@cloud-copilot/iam-data 0.22.202610271 → 0.22.202610281

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (13) hide show
  1. package/data/actions/ecr.json +60 -30
  2. package/data/actions/elasticfilesystem.json +56 -28
  3. package/data/actions/elemental-inference.json +45 -0
  4. package/data/actions/inspector2.json +30 -2
  5. package/data/actions/kafkaconnect.json +45 -0
  6. package/data/actions/kms.json +86 -43
  7. package/data/actions/odb.json +37 -2
  8. package/data/actions/partnercentral.json +10 -0
  9. package/data/actions/secretsmanager.json +40 -20
  10. package/data/actions/sns.json +36 -18
  11. package/data/actions/sts.json +4 -2
  12. package/data/conditionKeys/inspector2.json +5 -0
  13. package/package.json +2 -2
package/data/actions/secretsmanager.json CHANGED
@@ -27,7 +27,8 @@
27
27
  "secretsmanager:resource/AllowRotationLambdaArn",
28
28
  "secretsmanager:resource/Type"
29
29
  ],
30
- "dependentActions": []
30
+ "dependentActions": [],
31
+ "blockAnon": true
31
32
  },
32
33
  "createsecret": {
33
34
  "name": "CreateSecret",
@@ -54,7 +55,8 @@
54
55
  "secretsmanager:ResourceTag/tag-key",
55
56
  "secretsmanager:Type"
56
57
  ],
57
- "dependentActions": []
58
+ "dependentActions": [],
59
+ "blockAnon": true
58
60
  },
59
61
  "deleteresourcepolicy": {
60
62
  "name": "DeleteResourcePolicy",
@@ -76,7 +78,8 @@
76
78
  "secretsmanager:resource/AllowRotationLambdaArn",
77
79
  "secretsmanager:resource/Type"
78
80
  ],
79
- "dependentActions": []
81
+ "dependentActions": [],
82
+ "blockAnon": true
80
83
  },
81
84
  "deletesecret": {
82
85
  "name": "DeleteSecret",
@@ -100,7 +103,8 @@
100
103
  "secretsmanager:resource/AllowRotationLambdaArn",
101
104
  "secretsmanager:resource/Type"
102
105
  ],
103
- "dependentActions": []
106
+ "dependentActions": [],
107
+ "blockAnon": true
104
108
  },
105
109
  "describesecret": {
106
110
  "name": "DescribeSecret",
@@ -122,7 +126,8 @@
122
126
  "secretsmanager:resource/AllowRotationLambdaArn",
123
127
  "secretsmanager:resource/Type"
124
128
  ],
125
- "dependentActions": []
129
+ "dependentActions": [],
130
+ "blockAnon": true
126
131
  },
127
132
  "getrandompassword": {
128
133
  "name": "GetRandomPassword",
@@ -152,7 +157,8 @@
152
157
  "secretsmanager:resource/AllowRotationLambdaArn",
153
158
  "secretsmanager:resource/Type"
154
159
  ],
155
- "dependentActions": []
160
+ "dependentActions": [],
161
+ "blockAnon": true
156
162
  },
157
163
  "getsecretvalue": {
158
164
  "name": "GetSecretValue",
@@ -176,7 +182,8 @@
176
182
  "secretsmanager:resource/AllowRotationLambdaArn",
177
183
  "secretsmanager:resource/Type"
178
184
  ],
179
- "dependentActions": []
185
+ "dependentActions": [],
186
+ "blockAnon": true
180
187
  },
181
188
  "listsecretversionids": {
182
189
  "name": "ListSecretVersionIds",
@@ -198,7 +205,8 @@
198
205
  "secretsmanager:resource/AllowRotationLambdaArn",
199
206
  "secretsmanager:resource/Type"
200
207
  ],
201
- "dependentActions": []
208
+ "dependentActions": [],
209
+ "blockAnon": true
202
210
  },
203
211
  "listsecrets": {
204
212
  "name": "ListSecrets",
@@ -229,7 +237,8 @@
229
237
  "secretsmanager:resource/AllowRotationLambdaArn",
230
238
  "secretsmanager:resource/Type"
231
239
  ],
232
- "dependentActions": []
240
+ "dependentActions": [],
241
+ "blockAnon": true
233
242
  },
234
243
  "putsecretvalue": {
235
244
  "name": "PutSecretValue",
@@ -251,7 +260,8 @@
251
260
  "secretsmanager:resource/AllowRotationLambdaArn",
252
261
  "secretsmanager:resource/Type"
253
262
  ],
254
- "dependentActions": []
263
+ "dependentActions": [],
264
+ "blockAnon": true
255
265
  },
256
266
  "removeregionsfromreplication": {
257
267
  "name": "RemoveRegionsFromReplication",
@@ -273,7 +283,8 @@
273
283
  "secretsmanager:resource/AllowRotationLambdaArn",
274
284
  "secretsmanager:resource/Type"
275
285
  ],
276
- "dependentActions": []
286
+ "dependentActions": [],
287
+ "blockAnon": true
277
288
  },
278
289
  "replicatesecrettoregions": {
279
290
  "name": "ReplicateSecretToRegions",
@@ -297,7 +308,8 @@
297
308
  "secretsmanager:resource/AllowRotationLambdaArn",
298
309
  "secretsmanager:resource/Type"
299
310
  ],
300
- "dependentActions": []
311
+ "dependentActions": [],
312
+ "blockAnon": true
301
313
  },
302
314
  "restoresecret": {
303
315
  "name": "RestoreSecret",
@@ -319,7 +331,8 @@
319
331
  "secretsmanager:resource/AllowRotationLambdaArn",
320
332
  "secretsmanager:resource/Type"
321
333
  ],
322
- "dependentActions": []
334
+ "dependentActions": [],
335
+ "blockAnon": true
323
336
  },
324
337
  "rotatesecret": {
325
338
  "name": "RotateSecret",
@@ -345,7 +358,8 @@
345
358
  "secretsmanager:resource/AllowRotationLambdaArn",
346
359
  "secretsmanager:resource/Type"
347
360
  ],
348
- "dependentActions": []
361
+ "dependentActions": [],
362
+ "blockAnon": true
349
363
  },
350
364
  "stopreplicationtoreplica": {
351
365
  "name": "StopReplicationToReplica",
@@ -367,7 +381,8 @@
367
381
  "secretsmanager:resource/AllowRotationLambdaArn",
368
382
  "secretsmanager:resource/Type"
369
383
  ],
370
- "dependentActions": []
384
+ "dependentActions": [],
385
+ "blockAnon": true
371
386
  },
372
387
  "tagresource": {
373
388
  "name": "TagResource",
@@ -391,7 +406,8 @@
391
406
  "secretsmanager:resource/AllowRotationLambdaArn",
392
407
  "secretsmanager:resource/Type"
393
408
  ],
394
- "dependentActions": []
409
+ "dependentActions": [],
410
+ "blockAnon": true
395
411
  },
396
412
  "untagresource": {
397
413
  "name": "UntagResource",
@@ -414,7 +430,8 @@
414
430
  "secretsmanager:resource/AllowRotationLambdaArn",
415
431
  "secretsmanager:resource/Type"
416
432
  ],
417
- "dependentActions": []
433
+ "dependentActions": [],
434
+ "blockAnon": true
418
435
  },
419
436
  "updatesecret": {
420
437
  "name": "UpdateSecret",
@@ -440,7 +457,8 @@
440
457
  "secretsmanager:resource/AllowRotationLambdaArn",
441
458
  "secretsmanager:resource/Type"
442
459
  ],
443
- "dependentActions": []
460
+ "dependentActions": [],
461
+ "blockAnon": true
444
462
  },
445
463
  "updatesecretversionstage": {
446
464
  "name": "UpdateSecretVersionStage",
@@ -463,7 +481,8 @@
463
481
  "secretsmanager:resource/AllowRotationLambdaArn",
464
482
  "secretsmanager:resource/Type"
465
483
  ],
466
- "dependentActions": []
484
+ "dependentActions": [],
485
+ "blockAnon": true
467
486
  },
468
487
  "validateresourcepolicy": {
469
488
  "name": "ValidateResourcePolicy",
@@ -485,6 +504,7 @@
485
504
  "secretsmanager:resource/AllowRotationLambdaArn",
486
505
  "secretsmanager:resource/Type"
487
506
  ],
488
- "dependentActions": []
507
+ "dependentActions": [],
508
+ "blockAnon": true
489
509
  }
490
510
  }
package/data/actions/sns.json CHANGED
@@ -12,7 +12,8 @@
12
12
  }
13
13
  ],
14
14
  "conditionKeys": [],
15
- "dependentActions": []
15
+ "dependentActions": [],
16
+ "blockAnon": true
16
17
  },
17
18
  "checkifphonenumberisoptedout": {
18
19
  "name": "CheckIfPhoneNumberIsOptedOut",
@@ -35,7 +36,8 @@
35
36
  }
36
37
  ],
37
38
  "conditionKeys": [],
38
- "dependentActions": []
39
+ "dependentActions": [],
40
+ "blockAnon": true
39
41
  },
40
42
  "createplatformapplication": {
41
43
  "name": "CreatePlatformApplication",
@@ -77,7 +79,8 @@
77
79
  "aws:RequestTag/${TagKey}",
78
80
  "aws:TagKeys"
79
81
  ],
80
- "dependentActions": []
82
+ "dependentActions": [],
83
+ "blockAnon": true
81
84
  },
82
85
  "deleteendpoint": {
83
86
  "name": "DeleteEndpoint",
@@ -116,7 +119,8 @@
116
119
  }
117
120
  ],
118
121
  "conditionKeys": [],
119
- "dependentActions": []
122
+ "dependentActions": [],
123
+ "blockAnon": true
120
124
  },
121
125
  "getdataprotectionpolicy": {
122
126
  "name": "GetDataProtectionPolicy",
@@ -131,7 +135,8 @@
131
135
  }
132
136
  ],
133
137
  "conditionKeys": [],
134
- "dependentActions": []
138
+ "dependentActions": [],
139
+ "blockAnon": true
135
140
  },
136
141
  "getendpointattributes": {
137
142
  "name": "GetEndpointAttributes",
@@ -178,7 +183,8 @@
178
183
  }
179
184
  ],
180
185
  "conditionKeys": [],
181
- "dependentActions": []
186
+ "dependentActions": [],
187
+ "blockAnon": true
182
188
  },
183
189
  "gettopicattributes": {
184
190
  "name": "GetTopicAttributes",
@@ -193,7 +199,8 @@
193
199
  }
194
200
  ],
195
201
  "conditionKeys": [],
196
- "dependentActions": []
202
+ "dependentActions": [],
203
+ "blockAnon": true
197
204
  },
198
205
  "listendpointsbyplatformapplication": {
199
206
  "name": "ListEndpointsByPlatformApplication",
@@ -256,7 +263,8 @@
256
263
  }
257
264
  ],
258
265
  "conditionKeys": [],
259
- "dependentActions": []
266
+ "dependentActions": [],
267
+ "blockAnon": true
260
268
  },
261
269
  "listtagsforresource": {
262
270
  "name": "ListTagsForResource",
@@ -271,7 +279,8 @@
271
279
  }
272
280
  ],
273
281
  "conditionKeys": [],
274
- "dependentActions": []
282
+ "dependentActions": [],
283
+ "blockAnon": true
275
284
  },
276
285
  "listtopics": {
277
286
  "name": "ListTopics",
@@ -302,7 +311,8 @@
302
311
  }
303
312
  ],
304
313
  "conditionKeys": [],
305
- "dependentActions": []
314
+ "dependentActions": [],
315
+ "blockAnon": true
306
316
  },
307
317
  "putdataprotectionpolicy": {
308
318
  "name": "PutDataProtectionPolicy",
@@ -317,7 +327,8 @@
317
327
  }
318
328
  ],
319
329
  "conditionKeys": [],
320
- "dependentActions": []
330
+ "dependentActions": [],
331
+ "blockAnon": true
321
332
  },
322
333
  "removepermission": {
323
334
  "name": "RemovePermission",
@@ -332,7 +343,8 @@
332
343
  }
333
344
  ],
334
345
  "conditionKeys": [],
335
- "dependentActions": []
346
+ "dependentActions": [],
347
+ "blockAnon": true
336
348
  },
337
349
  "setendpointattributes": {
338
350
  "name": "SetEndpointAttributes",
@@ -371,7 +383,8 @@
371
383
  }
372
384
  ],
373
385
  "conditionKeys": [],
374
- "dependentActions": []
386
+ "dependentActions": [],
387
+ "blockAnon": true
375
388
  },
376
389
  "settopicattributes": {
377
390
  "name": "SetTopicAttributes",
@@ -386,7 +399,8 @@
386
399
  }
387
400
  ],
388
401
  "conditionKeys": [],
389
- "dependentActions": []
402
+ "dependentActions": [],
403
+ "blockAnon": true
390
404
  },
391
405
  "subscribe": {
392
406
  "name": "Subscribe",
@@ -404,7 +418,8 @@
404
418
  "sns:Endpoint",
405
419
  "sns:Protocol"
406
420
  ],
407
- "dependentActions": []
421
+ "dependentActions": [],
422
+ "blockAnon": true
408
423
  },
409
424
  "tagresource": {
410
425
  "name": "TagResource",
@@ -422,7 +437,8 @@
422
437
  "aws:RequestTag/${TagKey}",
423
438
  "aws:TagKeys"
424
439
  ],
425
- "dependentActions": []
440
+ "dependentActions": [],
441
+ "blockAnon": true
426
442
  },
427
443
  "unsubscribe": {
428
444
  "name": "Unsubscribe",
@@ -437,7 +453,8 @@
437
453
  }
438
454
  ],
439
455
  "conditionKeys": [],
440
- "dependentActions": []
456
+ "dependentActions": [],
457
+ "blockAnon": true
441
458
  },
442
459
  "untagresource": {
443
460
  "name": "UntagResource",
@@ -454,7 +471,8 @@
454
471
  "conditionKeys": [
455
472
  "aws:TagKeys"
456
473
  ],
457
- "dependentActions": []
474
+ "dependentActions": [],
475
+ "blockAnon": true
458
476
  },
459
477
  "verifysmssandboxphonenumber": {
460
478
  "name": "VerifySMSSandboxPhoneNumber",
package/data/actions/sts.json CHANGED
@@ -115,7 +115,8 @@
115
115
  "www.amazon.com:app_id",
116
116
  "www.amazon.com:user_id"
117
117
  ],
118
- "dependentActions": []
118
+ "dependentActions": [],
119
+ "blockAnon": true
119
120
  },
120
121
  "assumerolewithsaml": {
121
122
  "name": "AssumeRoleWithSAML",
@@ -340,7 +341,8 @@
340
341
  "aws:RequestTag/${TagKey}",
341
342
  "aws:TagKeys"
342
343
  ],
343
- "dependentActions": []
344
+ "dependentActions": [],
345
+ "blockAnon": true
344
346
  },
345
347
  "getsessiontoken": {
346
348
  "name": "GetSessionToken",
package/data/conditionKeys/inspector2.json CHANGED
@@ -13,5 +13,10 @@
13
13
  "key": "aws:TagKeys",
14
14
  "description": "Filters access by the presence of tag keys in the request",
15
15
  "type": "ArrayOfString"
16
+ },
17
+ "inspector2:expectedbucketowner": {
18
+ "key": "inspector2:ExpectedBucketOwner",
19
+ "description": "Filters access by the AWS account ID that must own the destination S3 bucket when requesting a findings report or SBOM export",
20
+ "type": "String"
16
21
  }
17
22
  }
package/package.json CHANGED
@@ -1,12 +1,12 @@
1
1
  {
2
2
  "name": "@cloud-copilot/iam-data",
3
- "version": "0.22.202610271",
3
+ "version": "0.22.202610281",
4
4
  "description": "AWS IAM Data",
5
5
  "repository": {
6
6
  "type": "git",
7
7
  "url": "git+https://github.com/act-security-labs/iam-data.git"
8
8
  },
9
- "updatedAt": "2026-10-27T04:50:10.381Z",
9
+ "updatedAt": "2026-10-28T04:41:51.687Z",
10
10
  "exports": {
11
11
  ".": {
12
12
  "import": "./dist/esm/index.js",