@cloud-copilot/iam-data 0.21.202610151 → 0.21.202610201

package/data/actions/bedrock-agentcore.json

@@ -215,6 +215,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatememoryrecordexpiryspecification": {
+    "name": "UpdateMemoryRecordExpirySpecification",
+    "description": "Grants permission to set or remove the expiry specification of long-term memory records",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "memory",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "adddatasetexamples": {
     "name": "AddDatasetExamples",
     "description": "Grants permission to add examples to a dataset",
@@ -259,7 +274,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "bedrock-agentcore:namespace"
+    ],
     "dependentActions": []
   },
   "batchputgatewayratelimits": {
@@ -290,7 +307,8 @@
       }
     ],
     "conditionKeys": [
-      "bedrock-agentcore:namespace"
+      "bedrock-agentcore:namespace",
+      "bedrock-agentcore:sourceNamespace"
     ],
     "dependentActions": []
   },
@@ -542,6 +560,7 @@
     ],
     "conditionKeys": [
       "bedrock-agentcore:actorId",
+      "bedrock-agentcore:namespaceVariable/${VariableName}",
       "bedrock-agentcore:sessionId"
     ],
     "dependentActions": []
@@ -1211,7 +1230,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "bedrock-agentcore:namespace"
+    ],
     "dependentActions": []
   },
   "deleteoauth2credentialprovider": {
@@ -1901,7 +1922,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "bedrock-agentcore:namespace"
+    ],
     "dependentActions": []
   },
   "getoauth2credentialprovider": {
@@ -2428,6 +2451,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "ingestdata": {
+    "name": "IngestData",
+    "description": "Grants permission to ingest content to generate long-term memory records",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "memory",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "bedrock-agentcore:actorId",
+      "bedrock-agentcore:namespaceVariable/${VariableName}",
+      "bedrock-agentcore:sessionId"
+    ],
+    "dependentActions": []
+  },
   "invokeagentruntime": {
     "name": "InvokeAgentRuntime",
     "description": "Grants permission to invoke an agent runtime endpoint",
@@ -2965,6 +3007,7 @@
     ],
     "conditionKeys": [
       "bedrock-agentcore:namespace",
+      "bedrock-agentcore:namespacePath",
       "bedrock-agentcore:strategyId"
     ],
     "dependentActions": []
@@ -3403,6 +3446,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "resettokenvaultkeymaterial": {
+    "name": "ResetTokenVaultKeyMaterial",
+    "description": "Grants permission to reset a TokenVault's key material to a Service Managed Key after its Customer Managed Key (CMK) has been deleted",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "token-vault",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "retrievememoryrecords": {
     "name": "RetrieveMemoryRecords",
     "description": "Grants permission to retrieve memory records through sematic query",
@@ -3417,6 +3475,7 @@
     ],
     "conditionKeys": [
       "bedrock-agentcore:namespace",
+      "bedrock-agentcore:namespacePath",
       "bedrock-agentcore:strategyId"
     ],
     "dependentActions": []

package/data/actions/ecs.json

@@ -75,6 +75,24 @@
     ],
     "dependentActions": []
   },
+  "associategatewaywithcluster": {
+    "name": "AssociateGatewayWithCluster",
+    "description": "Grants permission to associate an Amazon ECS gateway with a cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ecs:cluster"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "continueservicedeployment": {
     "name": "ContinueServiceDeployment",
     "description": "Grants permission to continue a paused service deployment",
@@ -202,6 +220,28 @@
     ],
     "dependentActions": []
   },
+  "creategateway": {
+    "name": "CreateGateway",
+    "description": "Grants permission to create an Amazon ECS gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "ecs:enable-ecs-managed-tags",
+      "ecs:propagate-tags"
+    ],
+    "dependentActions": []
+  },
   "createservice": {
     "name": "CreateService",
     "description": "Grants permission to run and maintain a desired number of tasks from a specified task definition via service creation",
@@ -373,6 +413,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletegateway": {
+    "name": "DeleteGateway",
+    "description": "Grants permission to delete an Amazon ECS gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteservice": {
     "name": "DeleteService",
     "description": "Grants permission to delete a specified service within a cluster",
@@ -613,6 +670,66 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describegateway": {
+    "name": "DescribeGateway",
+    "description": "Grants permission to describe an Amazon ECS gateway",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describegatewayresources": {
+    "name": "DescribeGatewayResources",
+    "description": "Grants permission to describe the resources associated with an Amazon ECS gateway",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describegatewayroute": {
+    "name": "DescribeGatewayRoute",
+    "description": "Grants permission to describe a route for an Amazon ECS gateway",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "gateway-route",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ecs:gateway"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeservicedeployments": {
     "name": "DescribeServiceDeployments",
     "description": "Grants permission to describe one or more of your service deployments",
@@ -732,6 +849,24 @@
     ],
     "dependentActions": []
   },
+  "disassociategatewayfromcluster": {
+    "name": "DisassociateGatewayFromCluster",
+    "description": "Grants permission to disassociate an Amazon ECS gateway from a cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ecs:cluster"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "discoverpollendpoint": {
     "name": "DiscoverPollEndpoint",
     "description": "Grants permission to get an endpoint for the Amazon ECS agent to poll for updates",
@@ -870,6 +1005,95 @@
     ],
     "dependentActions": []
   },
+  "listgatewayclusterassociations": {
+    "name": "ListGatewayClusterAssociations",
+    "description": "Grants permission to list the cluster associations for Amazon ECS gateways",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ecs:cluster"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ecs:cluster",
+          "ecs:gateway"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listgatewayroutes": {
+    "name": "ListGatewayRoutes",
+    "description": "Grants permission to list the routes for an Amazon ECS gateway",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ecs:cluster"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "gateway",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ecs:gateway"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "gateway-route",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "service",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ecs:cluster",
+          "ecs:service"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listgateways": {
+    "name": "ListGateways",
+    "description": "Grants permission to list Amazon ECS gateways",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ecs:gateway"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listservicedeployments": {
     "name": "ListServiceDeployments",
     "description": "Grants permission to get a list of service deployments for a specified service",
@@ -1301,6 +1525,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "service",
         "required": false,
@@ -1369,6 +1599,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "service",
         "required": false,
@@ -1542,6 +1778,26 @@
     ],
     "dependentActions": []
   },
+  "updategateway": {
+    "name": "UpdateGateway",
+    "description": "Grants permission to modify the parameters of an Amazon ECS gateway",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ecs:enable-ecs-managed-tags",
+      "ecs:propagate-tags"
+    ],
+    "dependentActions": []
+  },
   "updateservice": {
     "name": "UpdateService",
     "description": "Grants permission to modify the parameters of a service",

package/data/actions/transfer.json

@@ -1,4 +1,19 @@
 {
+  "exporthostkey": {
+    "name": "ExportHostKey",
+    "description": "Grants permission to expose the private key material of a host key by storing it in AWS Secrets Manager in the caller's account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "host-key",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createaccess": {
     "name": "CreateAccess",
     "description": "Grants permission to add an access associated with a server",

package/data/actions/workspaces-instances.json

@@ -132,6 +132,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "modifyvolume": {
+    "name": "ModifyVolume",
+    "description": "Grants permission to modify a workspace managed volume in your account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "VolumeId",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add user tags to resources in your account",

package/data/conditionKeys/bedrock-agentcore.json

@@ -134,6 +134,16 @@
     "description": "Filters access by namespace",
     "type": "String"
   },
+  "bedrock-agentcore:namespacepath": {
+    "key": "bedrock-agentcore:namespacePath",
+    "description": "Filters access by the namespace path hierarchy of the memory records in the request",
+    "type": "String"
+  },
+  "bedrock-agentcore:namespacevariable/${variablename}": {
+    "key": "bedrock-agentcore:namespaceVariable/${VariableName}",
+    "description": "Filters access by the value of a custom namespace variable in the request",
+    "type": "String"
+  },
   "bedrock-agentcore:runtimesessionid": {
     "key": "bedrock-agentcore:runtimeSessionId",
     "description": "Filters access by Runtime Session Id",
@@ -149,6 +159,11 @@
     "description": "Filters access by Memory Session Id",
     "type": "String"
   },
+  "bedrock-agentcore:sourcenamespace": {
+    "key": "bedrock-agentcore:sourceNamespace",
+    "description": "Filters access by the source namespace of the memory records in the request",
+    "type": "String"
+  },
   "bedrock-agentcore:strategyid": {
     "key": "bedrock-agentcore:strategyId",
     "description": "Filters access by Memory Strategy Id",

package/data/conditionPatterns.json

@@ -129,6 +129,9 @@
   "ssm": {
     "ssm:resourceTag/.+?": "ssm:resourceTag/${TagKey}"
   },
+  "bedrock-agentcore": {
+    "bedrock-agentcore:namespaceVariable/.+?": "bedrock-agentcore:namespaceVariable/${VariableName}"
+  },
   "connect": {
     "connect:PrimaryAttribute/.+?": "connect:PrimaryAttribute/${PrimaryAttribute}",
     "connect:SearchTag/.+?": "connect:SearchTag/${TagKey}"

package/data/resourceTypes/ecs.json

@@ -56,6 +56,21 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "gateway": {
+    "key": "gateway",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:gateway/${GatewayName}/${GatewayId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "gateway-route": {
+    "key": "gateway-route",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:gateway-route/${GatewayName}/${GatewayId}/${RouteId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:gateway"
+    ]
+  },
   "service": {
     "key": "service",
     "arn": "arn:${Partition}:ecs:${Region}:${Account}:service/${ClusterName}/${ServiceName}",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.21.202610151",
+  "version": "0.21.202610201",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/act-security-labs/iam-data.git"
   },
-  "updatedAt": "2026-10-15T04:47:27.364Z",
+  "updatedAt": "2026-10-20T04:48:21.656Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",