@cloud-copilot/iam-data 0.21.202610241 → 0.22.202610271

package/data/actions/datasync.json

@@ -50,7 +50,14 @@
     "name": "CreateLocationAzureBlob",
     "description": "Grants permission to create an endpoint for a Microsoft Azure Blob Storage container",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "agent",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -116,7 +123,14 @@
     "name": "CreateLocationHdfs",
     "description": "Grants permission to create an endpoint for an Amazon Hdfs",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "agent",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -127,7 +141,14 @@
     "name": "CreateLocationNfs",
     "description": "Grants permission to create an endpoint for a NFS file system",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "agent",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -138,7 +159,14 @@
     "name": "CreateLocationObjectStorage",
     "description": "Grants permission to create an endpoint for a self-managed object storage bucket",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "agent",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -149,7 +177,14 @@
     "name": "CreateLocationS3",
     "description": "Grants permission to create an endpoint for an Amazon S3 bucket",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "agent",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -160,7 +195,14 @@
     "name": "CreateLocationSmb",
     "description": "Grants permission to create an endpoint for an SMB file system",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "agent",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -812,6 +854,12 @@
     "description": "Grants permission to update an Azure Blob Storage sync location",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "agent",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "location",
         "required": true,
@@ -902,6 +950,12 @@
     "description": "Grants permission to update an HDFS sync Location",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "agent",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "location",
         "required": true,
@@ -917,6 +971,12 @@
     "description": "Grants permission to update an NFS sync Location",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "agent",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "location",
         "required": true,
@@ -932,6 +992,12 @@
     "description": "Grants permission to update a self-managed object storage server location",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "agent",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "location",
         "required": true,
@@ -962,6 +1028,12 @@
     "description": "Grants permission to update a SMB sync location",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "agent",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "location",
         "required": true,

package/data/actions/ecr.json

@@ -314,6 +314,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describereplicationbackfillresults": {
+    "name": "DescribeReplicationBackfillResults",
+    "description": "Grants permission to retrieve the results of a replication backfill for the registry",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describerepositories": {
     "name": "DescribeRepositories",
     "description": "Grants permission to describe image repositories in a registry",
@@ -477,6 +485,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listreplicationbackfills": {
+    "name": "ListReplicationBackfills",
+    "description": "Grants permission to list the replication backfills for the registry",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list the tags for an Amazon ECR resource",
@@ -650,6 +666,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startreplicationbackfill": {
+    "name": "StartReplicationBackfill",
+    "description": "Grants permission to start a replication backfill to a destination region for the registry",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopreplicationbackfill": {
+    "name": "StopReplicationBackfill",
+    "description": "Grants permission to stop an in-progress replication backfill for the registry",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag an Amazon ECR resource",

package/data/actions/es.json

@@ -48,6 +48,21 @@
     ],
     "dependentActions": []
   },
+  "addreplicationpeer": {
+    "name": "AddReplicationPeer",
+    "description": "Grants permission to pair two OpenSearch Service domains for replication. Requires the permission on both domains",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "addtags": {
     "name": "AddTags",
     "description": "Grants permission to attach resource tags to an OpenSearch Service domain, data source, or application",
@@ -176,6 +191,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "comparedomainconfiguration": {
+    "name": "CompareDomainConfiguration",
+    "description": "Grants permission to compare the configuration of two OpenSearch Service domains. Requires the permission on both domains",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createapplication": {
     "name": "CreateApplication",
     "description": "Grants permission to create an OpenSearch Application",
@@ -201,7 +231,9 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "es:SecurityGroupIds",
+      "es:SubnetIds"
     ],
     "dependentActions": []
   },
@@ -219,7 +251,9 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "es:SecurityGroupIds",
+      "es:SubnetIds"
     ],
     "dependentActions": []
   },
@@ -566,6 +600,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describedomainreplication": {
+    "name": "DescribeDomainReplication",
+    "description": "Grants permission to retrieve the replication relationship details for an OpenSearch Service domain",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describedomains": {
     "name": "DescribeDomains",
     "description": "Grants permission to view a description of the domain configuration for up to five specified OpenSearch Service domains",
@@ -902,6 +951,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "failoverreplication": {
+    "name": "FailoverReplication",
+    "description": "Grants permission to promote the secondary domain of a replication relationship when the primary is unavailable. Requires the permission on both domains",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getapplication": {
     "name": "GetApplication",
     "description": "Grants permission to get information about an OpenSearch Application",
@@ -1409,6 +1473,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "removereplicationpeer": {
+    "name": "RemoveReplicationPeer",
+    "description": "Grants permission to end the replication relationship between two OpenSearch Service domains. Requires the permission on both domains",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "removetags": {
     "name": "RemoveTags",
     "description": "Grants permission to remove resource tags from an OpenSearch Service domain, data source, or application",
@@ -1536,6 +1615,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "switchoverreplication": {
+    "name": "SwitchoverReplication",
+    "description": "Grants permission to swap the primary and secondary roles of a replication relationship between two OpenSearch Service domains without data loss. Requires the permission on both domains",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateapplication": {
     "name": "UpdateApplication",
     "description": "Grants permission to update an OpenSearch Application",

package/data/actions/ivs.json

@@ -104,6 +104,24 @@
     ],
     "dependentActions": []
   },
+  "createfailoverslateconfiguration": {
+    "name": "CreateFailoverSlateConfiguration",
+    "description": "Grants permission to create a new failover slate configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Failover-Slate-Configuration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createingestconfiguration": {
     "name": "CreateIngestConfiguration",
     "description": "Grants permission to create a new ingest configuration",
@@ -281,6 +299,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletefailoverslateconfiguration": {
+    "name": "DeleteFailoverSlateConfiguration",
+    "description": "Grants permission to delete a failover slate configuration for the specified ARN",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Failover-Slate-Configuration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteingestconfiguration": {
     "name": "DeleteIngestConfiguration",
     "description": "Grants permission to delete an ingest configuration for the specified ARN",
@@ -476,6 +509,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getfailoverslateconfiguration": {
+    "name": "GetFailoverSlateConfiguration",
+    "description": "Grants permission to get the failover slate configuration for the specified ARN",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Failover-Slate-Configuration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getingestconfiguration": {
     "name": "GetIngestConfiguration",
     "description": "Grants permission to get the ingest configuration for the specified ARN",
@@ -759,6 +807,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listfailoverslateconfigurations": {
+    "name": "ListFailoverSlateConfigurations",
+    "description": "Grants permission to get summary information about failover slate configurations",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Failover-Slate-Configuration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listingestconfigurations": {
     "name": "ListIngestConfigurations",
     "description": "Grants permission to get summary information about ingest configurations",
@@ -976,6 +1039,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "Failover-Slate-Configuration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "Ingest-Configuration",
         "required": false,
@@ -1197,6 +1266,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "Failover-Slate-Configuration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "Ingest-Configuration",
         "required": false,
@@ -1281,6 +1356,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "Failover-Slate-Configuration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "Ingest-Configuration",
         "required": false,
@@ -1358,6 +1439,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatefailoverslateconfiguration": {
+    "name": "UpdateFailoverSlateConfiguration",
+    "description": "Grants permission to update a failover slate configuration for the specified ARN",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Failover-Slate-Configuration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateingestconfiguration": {
     "name": "UpdateIngestConfiguration",
     "description": "Grants permission to update ingest configuration for a specified ARN",

package/data/actions/signin.json

@@ -33,7 +33,7 @@
   },
   "authorizeoauth2access": {
     "name": "AuthorizeOAuth2Access",
-    "description": "Grants permission to authenticate through a browser and obtain an OAuth 2.0 authorization code for credential exchange",
+    "description": "Grants permission to authenticate through a browser and obtain an OAuth 2 authorization code for credential exchange",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -75,7 +75,7 @@
   },
   "createoauth2publicclient": {
     "name": "CreateOAuth2PublicClient",
-    "description": "Grants permission to dynamically register an OAuth 2.0 public client for use with AWS Sign-In",
+    "description": "Grants permission to dynamically register an OAuth 2 public client for use with AWS Sign-In",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -92,7 +92,7 @@
   },
   "createoauth2token": {
     "name": "CreateOAuth2Token",
-    "description": "Grants permission to exchange an authorization code for OAuth 2.0 access token and refresh token that can be used to access AWS services from developer tools and applications",
+    "description": "Grants permission to exchange an authorization code, refresh token, SigV4 credentials, or JWT for OAuth 2 access token that can be used to access AWS services from developer tools and applications",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -180,7 +180,7 @@
   },
   "introspectoauth2token": {
     "name": "IntrospectOAuth2Token",
-    "description": "Grants permission to inspect the metadata and active state of an OAuth 2.0 access token or refresh token",
+    "description": "Grants permission to inspect the metadata and active state of an OAuth 2 access token or refresh token",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -242,7 +242,7 @@
   },
   "revokeoauth2token": {
     "name": "RevokeOAuth2Token",
-    "description": "Grants permission to revoke an OAuth 2.0 refresh token and its associated refresh tokens",
+    "description": "Grants permission to revoke an OAuth 2 refresh token and its associated refresh tokens",
     "accessLevel": "Write",
     "resourceTypes": [
       {

package/data/actions/xray.json

@@ -7,6 +7,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "callwithbearertoken": {
+    "name": "CallWithBearerToken",
+    "description": "Grants permission to authenticate requests to AWS X-Ray using a bearer token",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdistincttracegraphs": {
     "name": "GetDistinctTraceGraphs",
     "description": "Grants permission to retrieve distinct service graphs for one or more specific trace IDs",

package/data/categories/developer-tools.json

@@ -15,7 +15,6 @@
     "codeguru-profiler",
     "codeguru-reviewer",
     "codepipeline",
-    "codestar",
     "codestar-connections",
     "continuum",
     "dbqms",

package/data/conditionKeys/es.json

@@ -13,5 +13,15 @@
     "key": "aws:TagKeys",
     "description": "Filters access based on the tag keys that are passed in the request",
     "type": "ArrayOfString"
+  },
+  "es:securitygroupids": {
+    "key": "es:SecurityGroupIds",
+    "description": "Filters access by the security group IDs specified in the VPC options of the request",
+    "type": "ArrayOfString"
+  },
+  "es:subnetids": {
+    "key": "es:SubnetIds",
+    "description": "Filters access by the subnet IDs specified in the VPC options of the request",
+    "type": "ArrayOfString"
   }
 }

package/data/conditionPatterns.json

@@ -17,9 +17,6 @@
     "codebuild:secondarySources/.+?.insecureSsl": "codebuild:secondarySources/${sourceIdentifier}.insecureSsl",
     "codebuild:secondarySources/.+?.location": "codebuild:secondarySources/${sourceIdentifier}.location"
   },
-  "iam": {
-    "iam:ResourceTag/.+?": "iam:ResourceTag/${TagKey}"
-  },
   "datapipeline": {
     "datapipeline:Tag/.+?": "datapipeline:Tag/${TagKey}"
   },
@@ -42,6 +39,9 @@
   "elasticloadbalancing": {
     "elasticloadbalancing:ResourceTag/.+?": "elasticloadbalancing:ResourceTag/${TagKey}"
   },
+  "iam": {
+    "iam:ResourceTag/.+?": "iam:ResourceTag/${TagKey}"
+  },
   "iotanalytics": {
     "iotanalytics:ResourceTag/.+?": "iotanalytics:ResourceTag/${TagKey}"
   },

package/data/resourceTypes/ivs.json

@@ -27,6 +27,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "failover-slate-configuration": {
+    "key": "Failover-Slate-Configuration",
+    "arn": "arn:${Partition}:ivs:${Region}:${Account}:failover-slate-configuration/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "ingest-configuration": {
     "key": "Ingest-Configuration",
     "arn": "arn:${Partition}:ivs:${Region}:${Account}:ingest-configuration/${ResourceId}",

package/data/serviceCategories.json

@@ -100,7 +100,6 @@
   "codeguru-reviewer": "developer-tools",
   "codeguru-security": "security-identity-and-compliance",
   "codepipeline": "developer-tools",
-  "codestar": "developer-tools",
   "codestar-connections": "developer-tools",
   "codestar-notifications": "management-and-governance",
   "codewhisperer": "machine-learning-and-ai",

package/data/serviceNames.json

@@ -100,7 +100,6 @@
   "codeguru-reviewer": "Amazon CodeGuru Reviewer",
   "codeguru-security": "Amazon CodeGuru Security",
   "codepipeline": "AWS CodePipeline",
-  "codestar": "AWS CodeStar",
   "codestar-connections": "AWS CodeStar Connections",
   "codestar-notifications": "AWS CodeStar Notifications",
   "codewhisperer": "Amazon CodeWhisperer",

package/data/services.json

@@ -100,7 +100,6 @@
   "codeguru-reviewer",
   "codeguru-security",
   "codepipeline",
-  "codestar",
   "codestar-connections",
   "codestar-notifications",
   "codewhisperer",

package/dist/cjs/actions.d.ts

@@ -1,10 +1,16 @@
-interface ActionResourceType {
+/**
+ * Resource-type requirements and related action metadata for an IAM action.
+ */
+export interface ActionResourceType {
     name: string;
     required: boolean;
     conditionKeys: string[];
     dependentActions: string[];
 }
-interface Action {
+/**
+ * IAM action metadata returned by the public action-data API.
+ */
+export interface Action {
     name: string;
     description: string;
     accessLevel: 'Read' | 'Write' | 'List' | 'Tagging';
@@ -12,6 +18,10 @@ interface Action {
     conditionKeys: string[];
     dependentActions: string[];
     isWildcardOnly: boolean;
+    /**
+     * Present only when AWS rejects unsigned requests for this action regardless of resource policy.
+     */
+    blockAnon?: true;
 }
 /**
  * Get all actions for a service
@@ -37,5 +47,4 @@ export declare function iamActionExists(serviceKey: string, actionKey: string):
  * @returns the details for the action
  */
 export declare function iamActionDetails(serviceKey: string, actionKey: string): Promise<Action>;
-export {};
 //# sourceMappingURL=actions.d.ts.map

package/dist/cjs/actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/actions.ts"],"names":[],"mappings":"AAEA,UAAU,kBAAkB;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;IACjB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAC3B;AAED,UAAU,MAAM;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IAClD,aAAa,EAAE,kBAAkB,EAAE,CAAA;IACnC,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,cAAc,EAAE,OAAO,CAAA;CACxB;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAGhF;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG7F;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAW7F"}
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/actions.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;IACjB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IAClD,aAAa,EAAE,kBAAkB,EAAE,CAAA;IACnC,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,cAAc,EAAE,OAAO,CAAA;IACvB;;OAEG;IACH,SAAS,CAAC,EAAE,IAAI,CAAA;CACjB;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAGhF;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG7F;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAW7F"}

package/dist/cjs/actions.js.map

@@ -1 +1 @@
-{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/actions.ts"],"names":[],"mappings":";;AAyBA,oDAGC;AASD,0CAGC;AAUD,4CAWC;AA7DD,uCAA0C;AAmB1C;;;;;GAKG;AACI,KAAK,UAAU,oBAAoB,CAAC,UAAkB;IAC3D,MAAM,IAAI,GAAG,MAAM,IAAA,wBAAc,EAAyB,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IACnF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;AACzD,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,eAAe,CAAC,UAAkB,EAAE,SAAiB;IACzE,MAAM,IAAI,GAAG,MAAM,IAAA,wBAAc,EAAyB,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IACnF,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAA;AACxC,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,gBAAgB,CAAC,UAAkB,EAAE,SAAiB;IAC1E,MAAM,IAAI,GAAG,MAAM,IAAA,wBAAc,EAAyB,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IACnF,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAA;IAChD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,+BAA+B,UAAU,EAAE,CAAC,CAAA;IACjF,CAAC;IAED,OAAO;QACL,GAAG,UAAU;QACb,cAAc,EAAE,UAAU,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;KACtD,CAAA;AACH,CAAC"}
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/actions.ts"],"names":[],"mappings":";;AAmCA,oDAGC;AASD,0CAGC;AAUD,4CAWC;AAvED,uCAA0C;AA6B1C;;;;;GAKG;AACI,KAAK,UAAU,oBAAoB,CAAC,UAAkB;IAC3D,MAAM,IAAI,GAAG,MAAM,IAAA,wBAAc,EAAyB,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IACnF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;AACzD,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,eAAe,CAAC,UAAkB,EAAE,SAAiB;IACzE,MAAM,IAAI,GAAG,MAAM,IAAA,wBAAc,EAAyB,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IACnF,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAA;AACxC,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,gBAAgB,CAAC,UAAkB,EAAE,SAAiB;IAC1E,MAAM,IAAI,GAAG,MAAM,IAAA,wBAAc,EAAyB,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IACnF,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAA;IAChD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,+BAA+B,UAAU,EAAE,CAAC,CAAA;IACjF,CAAC;IAED,OAAO;QACL,GAAG,UAAU;QACb,cAAc,EAAE,UAAU,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;KACtD,CAAA;AACH,CAAC"}

package/dist/esm/actions.d.ts

@@ -1,10 +1,16 @@
-interface ActionResourceType {
+/**
+ * Resource-type requirements and related action metadata for an IAM action.
+ */
+export interface ActionResourceType {
     name: string;
     required: boolean;
     conditionKeys: string[];
     dependentActions: string[];
 }
-interface Action {
+/**
+ * IAM action metadata returned by the public action-data API.
+ */
+export interface Action {
     name: string;
     description: string;
     accessLevel: 'Read' | 'Write' | 'List' | 'Tagging';
@@ -12,6 +18,10 @@ interface Action {
     conditionKeys: string[];
     dependentActions: string[];
     isWildcardOnly: boolean;
+    /**
+     * Present only when AWS rejects unsigned requests for this action regardless of resource policy.
+     */
+    blockAnon?: true;
 }
 /**
  * Get all actions for a service
@@ -37,5 +47,4 @@ export declare function iamActionExists(serviceKey: string, actionKey: string):
  * @returns the details for the action
  */
 export declare function iamActionDetails(serviceKey: string, actionKey: string): Promise<Action>;
-export {};
 //# sourceMappingURL=actions.d.ts.map

package/dist/esm/actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/actions.ts"],"names":[],"mappings":"AAEA,UAAU,kBAAkB;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;IACjB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAC3B;AAED,UAAU,MAAM;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IAClD,aAAa,EAAE,kBAAkB,EAAE,CAAA;IACnC,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,cAAc,EAAE,OAAO,CAAA;CACxB;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAGhF;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG7F;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAW7F"}
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/actions.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;IACjB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;IAClD,aAAa,EAAE,kBAAkB,EAAE,CAAA;IACnC,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,cAAc,EAAE,OAAO,CAAA;IACvB;;OAEG;IACH,SAAS,CAAC,EAAE,IAAI,CAAA;CACjB;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAGhF;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG7F;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAW7F"}

package/dist/esm/actions.js.map

@@ -1 +1 @@
-{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/actions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAmB1C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAAkB;IAC3D,MAAM,IAAI,GAAG,MAAM,cAAc,CAAyB,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IACnF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAkB,EAAE,SAAiB;IACzE,MAAM,IAAI,GAAG,MAAM,cAAc,CAAyB,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IACnF,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAA;AACxC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAkB,EAAE,SAAiB;IAC1E,MAAM,IAAI,GAAG,MAAM,cAAc,CAAyB,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IACnF,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAA;IAChD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,+BAA+B,UAAU,EAAE,CAAC,CAAA;IACjF,CAAC;IAED,OAAO;QACL,GAAG,UAAU;QACb,cAAc,EAAE,UAAU,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;KACtD,CAAA;AACH,CAAC"}
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/actions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AA6B1C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAAkB;IAC3D,MAAM,IAAI,GAAG,MAAM,cAAc,CAAyB,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IACnF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAkB,EAAE,SAAiB;IACzE,MAAM,IAAI,GAAG,MAAM,cAAc,CAAyB,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IACnF,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAA;AACxC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAkB,EAAE,SAAiB;IAC1E,MAAM,IAAI,GAAG,MAAM,cAAc,CAAyB,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IACnF,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAA;IAChD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,+BAA+B,UAAU,EAAE,CAAC,CAAA;IACjF,CAAC;IAED,OAAO;QACL,GAAG,UAAU;QACb,cAAc,EAAE,UAAU,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;KACtD,CAAA;AACH,CAAC"}

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.21.202610241",
+  "version": "0.22.202610271",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/act-security-labs/iam-data.git"
   },
-  "updatedAt": "2026-10-24T04:47:12.352Z",
+  "updatedAt": "2026-10-27T04:50:10.381Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",

package/data/actions/codestar.json

@@ -1,337 +0,0 @@
-{
-  "deleteextendedaccess": {
-    "name": "DeleteExtendedAccess",
-    "description": "Grants permission to extended delete APIs",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "project",
-        "required": true,
-        "conditionKeys": [
-          "aws:ResourceTag/${TagKey}"
-        ],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getextendedaccess": {
-    "name": "GetExtendedAccess",
-    "description": "Grants permission to extended read APIs",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "project",
-        "required": true,
-        "conditionKeys": [
-          "aws:ResourceTag/${TagKey}"
-        ],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "putextendedaccess": {
-    "name": "PutExtendedAccess",
-    "description": "Grants permission to extended write APIs",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "project",
-        "required": true,
-        "conditionKeys": [
-          "aws:ResourceTag/${TagKey}"
-        ],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "associateteammember": {
-    "name": "AssociateTeamMember",
-    "description": "Grants permission to add a user to the team for an AWS CodeStar project",
-    "accessLevel": "Permissions management, Write",
-    "resourceTypes": [
-      {
-        "name": "project",
-        "required": true,
-        "conditionKeys": [
-          "aws:ResourceTag/${TagKey}"
-        ],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "createproject": {
-    "name": "CreateProject",
-    "description": "Grants permission to create a project with minimal structure, customer policies, and no resources",
-    "accessLevel": "Permissions management, Write",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
-    "dependentActions": []
-  },
-  "createuserprofile": {
-    "name": "CreateUserProfile",
-    "description": "Grants permission to create a profile for a user that includes user preferences, display name, and email",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "user",
-        "required": true,
-        "conditionKeys": [
-          "iam:ResourceTag/${TagKey}"
-        ],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "deleteproject": {
-    "name": "DeleteProject",
-    "description": "Grants permission to delete a project, including project resources. Does not delete users associated with the project, but does delete the IAM roles that allowed access to the project",
-    "accessLevel": "Permissions management, Write",
-    "resourceTypes": [
-      {
-        "name": "project",
-        "required": true,
-        "conditionKeys": [
-          "aws:ResourceTag/${TagKey}"
-        ],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "deleteuserprofile": {
-    "name": "DeleteUserProfile",
-    "description": "Grants permission to delete a user profile in AWS CodeStar, including all personal preference data associated with that profile, such as display name and email address. It does not delete the history of that user, for example the history of commits made by that user",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "user",
-        "required": true,
-        "conditionKeys": [
-          "iam:ResourceTag/${TagKey}"
-        ],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "describeproject": {
-    "name": "DescribeProject",
-    "description": "Grants permission to describe a project and its resources",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "project",
-        "required": true,
-        "conditionKeys": [
-          "aws:ResourceTag/${TagKey}"
-        ],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "describeuserprofile": {
-    "name": "DescribeUserProfile",
-    "description": "Grants permission to describe a user in AWS CodeStar and the user attributes across all projects",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "disassociateteammember": {
-    "name": "DisassociateTeamMember",
-    "description": "Grants permission to remove a user from a project. Removing a user from a project also removes the IAM policies from that user that allowed access to the project and its resources",
-    "accessLevel": "Permissions management, Write",
-    "resourceTypes": [
-      {
-        "name": "project",
-        "required": true,
-        "conditionKeys": [
-          "aws:ResourceTag/${TagKey}"
-        ],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listprojects": {
-    "name": "ListProjects",
-    "description": "Grants permission to list all projects in CodeStar associated with your AWS account",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listresources": {
-    "name": "ListResources",
-    "description": "Grants permission to list all resources associated with a project in CodeStar",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "project",
-        "required": true,
-        "conditionKeys": [
-          "aws:ResourceTag/${TagKey}"
-        ],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listtagsforproject": {
-    "name": "ListTagsForProject",
-    "description": "Grants permission to list the tags associated with a project in CodeStar",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "project",
-        "required": true,
-        "conditionKeys": [
-          "aws:ResourceTag/${TagKey}"
-        ],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listteammembers": {
-    "name": "ListTeamMembers",
-    "description": "Grants permission to list all team members associated with a project",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "project",
-        "required": true,
-        "conditionKeys": [
-          "aws:ResourceTag/${TagKey}"
-        ],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listuserprofiles": {
-    "name": "ListUserProfiles",
-    "description": "Grants permission to list user profiles in AWS CodeStar",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "tagproject": {
-    "name": "TagProject",
-    "description": "Grants permission to add tags to a project in CodeStar",
-    "accessLevel": "Tagging, Write",
-    "resourceTypes": [
-      {
-        "name": "project",
-        "required": true,
-        "conditionKeys": [
-          "aws:RequestTag/${TagKey}",
-          "aws:ResourceTag/${TagKey}",
-          "aws:TagKeys"
-        ],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "untagproject": {
-    "name": "UntagProject",
-    "description": "Grants permission to remove tags from a project in CodeStar",
-    "accessLevel": "Tagging, Write",
-    "resourceTypes": [
-      {
-        "name": "project",
-        "required": true,
-        "conditionKeys": [
-          "aws:ResourceTag/${TagKey}",
-          "aws:TagKeys"
-        ],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "updateproject": {
-    "name": "UpdateProject",
-    "description": "Grants permission to update a project in CodeStar",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "project",
-        "required": true,
-        "conditionKeys": [
-          "aws:ResourceTag/${TagKey}"
-        ],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "updateteammember": {
-    "name": "UpdateTeamMember",
-    "description": "Grants permission to update team member attributes within a CodeStar project",
-    "accessLevel": "Permissions management, Write",
-    "resourceTypes": [
-      {
-        "name": "project",
-        "required": true,
-        "conditionKeys": [
-          "aws:ResourceTag/${TagKey}"
-        ],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "updateuserprofile": {
-    "name": "UpdateUserProfile",
-    "description": "Grants permission to update a profile for a user that includes user preferences, display name, and email",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "user",
-        "required": true,
-        "conditionKeys": [
-          "iam:ResourceTag/${TagKey}"
-        ],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "verifyservicerole": {
-    "name": "VerifyServiceRole",
-    "description": "Grants permission to verify whether the AWS CodeStar service role exists in the customer's account",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  }
-}

package/data/conditionKeys/codestar.json

@@ -1,22 +0,0 @@
-{
-  "aws:requesttag/${tagkey}": {
-    "key": "aws:RequestTag/${TagKey}",
-    "description": "Filters access by requests based on the allowed set of values for each of the tags",
-    "type": "String"
-  },
-  "aws:resourcetag/${tagkey}": {
-    "key": "aws:ResourceTag/${TagKey}",
-    "description": "Filters access by actions based on tag-value associated with the resource",
-    "type": "String"
-  },
-  "aws:tagkeys": {
-    "key": "aws:TagKeys",
-    "description": "Filters access by requests based on the presence of mandatory tags in the request",
-    "type": "ArrayOfString"
-  },
-  "iam:resourcetag/${tagkey}": {
-    "key": "iam:ResourceTag/${TagKey}",
-    "description": "Filters access by actions based on tag-value associated with the resource",
-    "type": "String"
-  }
-}

package/data/resourceTypes/codestar.json

@@ -1,16 +0,0 @@
-{
-  "project": {
-    "key": "project",
-    "arn": "arn:${Partition}:codestar:${Region}:${Account}:project/${ProjectId}",
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ]
-  },
-  "user": {
-    "key": "user",
-    "arn": "arn:${Partition}:iam::${Account}:user/${AwsUserName}",
-    "conditionKeys": [
-      "iam:ResourceTag/${TagKey}"
-    ]
-  }
-}