@cloud-copilot/iam-data 0.21.202610171 → 0.21.202610241

package/data/categories/developer-tools.json

@@ -17,6 +17,7 @@
     "codepipeline",
     "codestar",
     "codestar-connections",
+    "continuum",
     "dbqms",
     "fis",
     "qdeveloper",

package/data/categories/security-identity-and-compliance.json

@@ -7,6 +7,7 @@
     "acm",
     "acm-pca",
     "artifact",
+    "assurance",
     "auditmanager",
     "clouddirectory",
     "cloudhsm",

package/data/conditionKeys/aoss.json

@@ -4,6 +4,11 @@
     "description": "Filters access by the identifier of the collection",
     "type": "String"
   },
+  "aoss:deletionprotection": {
+    "key": "aoss:DeletionProtection",
+    "description": "Filters access by the deletion protection value set on a collection in the request. Valid values are enabled and disabled",
+    "type": "String"
+  },
   "aoss:collection": {
     "key": "aoss:collection",
     "description": "Filters access by the collection name",

package/data/conditionKeys/assurance.json

@@ -0,0 +1,17 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair of a resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/bedrock-agentcore.json

@@ -134,6 +134,16 @@
     "description": "Filters access by namespace",
     "type": "String"
   },
+  "bedrock-agentcore:namespacepath": {
+    "key": "bedrock-agentcore:namespacePath",
+    "description": "Filters access by the namespace path hierarchy of the memory records in the request",
+    "type": "String"
+  },
+  "bedrock-agentcore:namespacevariable/${variablename}": {
+    "key": "bedrock-agentcore:namespaceVariable/${VariableName}",
+    "description": "Filters access by the value of a custom namespace variable in the request",
+    "type": "String"
+  },
   "bedrock-agentcore:runtimesessionid": {
     "key": "bedrock-agentcore:runtimeSessionId",
     "description": "Filters access by Runtime Session Id",
@@ -149,6 +159,11 @@
     "description": "Filters access by Memory Session Id",
     "type": "String"
   },
+  "bedrock-agentcore:sourcenamespace": {
+    "key": "bedrock-agentcore:sourceNamespace",
+    "description": "Filters access by the source namespace of the memory records in the request",
+    "type": "String"
+  },
   "bedrock-agentcore:strategyid": {
     "key": "bedrock-agentcore:strategyId",
     "description": "Filters access by Memory Strategy Id",

package/data/conditionKeys/continuum.json

@@ -0,0 +1,22 @@
+{
+  "continuum:collectorarn": {
+    "key": "continuum:CollectorArn",
+    "description": "Filters access by the ARNs of the collectors in an AssociateCollector or DisassociateCollector request",
+    "type": "ArrayOfARN"
+  },
+  "continuum:environmentarn": {
+    "key": "continuum:EnvironmentArn",
+    "description": "Filters access by the ARN of the environment that requests access to the data of a collector",
+    "type": "ARN"
+  },
+  "continuum:repositoryname": {
+    "key": "continuum:RepositoryName",
+    "description": "Filters access by the repositories, as lowercase owner/repo values, that a CreateEnvironment or UpdateEnvironment request selects as sources",
+    "type": "ArrayOfString"
+  },
+  "continuum:s3bucketname": {
+    "key": "continuum:S3BucketName",
+    "description": "Filters access by the name of the Amazon S3 bucket in a CreateIntegration request",
+    "type": "String"
+  }
+}

package/data/conditionKeys/glacier.json

@@ -8,5 +8,10 @@
     "key": "glacier:ResourceTag/",
     "description": "Filters access by a customer-defined tag",
     "type": "String"
+  },
+  "glacier:resourcetag/${tagkey}": {
+    "key": "glacier:ResourceTag/${TagKey}",
+    "description": "Filters access by a customer-defined tag",
+    "type": "String"
   }
 }

package/data/conditionKeys/identitystore.json

@@ -28,5 +28,10 @@
     "key": "identitystore:UserId",
     "description": "Filters access by Identity Store User ID",
     "type": "String"
+  },
+  "identitystore:vpceaccessrequired": {
+    "key": "identitystore:VpceAccessRequired",
+    "description": "Filters access by whether the Identity Store requires access through a VPC endpoint",
+    "type": "Bool"
   }
 }

package/data/conditionKeys/kms.json

@@ -39,6 +39,11 @@
     "description": "Filters access to GenerateDataKeyPair and GenerateDataKeyPairWithoutPlaintext operations based on the value of the KeyPairSpec parameter in the request",
     "type": "String"
   },
+  "kms:encapsulationalgorithm": {
+    "key": "kms:EncapsulationAlgorithm",
+    "description": "Filters access to the Encapsulate and Decapsulate operations based on the value of the EncapsulationAlgorithm parameter in the request",
+    "type": "String"
+  },
   "kms:encryptionalgorithm": {
     "key": "kms:EncryptionAlgorithm",
     "description": "Filters access to encryption operations based on the value of the encryption algorithm in the request",

package/data/conditionKeys/rds-db.json

@@ -1 +1,7 @@
-{}
+{
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the parent RDS DB instance or Aurora DB cluster of the db-user",
+    "type": "String"
+  }
+}

package/data/conditionKeys/secretsmanager.json

@@ -74,6 +74,11 @@
     "description": "Filters access by a tag key and value pair",
     "type": "String"
   },
+  "secretsmanager:resourcetag/${tagkey}": {
+    "key": "secretsmanager:ResourceTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair",
+    "type": "String"
+  },
   "secretsmanager:rotateimmediately": {
     "key": "secretsmanager:RotateImmediately",
     "description": "Filters access by whether the secret is to be rotated immediately",

package/data/conditionPatterns.json

@@ -59,6 +59,9 @@
   "ram": {
     "ram:ResourceTag/.+?": "ram:ResourceTag/${TagKey}"
   },
+  "secretsmanager": {
+    "secretsmanager:ResourceTag/.+?": "secretsmanager:ResourceTag/${TagKey}"
+  },
   "securityhub": {
     "securityhub:ASFFSyntaxPath/.+?": "securityhub:ASFFSyntaxPath/${ASFFSyntaxPath}",
     "securityhub:OCSFSyntaxPath/.+?": "securityhub:OCSFSyntaxPath/${OCSFSyntaxPath}"
@@ -129,6 +132,9 @@
   "ssm": {
     "ssm:resourceTag/.+?": "ssm:resourceTag/${TagKey}"
   },
+  "bedrock-agentcore": {
+    "bedrock-agentcore:namespaceVariable/.+?": "bedrock-agentcore:namespaceVariable/${VariableName}"
+  },
   "connect": {
     "connect:PrimaryAttribute/.+?": "connect:PrimaryAttribute/${PrimaryAttribute}",
     "connect:SearchTag/.+?": "connect:SearchTag/${TagKey}"
@@ -181,6 +187,9 @@
     "s3express:AccessPointTag/.+?": "s3express:AccessPointTag/${TagKey}",
     "s3express:BucketTag/.+?": "s3express:BucketTag/${TagKey}"
   },
+  "glacier": {
+    "glacier:ResourceTag/.+?": "glacier:ResourceTag/${TagKey}"
+  },
   "s3tables": {
     "s3tables:TableBucketTag/.+?": "s3tables:TableBucketTag/${TagKey}"
   },

package/data/resourceTypes/aoss.json

@@ -16,5 +16,19 @@
   "dashboards": {
     "key": "Dashboards",
     "arn": "arn:${Partition}:aoss:${Region}:${Account}:dashboards/default"
+  },
+  "ingestionjob": {
+    "key": "IngestionJob",
+    "arn": "arn:${Partition}:aoss:${Region}:${Account}:collection/${CollectionId}/ingestion-job/${IngestionJobId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "ingestionstream": {
+    "key": "IngestionStream",
+    "arn": "arn:${Partition}:aoss:${Region}:${Account}:collection/${CollectionId}/ingestion-stream/${IngestionStreamId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/assurance.json

@@ -0,0 +1,9 @@
+{
+  "environment": {
+    "key": "environment",
+    "arn": "arn:${Partition}:assurance:${Region}:${Account}:environment/${Environment}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

package/data/resourceTypes/bedrock.json

@@ -244,6 +244,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "retrieval-instruction": {
+    "key": "retrieval-instruction",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:retrieval-instruction/${RetrievalInstructionId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "session": {
     "key": "session",
     "arn": "arn:${Partition}:bedrock:${Region}:${Account}:session/${SessionId}",

package/data/resourceTypes/billing.json

@@ -5,5 +5,9 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "contract": {
+    "key": "contract",
+    "arn": "arn:${Partition}:billing::${Account}:contract/${ContractId}"
   }
 }

package/data/resourceTypes/continuum.json

@@ -0,0 +1,26 @@
+{
+  "code-findings": {
+    "key": "code-findings",
+    "arn": "arn:${Partition}:continuum:${Region}:${Account}:environments/${EnvironmentId}/code-findings/${FindingId}"
+  },
+  "code-issues": {
+    "key": "code-issues",
+    "arn": "arn:${Partition}:continuum:${Region}:${Account}:environments/${EnvironmentId}/code-issues/${IssueId}"
+  },
+  "code-scans": {
+    "key": "code-scans",
+    "arn": "arn:${Partition}:continuum:${Region}:${Account}:environments/${EnvironmentId}/code-scans/${ScanRunId}"
+  },
+  "collectors": {
+    "key": "collectors",
+    "arn": "arn:${Partition}:continuum:${Region}:${Account}:collectors/${CollectorId}"
+  },
+  "environments": {
+    "key": "environments",
+    "arn": "arn:${Partition}:continuum:${Region}:${Account}:environments/${EnvironmentId}"
+  },
+  "integrations": {
+    "key": "integrations",
+    "arn": "arn:${Partition}:continuum:${Region}:${Account}:integrations/${IntegrationId}"
+  }
+}

package/data/resourceTypes/ecs.json

@@ -56,6 +56,21 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "gateway": {
+    "key": "gateway",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:gateway/${GatewayName}/${GatewayId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "gateway-route": {
+    "key": "gateway-route",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:gateway-route/${GatewayName}/${GatewayId}/${RouteId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:gateway"
+    ]
+  },
   "service": {
     "key": "service",
     "arn": "arn:${Partition}:ecs:${Region}:${Account}:service/${ClusterName}/${ServiceName}",

package/data/resourceTypes/network-firewall.json

@@ -20,6 +20,27 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "firewallpolicyv2": {
+    "key": "FirewallPolicyV2",
+    "arn": "arn:${Partition}:network-firewall:${Region}:${Account}:firewall-policy-v2/${Name}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "firewallrulegroup": {
+    "key": "FirewallRuleGroup",
+    "arn": "arn:${Partition}:network-firewall:${Region}:${Account}:firewall-rulegroup/${Name}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "ipsrulegroup": {
+    "key": "IpsRuleGroup",
+    "arn": "arn:${Partition}:network-firewall:${Region}:${Account}:ips-rulegroup/${Name}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "proxy": {
     "key": "Proxy",
     "arn": "arn:${Partition}:network-firewall:${Region}:${Account}:proxy/${Name}",

package/data/resourceTypes/rds-db.json

@@ -1,6 +1,9 @@
 {
   "db-user": {
     "key": "db-user",
-    "arn": "arn:${Partition}:rds-db:${Region}:${Account}:dbuser:${DbiResourceId}/${DbUserName}"
+    "arn": "arn:${Partition}:rds-db:${Region}:${Account}:dbuser:${DbiResourceId}/${DbUserName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/rds.json

@@ -67,6 +67,13 @@
       "rds:db-tag/${TagKey}"
     ]
   },
+  "db-capacity-reservation": {
+    "key": "db-capacity-reservation",
+    "arn": "arn:${Partition}:rds:${Region}:${Account}:db-capacity-reservation:${DBCapacityReservationIdentifier}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "deployment": {
     "key": "deployment",
     "arn": "arn:${Partition}:rds:${Region}:${Account}:deployment:${BlueGreenDeploymentIdentifier}",

package/data/serviceCategories.json

@@ -41,6 +41,7 @@
   "arc-zonal-shift": "management-and-governance",
   "arsenal": "migration-and-transfer",
   "artifact": "security-identity-and-compliance",
+  "assurance": "security-identity-and-compliance",
   "athena": "analytics",
   "auditmanager": "security-identity-and-compliance",
   "autoscaling": "compute",
@@ -114,6 +115,7 @@
   "connect-campaigns": "business-applications",
   "consoleapp": "management-and-governance",
   "consolidatedbilling": "cloud-financial-management",
+  "continuum": "developer-tools",
   "controlcatalog": "management-and-governance",
   "controltower": "management-and-governance",
   "cost-optimization-hub": "cloud-financial-management",

package/data/serviceNames.json

@@ -41,6 +41,7 @@
   "arc-zonal-shift": "Amazon Application Recovery Controller - Zonal Shift",
   "arsenal": "Application Discovery Arsenal",
   "artifact": "AWS Artifact",
+  "assurance": "AWS Assurance",
   "athena": "Amazon Athena",
   "auditmanager": "AWS Audit Manager",
   "autoscaling": "Amazon EC2 Auto Scaling",
@@ -114,6 +115,7 @@
   "connect-campaigns": "Amazon Connect Outbound Campaigns",
   "consoleapp": "AWS Management Console Mobile App",
   "consolidatedbilling": "AWS Consolidated Billing",
+  "continuum": "AWS Continuum",
   "controlcatalog": "AWS Control Catalog",
   "controltower": "AWS Control Tower",
   "cost-optimization-hub": "AWS Cost Optimization Hub",

package/data/services.json

@@ -41,6 +41,7 @@
   "arc-zonal-shift",
   "arsenal",
   "artifact",
+  "assurance",
   "athena",
   "auditmanager",
   "autoscaling",
@@ -114,6 +115,7 @@
   "connect-campaigns",
   "consoleapp",
   "consolidatedbilling",
+  "continuum",
   "controlcatalog",
   "controltower",
   "cost-optimization-hub",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.21.202610171",
+  "version": "0.21.202610241",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/act-security-labs/iam-data.git"
   },
-  "updatedAt": "2026-10-17T04:45:46.111Z",
+  "updatedAt": "2026-10-24T04:47:12.352Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",