@cloud-copilot/iam-data 0.21.202610201 → 0.21.202610271

package/data/categories/developer-tools.json

@@ -15,8 +15,8 @@
     "codeguru-profiler",
     "codeguru-reviewer",
     "codepipeline",
-    "codestar",
     "codestar-connections",
+    "continuum",
     "dbqms",
     "fis",
     "qdeveloper",

package/data/categories/security-identity-and-compliance.json

@@ -7,6 +7,7 @@
     "acm",
     "acm-pca",
     "artifact",
+    "assurance",
     "auditmanager",
     "clouddirectory",
     "cloudhsm",

package/data/conditionKeys/aoss.json

@@ -4,6 +4,11 @@
     "description": "Filters access by the identifier of the collection",
     "type": "String"
   },
+  "aoss:deletionprotection": {
+    "key": "aoss:DeletionProtection",
+    "description": "Filters access by the deletion protection value set on a collection in the request. Valid values are enabled and disabled",
+    "type": "String"
+  },
   "aoss:collection": {
     "key": "aoss:collection",
     "description": "Filters access by the collection name",

package/data/conditionKeys/assurance.json

@@ -0,0 +1,17 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair of a resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/continuum.json

@@ -0,0 +1,22 @@
+{
+  "continuum:collectorarn": {
+    "key": "continuum:CollectorArn",
+    "description": "Filters access by the ARNs of the collectors in an AssociateCollector or DisassociateCollector request",
+    "type": "ArrayOfARN"
+  },
+  "continuum:environmentarn": {
+    "key": "continuum:EnvironmentArn",
+    "description": "Filters access by the ARN of the environment that requests access to the data of a collector",
+    "type": "ARN"
+  },
+  "continuum:repositoryname": {
+    "key": "continuum:RepositoryName",
+    "description": "Filters access by the repositories, as lowercase owner/repo values, that a CreateEnvironment or UpdateEnvironment request selects as sources",
+    "type": "ArrayOfString"
+  },
+  "continuum:s3bucketname": {
+    "key": "continuum:S3BucketName",
+    "description": "Filters access by the name of the Amazon S3 bucket in a CreateIntegration request",
+    "type": "String"
+  }
+}

package/data/conditionKeys/es.json

@@ -13,5 +13,15 @@
     "key": "aws:TagKeys",
     "description": "Filters access based on the tag keys that are passed in the request",
     "type": "ArrayOfString"
+  },
+  "es:securitygroupids": {
+    "key": "es:SecurityGroupIds",
+    "description": "Filters access by the security group IDs specified in the VPC options of the request",
+    "type": "ArrayOfString"
+  },
+  "es:subnetids": {
+    "key": "es:SubnetIds",
+    "description": "Filters access by the subnet IDs specified in the VPC options of the request",
+    "type": "ArrayOfString"
   }
 }

package/data/conditionKeys/glacier.json

@@ -8,5 +8,10 @@
     "key": "glacier:ResourceTag/",
     "description": "Filters access by a customer-defined tag",
     "type": "String"
+  },
+  "glacier:resourcetag/${tagkey}": {
+    "key": "glacier:ResourceTag/${TagKey}",
+    "description": "Filters access by a customer-defined tag",
+    "type": "String"
   }
 }

package/data/conditionKeys/identitystore.json

@@ -28,5 +28,10 @@
     "key": "identitystore:UserId",
     "description": "Filters access by Identity Store User ID",
     "type": "String"
+  },
+  "identitystore:vpceaccessrequired": {
+    "key": "identitystore:VpceAccessRequired",
+    "description": "Filters access by whether the Identity Store requires access through a VPC endpoint",
+    "type": "Bool"
   }
 }

package/data/conditionKeys/kms.json

@@ -39,6 +39,11 @@
     "description": "Filters access to GenerateDataKeyPair and GenerateDataKeyPairWithoutPlaintext operations based on the value of the KeyPairSpec parameter in the request",
     "type": "String"
   },
+  "kms:encapsulationalgorithm": {
+    "key": "kms:EncapsulationAlgorithm",
+    "description": "Filters access to the Encapsulate and Decapsulate operations based on the value of the EncapsulationAlgorithm parameter in the request",
+    "type": "String"
+  },
   "kms:encryptionalgorithm": {
     "key": "kms:EncryptionAlgorithm",
     "description": "Filters access to encryption operations based on the value of the encryption algorithm in the request",

package/data/conditionKeys/rds-db.json

@@ -1 +1,7 @@
-{}
+{
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the parent RDS DB instance or Aurora DB cluster of the db-user",
+    "type": "String"
+  }
+}

package/data/conditionKeys/secretsmanager.json

@@ -74,6 +74,11 @@
     "description": "Filters access by a tag key and value pair",
     "type": "String"
   },
+  "secretsmanager:resourcetag/${tagkey}": {
+    "key": "secretsmanager:ResourceTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair",
+    "type": "String"
+  },
   "secretsmanager:rotateimmediately": {
     "key": "secretsmanager:RotateImmediately",
     "description": "Filters access by whether the secret is to be rotated immediately",

package/data/conditionPatterns.json

@@ -17,9 +17,6 @@
     "codebuild:secondarySources/.+?.insecureSsl": "codebuild:secondarySources/${sourceIdentifier}.insecureSsl",
     "codebuild:secondarySources/.+?.location": "codebuild:secondarySources/${sourceIdentifier}.location"
   },
-  "iam": {
-    "iam:ResourceTag/.+?": "iam:ResourceTag/${TagKey}"
-  },
   "datapipeline": {
     "datapipeline:Tag/.+?": "datapipeline:Tag/${TagKey}"
   },
@@ -42,6 +39,9 @@
   "elasticloadbalancing": {
     "elasticloadbalancing:ResourceTag/.+?": "elasticloadbalancing:ResourceTag/${TagKey}"
   },
+  "iam": {
+    "iam:ResourceTag/.+?": "iam:ResourceTag/${TagKey}"
+  },
   "iotanalytics": {
     "iotanalytics:ResourceTag/.+?": "iotanalytics:ResourceTag/${TagKey}"
   },
@@ -59,6 +59,9 @@
   "ram": {
     "ram:ResourceTag/.+?": "ram:ResourceTag/${TagKey}"
   },
+  "secretsmanager": {
+    "secretsmanager:ResourceTag/.+?": "secretsmanager:ResourceTag/${TagKey}"
+  },
   "securityhub": {
     "securityhub:ASFFSyntaxPath/.+?": "securityhub:ASFFSyntaxPath/${ASFFSyntaxPath}",
     "securityhub:OCSFSyntaxPath/.+?": "securityhub:OCSFSyntaxPath/${OCSFSyntaxPath}"
@@ -184,6 +187,9 @@
     "s3express:AccessPointTag/.+?": "s3express:AccessPointTag/${TagKey}",
     "s3express:BucketTag/.+?": "s3express:BucketTag/${TagKey}"
   },
+  "glacier": {
+    "glacier:ResourceTag/.+?": "glacier:ResourceTag/${TagKey}"
+  },
   "s3tables": {
     "s3tables:TableBucketTag/.+?": "s3tables:TableBucketTag/${TagKey}"
   },

package/data/resourceTypes/aoss.json

@@ -16,5 +16,19 @@
   "dashboards": {
     "key": "Dashboards",
     "arn": "arn:${Partition}:aoss:${Region}:${Account}:dashboards/default"
+  },
+  "ingestionjob": {
+    "key": "IngestionJob",
+    "arn": "arn:${Partition}:aoss:${Region}:${Account}:collection/${CollectionId}/ingestion-job/${IngestionJobId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "ingestionstream": {
+    "key": "IngestionStream",
+    "arn": "arn:${Partition}:aoss:${Region}:${Account}:collection/${CollectionId}/ingestion-stream/${IngestionStreamId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/assurance.json

@@ -0,0 +1,9 @@
+{
+  "environment": {
+    "key": "environment",
+    "arn": "arn:${Partition}:assurance:${Region}:${Account}:environment/${Environment}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

package/data/resourceTypes/bedrock.json

@@ -244,6 +244,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "retrieval-instruction": {
+    "key": "retrieval-instruction",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:retrieval-instruction/${RetrievalInstructionId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "session": {
     "key": "session",
     "arn": "arn:${Partition}:bedrock:${Region}:${Account}:session/${SessionId}",

package/data/resourceTypes/billing.json

@@ -5,5 +5,9 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "contract": {
+    "key": "contract",
+    "arn": "arn:${Partition}:billing::${Account}:contract/${ContractId}"
   }
 }

package/data/resourceTypes/continuum.json

@@ -0,0 +1,26 @@
+{
+  "code-findings": {
+    "key": "code-findings",
+    "arn": "arn:${Partition}:continuum:${Region}:${Account}:environments/${EnvironmentId}/code-findings/${FindingId}"
+  },
+  "code-issues": {
+    "key": "code-issues",
+    "arn": "arn:${Partition}:continuum:${Region}:${Account}:environments/${EnvironmentId}/code-issues/${IssueId}"
+  },
+  "code-scans": {
+    "key": "code-scans",
+    "arn": "arn:${Partition}:continuum:${Region}:${Account}:environments/${EnvironmentId}/code-scans/${ScanRunId}"
+  },
+  "collectors": {
+    "key": "collectors",
+    "arn": "arn:${Partition}:continuum:${Region}:${Account}:collectors/${CollectorId}"
+  },
+  "environments": {
+    "key": "environments",
+    "arn": "arn:${Partition}:continuum:${Region}:${Account}:environments/${EnvironmentId}"
+  },
+  "integrations": {
+    "key": "integrations",
+    "arn": "arn:${Partition}:continuum:${Region}:${Account}:integrations/${IntegrationId}"
+  }
+}

package/data/resourceTypes/ivs.json

@@ -27,6 +27,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "failover-slate-configuration": {
+    "key": "Failover-Slate-Configuration",
+    "arn": "arn:${Partition}:ivs:${Region}:${Account}:failover-slate-configuration/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "ingest-configuration": {
     "key": "Ingest-Configuration",
     "arn": "arn:${Partition}:ivs:${Region}:${Account}:ingest-configuration/${ResourceId}",

package/data/resourceTypes/network-firewall.json

@@ -20,6 +20,27 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "firewallpolicyv2": {
+    "key": "FirewallPolicyV2",
+    "arn": "arn:${Partition}:network-firewall:${Region}:${Account}:firewall-policy-v2/${Name}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "firewallrulegroup": {
+    "key": "FirewallRuleGroup",
+    "arn": "arn:${Partition}:network-firewall:${Region}:${Account}:firewall-rulegroup/${Name}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "ipsrulegroup": {
+    "key": "IpsRuleGroup",
+    "arn": "arn:${Partition}:network-firewall:${Region}:${Account}:ips-rulegroup/${Name}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "proxy": {
     "key": "Proxy",
     "arn": "arn:${Partition}:network-firewall:${Region}:${Account}:proxy/${Name}",

package/data/resourceTypes/rds-db.json

@@ -1,6 +1,9 @@
 {
   "db-user": {
     "key": "db-user",
-    "arn": "arn:${Partition}:rds-db:${Region}:${Account}:dbuser:${DbiResourceId}/${DbUserName}"
+    "arn": "arn:${Partition}:rds-db:${Region}:${Account}:dbuser:${DbiResourceId}/${DbUserName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/rds.json

@@ -67,6 +67,13 @@
       "rds:db-tag/${TagKey}"
     ]
   },
+  "db-capacity-reservation": {
+    "key": "db-capacity-reservation",
+    "arn": "arn:${Partition}:rds:${Region}:${Account}:db-capacity-reservation:${DBCapacityReservationIdentifier}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "deployment": {
     "key": "deployment",
     "arn": "arn:${Partition}:rds:${Region}:${Account}:deployment:${BlueGreenDeploymentIdentifier}",

package/data/serviceCategories.json

@@ -41,6 +41,7 @@
   "arc-zonal-shift": "management-and-governance",
   "arsenal": "migration-and-transfer",
   "artifact": "security-identity-and-compliance",
+  "assurance": "security-identity-and-compliance",
   "athena": "analytics",
   "auditmanager": "security-identity-and-compliance",
   "autoscaling": "compute",
@@ -99,7 +100,6 @@
   "codeguru-reviewer": "developer-tools",
   "codeguru-security": "security-identity-and-compliance",
   "codepipeline": "developer-tools",
-  "codestar": "developer-tools",
   "codestar-connections": "developer-tools",
   "codestar-notifications": "management-and-governance",
   "codewhisperer": "machine-learning-and-ai",
@@ -114,6 +114,7 @@
   "connect-campaigns": "business-applications",
   "consoleapp": "management-and-governance",
   "consolidatedbilling": "cloud-financial-management",
+  "continuum": "developer-tools",
   "controlcatalog": "management-and-governance",
   "controltower": "management-and-governance",
   "cost-optimization-hub": "cloud-financial-management",

package/data/serviceNames.json

@@ -41,6 +41,7 @@
   "arc-zonal-shift": "Amazon Application Recovery Controller - Zonal Shift",
   "arsenal": "Application Discovery Arsenal",
   "artifact": "AWS Artifact",
+  "assurance": "AWS Assurance",
   "athena": "Amazon Athena",
   "auditmanager": "AWS Audit Manager",
   "autoscaling": "Amazon EC2 Auto Scaling",
@@ -99,7 +100,6 @@
   "codeguru-reviewer": "Amazon CodeGuru Reviewer",
   "codeguru-security": "Amazon CodeGuru Security",
   "codepipeline": "AWS CodePipeline",
-  "codestar": "AWS CodeStar",
   "codestar-connections": "AWS CodeStar Connections",
   "codestar-notifications": "AWS CodeStar Notifications",
   "codewhisperer": "Amazon CodeWhisperer",
@@ -114,6 +114,7 @@
   "connect-campaigns": "Amazon Connect Outbound Campaigns",
   "consoleapp": "AWS Management Console Mobile App",
   "consolidatedbilling": "AWS Consolidated Billing",
+  "continuum": "AWS Continuum",
   "controlcatalog": "AWS Control Catalog",
   "controltower": "AWS Control Tower",
   "cost-optimization-hub": "AWS Cost Optimization Hub",

package/data/services.json

@@ -41,6 +41,7 @@
   "arc-zonal-shift",
   "arsenal",
   "artifact",
+  "assurance",
   "athena",
   "auditmanager",
   "autoscaling",
@@ -99,7 +100,6 @@
   "codeguru-reviewer",
   "codeguru-security",
   "codepipeline",
-  "codestar",
   "codestar-connections",
   "codestar-notifications",
   "codewhisperer",
@@ -114,6 +114,7 @@
   "connect-campaigns",
   "consoleapp",
   "consolidatedbilling",
+  "continuum",
   "controlcatalog",
   "controltower",
   "cost-optimization-hub",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.21.202610201",
+  "version": "0.21.202610271",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/act-security-labs/iam-data.git"
   },
-  "updatedAt": "2026-10-20T04:48:21.656Z",
+  "updatedAt": "2026-10-27T04:50:10.381Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",