@@ -965,6 +1050,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "rundeployment": {
+    "name": "RunDeployment",
+    "description": "Grants permission to trigger a managed agent deployment run",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource",
@@ -984,6 +1086,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "unpausedeployment": {
+    "name": "UnpauseDeployment",
+    "description": "Grants permission to resume a paused managed agent deployment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a resource",
@@ -1019,6 +1138,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatedeployment": {
+    "name": "UpdateDeployment",
+    "description": "Grants permission to update a managed agent deployment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "workspace",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateenvironment": {
     "name": "UpdateEnvironment",
     "description": "Grants permission to update a managed agent environment",

package/data/actions/cloudwatch.json

@@ -1592,7 +1592,8 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "cloudwatch:AlarmActions"
+      "cloudwatch:AlarmActions",
+      "cloudwatch:AlarmTagsPropagationEnabled"
     ],
     "dependentActions": []
   },
@@ -1658,7 +1659,8 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "cloudwatch:AlarmActions"
+      "cloudwatch:AlarmActions",
+      "cloudwatch:AlarmTagsPropagationEnabled"
     ],
     "dependentActions": []
   },
@@ -1697,7 +1699,8 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "cloudwatch:AlarmActions"
+      "cloudwatch:AlarmActions",
+      "cloudwatch:AlarmTagsPropagationEnabled"
     ],
     "dependentActions": []
   },

package/data/conditionKeys/aidevops.json

@@ -1,4 +1,9 @@
 {
+  "aidevops:servicetype": {
+    "key": "aidevops:ServiceType",
+    "description": "Filters access by the type of service in the association, such as github, slack, aws or sourceAws. Set by the service from the association's configuration, not supplied by the caller",
+    "type": "String"
+  },
   "aidevops:sourceagentspacearn": {
     "key": "aidevops:SourceAgentSpaceArn",
     "description": "Filters access by the source AgentSpace ARN on the request. Set by the service from the request context, not supplied by the caller",

package/data/conditionKeys/cloudwatch.json

@@ -19,6 +19,11 @@
     "description": "Filters access by defined alarm actions",
     "type": "ArrayOfString"
   },
+  "cloudwatch:alarmtagspropagationenabled": {
+    "key": "cloudwatch:AlarmTagsPropagationEnabled",
+    "description": "Filters access by whether the request enables propagation of the alarm's tags in notification payloads",
+    "type": "Bool"
+  },
   "cloudwatch:hasaccessgrant": {
     "key": "cloudwatch:HasAccessGrant",
     "description": "Filters access by the presence of access grants associated with the request",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.21.202610141",
+  "version": "0.21.202610151",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/act-security-labs/iam-data.git"
   },
-  "updatedAt": "2026-10-14T04:50:04.090Z",
+  "updatedAt": "2026-10-15T04:47:27.364Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",