@cloud-copilot/iam-data 0.22.202610271 → 0.22.202610291

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (14) hide show
  1. package/data/actions/aidevops.json +50 -0
  2. package/data/actions/ecr.json +75 -30
  3. package/data/actions/elasticfilesystem.json +56 -28
  4. package/data/actions/elemental-inference.json +45 -0
  5. package/data/actions/inspector2.json +30 -2
  6. package/data/actions/kafkaconnect.json +45 -0
  7. package/data/actions/kms.json +86 -43
  8. package/data/actions/odb.json +37 -2
  9. package/data/actions/partnercentral.json +10 -0
  10. package/data/actions/secretsmanager.json +40 -20
  11. package/data/actions/sns.json +32 -16
  12. package/data/actions/sts.json +4 -2
  13. package/data/conditionKeys/inspector2.json +5 -0
  14. package/package.json +2 -2
package/data/actions/secretsmanager.json CHANGED
@@ -27,7 +27,8 @@
27
27
  "secretsmanager:resource/AllowRotationLambdaArn",
28
28
  "secretsmanager:resource/Type"
29
29
  ],
30
- "dependentActions": []
30
+ "dependentActions": [],
31
+ "blockAnon": true
31
32
  },
32
33
  "createsecret": {
33
34
  "name": "CreateSecret",
@@ -54,7 +55,8 @@
54
55
  "secretsmanager:ResourceTag/tag-key",
55
56
  "secretsmanager:Type"
56
57
  ],
57
- "dependentActions": []
58
+ "dependentActions": [],
59
+ "blockAnon": true
58
60
  },
59
61
  "deleteresourcepolicy": {
60
62
  "name": "DeleteResourcePolicy",
@@ -76,7 +78,8 @@
76
78
  "secretsmanager:resource/AllowRotationLambdaArn",
77
79
  "secretsmanager:resource/Type"
78
80
  ],
79
- "dependentActions": []
81
+ "dependentActions": [],
82
+ "blockAnon": true
80
83
  },
81
84
  "deletesecret": {
82
85
  "name": "DeleteSecret",
@@ -100,7 +103,8 @@
100
103
  "secretsmanager:resource/AllowRotationLambdaArn",
101
104
  "secretsmanager:resource/Type"
102
105
  ],
103
- "dependentActions": []
106
+ "dependentActions": [],
107
+ "blockAnon": true
104
108
  },
105
109
  "describesecret": {
106
110
  "name": "DescribeSecret",
@@ -122,7 +126,8 @@
122
126
  "secretsmanager:resource/AllowRotationLambdaArn",
123
127
  "secretsmanager:resource/Type"
124
128
  ],
125
- "dependentActions": []
129
+ "dependentActions": [],
130
+ "blockAnon": true
126
131
  },
127
132
  "getrandompassword": {
128
133
  "name": "GetRandomPassword",
@@ -152,7 +157,8 @@
152
157
  "secretsmanager:resource/AllowRotationLambdaArn",
153
158
  "secretsmanager:resource/Type"
154
159
  ],
155
- "dependentActions": []
160
+ "dependentActions": [],
161
+ "blockAnon": true
156
162
  },
157
163
  "getsecretvalue": {
158
164
  "name": "GetSecretValue",
@@ -176,7 +182,8 @@
176
182
  "secretsmanager:resource/AllowRotationLambdaArn",
177
183
  "secretsmanager:resource/Type"
178
184
  ],
179
- "dependentActions": []
185
+ "dependentActions": [],
186
+ "blockAnon": true
180
187
  },
181
188
  "listsecretversionids": {
182
189
  "name": "ListSecretVersionIds",
@@ -198,7 +205,8 @@
198
205
  "secretsmanager:resource/AllowRotationLambdaArn",
199
206
  "secretsmanager:resource/Type"
200
207
  ],
201
- "dependentActions": []
208
+ "dependentActions": [],
209
+ "blockAnon": true
202
210
  },
203
211
  "listsecrets": {
204
212
  "name": "ListSecrets",
@@ -229,7 +237,8 @@
229
237
  "secretsmanager:resource/AllowRotationLambdaArn",
230
238
  "secretsmanager:resource/Type"
231
239
  ],
232
- "dependentActions": []
240
+ "dependentActions": [],
241
+ "blockAnon": true
233
242
  },
234
243
  "putsecretvalue": {
235
244
  "name": "PutSecretValue",
@@ -251,7 +260,8 @@
251
260
  "secretsmanager:resource/AllowRotationLambdaArn",
252
261
  "secretsmanager:resource/Type"
253
262
  ],
254
- "dependentActions": []
263
+ "dependentActions": [],
264
+ "blockAnon": true
255
265
  },
256
266
  "removeregionsfromreplication": {
257
267
  "name": "RemoveRegionsFromReplication",
@@ -273,7 +283,8 @@
273
283
  "secretsmanager:resource/AllowRotationLambdaArn",
274
284
  "secretsmanager:resource/Type"
275
285
  ],
276
- "dependentActions": []
286
+ "dependentActions": [],
287
+ "blockAnon": true
277
288
  },
278
289
  "replicatesecrettoregions": {
279
290
  "name": "ReplicateSecretToRegions",
@@ -297,7 +308,8 @@
297
308
  "secretsmanager:resource/AllowRotationLambdaArn",
298
309
  "secretsmanager:resource/Type"
299
310
  ],
300
- "dependentActions": []
311
+ "dependentActions": [],
312
+ "blockAnon": true
301
313
  },
302
314
  "restoresecret": {
303
315
  "name": "RestoreSecret",
@@ -319,7 +331,8 @@
319
331
  "secretsmanager:resource/AllowRotationLambdaArn",
320
332
  "secretsmanager:resource/Type"
321
333
  ],
322
- "dependentActions": []
334
+ "dependentActions": [],
335
+ "blockAnon": true
323
336
  },
324
337
  "rotatesecret": {
325
338
  "name": "RotateSecret",
@@ -345,7 +358,8 @@
345
358
  "secretsmanager:resource/AllowRotationLambdaArn",
346
359
  "secretsmanager:resource/Type"
347
360
  ],
348
- "dependentActions": []
361
+ "dependentActions": [],
362
+ "blockAnon": true
349
363
  },
350
364
  "stopreplicationtoreplica": {
351
365
  "name": "StopReplicationToReplica",
@@ -367,7 +381,8 @@
367
381
  "secretsmanager:resource/AllowRotationLambdaArn",
368
382
  "secretsmanager:resource/Type"
369
383
  ],
370
- "dependentActions": []
384
+ "dependentActions": [],
385
+ "blockAnon": true
371
386
  },
372
387
  "tagresource": {
373
388
  "name": "TagResource",
@@ -391,7 +406,8 @@
391
406
  "secretsmanager:resource/AllowRotationLambdaArn",
392
407
  "secretsmanager:resource/Type"
393
408
  ],
394
- "dependentActions": []
409
+ "dependentActions": [],
410
+ "blockAnon": true
395
411
  },
396
412
  "untagresource": {
397
413
  "name": "UntagResource",
@@ -414,7 +430,8 @@
414
430
  "secretsmanager:resource/AllowRotationLambdaArn",
415
431
  "secretsmanager:resource/Type"
416
432
  ],
417
- "dependentActions": []
433
+ "dependentActions": [],
434
+ "blockAnon": true
418
435
  },
419
436
  "updatesecret": {
420
437
  "name": "UpdateSecret",
@@ -440,7 +457,8 @@
440
457
  "secretsmanager:resource/AllowRotationLambdaArn",
441
458
  "secretsmanager:resource/Type"
442
459
  ],
443
- "dependentActions": []
460
+ "dependentActions": [],
461
+ "blockAnon": true
444
462
  },
445
463
  "updatesecretversionstage": {
446
464
  "name": "UpdateSecretVersionStage",
@@ -463,7 +481,8 @@
463
481
  "secretsmanager:resource/AllowRotationLambdaArn",
464
482
  "secretsmanager:resource/Type"
465
483
  ],
466
- "dependentActions": []
484
+ "dependentActions": [],
485
+ "blockAnon": true
467
486
  },
468
487
  "validateresourcepolicy": {
469
488
  "name": "ValidateResourcePolicy",
@@ -485,6 +504,7 @@
485
504
  "secretsmanager:resource/AllowRotationLambdaArn",
486
505
  "secretsmanager:resource/Type"
487
506
  ],
488
- "dependentActions": []
507
+ "dependentActions": [],
508
+ "blockAnon": true
489
509
  }
490
510
  }
package/data/actions/sns.json CHANGED
@@ -12,7 +12,8 @@
12
12
  }
13
13
  ],
14
14
  "conditionKeys": [],
15
- "dependentActions": []
15
+ "dependentActions": [],
16
+ "blockAnon": true
16
17
  },
17
18
  "checkifphonenumberisoptedout": {
18
19
  "name": "CheckIfPhoneNumberIsOptedOut",
@@ -77,7 +78,8 @@
77
78
  "aws:RequestTag/${TagKey}",
78
79
  "aws:TagKeys"
79
80
  ],
80
- "dependentActions": []
81
+ "dependentActions": [],
82
+ "blockAnon": true
81
83
  },
82
84
  "deleteendpoint": {
83
85
  "name": "DeleteEndpoint",
@@ -116,7 +118,8 @@
116
118
  }
117
119
  ],
118
120
  "conditionKeys": [],
119
- "dependentActions": []
121
+ "dependentActions": [],
122
+ "blockAnon": true
120
123
  },
121
124
  "getdataprotectionpolicy": {
122
125
  "name": "GetDataProtectionPolicy",
@@ -131,7 +134,8 @@
131
134
  }
132
135
  ],
133
136
  "conditionKeys": [],
134
- "dependentActions": []
137
+ "dependentActions": [],
138
+ "blockAnon": true
135
139
  },
136
140
  "getendpointattributes": {
137
141
  "name": "GetEndpointAttributes",
@@ -178,7 +182,8 @@
178
182
  }
179
183
  ],
180
184
  "conditionKeys": [],
181
- "dependentActions": []
185
+ "dependentActions": [],
186
+ "blockAnon": true
182
187
  },
183
188
  "gettopicattributes": {
184
189
  "name": "GetTopicAttributes",
@@ -193,7 +198,8 @@
193
198
  }
194
199
  ],
195
200
  "conditionKeys": [],
196
- "dependentActions": []
201
+ "dependentActions": [],
202
+ "blockAnon": true
197
203
  },
198
204
  "listendpointsbyplatformapplication": {
199
205
  "name": "ListEndpointsByPlatformApplication",
@@ -256,7 +262,8 @@
256
262
  }
257
263
  ],
258
264
  "conditionKeys": [],
259
- "dependentActions": []
265
+ "dependentActions": [],
266
+ "blockAnon": true
260
267
  },
261
268
  "listtagsforresource": {
262
269
  "name": "ListTagsForResource",
@@ -271,7 +278,8 @@
271
278
  }
272
279
  ],
273
280
  "conditionKeys": [],
274
- "dependentActions": []
281
+ "dependentActions": [],
282
+ "blockAnon": true
275
283
  },
276
284
  "listtopics": {
277
285
  "name": "ListTopics",
@@ -302,7 +310,8 @@
302
310
  }
303
311
  ],
304
312
  "conditionKeys": [],
305
- "dependentActions": []
313
+ "dependentActions": [],
314
+ "blockAnon": true
306
315
  },
307
316
  "putdataprotectionpolicy": {
308
317
  "name": "PutDataProtectionPolicy",
@@ -317,7 +326,8 @@
317
326
  }
318
327
  ],
319
328
  "conditionKeys": [],
320
- "dependentActions": []
329
+ "dependentActions": [],
330
+ "blockAnon": true
321
331
  },
322
332
  "removepermission": {
323
333
  "name": "RemovePermission",
@@ -332,7 +342,8 @@
332
342
  }
333
343
  ],
334
344
  "conditionKeys": [],
335
- "dependentActions": []
345
+ "dependentActions": [],
346
+ "blockAnon": true
336
347
  },
337
348
  "setendpointattributes": {
338
349
  "name": "SetEndpointAttributes",
@@ -371,7 +382,8 @@
371
382
  }
372
383
  ],
373
384
  "conditionKeys": [],
374
- "dependentActions": []
385
+ "dependentActions": [],
386
+ "blockAnon": true
375
387
  },
376
388
  "settopicattributes": {
377
389
  "name": "SetTopicAttributes",
@@ -386,7 +398,8 @@
386
398
  }
387
399
  ],
388
400
  "conditionKeys": [],
389
- "dependentActions": []
401
+ "dependentActions": [],
402
+ "blockAnon": true
390
403
  },
391
404
  "subscribe": {
392
405
  "name": "Subscribe",
@@ -404,7 +417,8 @@
404
417
  "sns:Endpoint",
405
418
  "sns:Protocol"
406
419
  ],
407
- "dependentActions": []
420
+ "dependentActions": [],
421
+ "blockAnon": true
408
422
  },
409
423
  "tagresource": {
410
424
  "name": "TagResource",
@@ -422,7 +436,8 @@
422
436
  "aws:RequestTag/${TagKey}",
423
437
  "aws:TagKeys"
424
438
  ],
425
- "dependentActions": []
439
+ "dependentActions": [],
440
+ "blockAnon": true
426
441
  },
427
442
  "unsubscribe": {
428
443
  "name": "Unsubscribe",
@@ -454,7 +469,8 @@
454
469
  "conditionKeys": [
455
470
  "aws:TagKeys"
456
471
  ],
457
- "dependentActions": []
472
+ "dependentActions": [],
473
+ "blockAnon": true
458
474
  },
459
475
  "verifysmssandboxphonenumber": {
460
476
  "name": "VerifySMSSandboxPhoneNumber",
package/data/actions/sts.json CHANGED
@@ -115,7 +115,8 @@
115
115
  "www.amazon.com:app_id",
116
116
  "www.amazon.com:user_id"
117
117
  ],
118
- "dependentActions": []
118
+ "dependentActions": [],
119
+ "blockAnon": true
119
120
  },
120
121
  "assumerolewithsaml": {
121
122
  "name": "AssumeRoleWithSAML",
@@ -340,7 +341,8 @@
340
341
  "aws:RequestTag/${TagKey}",
341
342
  "aws:TagKeys"
342
343
  ],
343
- "dependentActions": []
344
+ "dependentActions": [],
345
+ "blockAnon": true
344
346
  },
345
347
  "getsessiontoken": {
346
348
  "name": "GetSessionToken",
package/data/conditionKeys/inspector2.json CHANGED
@@ -13,5 +13,10 @@
13
13
  "key": "aws:TagKeys",
14
14
  "description": "Filters access by the presence of tag keys in the request",
15
15
  "type": "ArrayOfString"
16
+ },
17
+ "inspector2:expectedbucketowner": {
18
+ "key": "inspector2:ExpectedBucketOwner",
19
+ "description": "Filters access by the AWS account ID that must own the destination S3 bucket when requesting a findings report or SBOM export",
20
+ "type": "String"
16
21
  }
17
22
  }
package/package.json CHANGED
@@ -1,12 +1,12 @@
1
1
  {
2
2
  "name": "@cloud-copilot/iam-data",
3
- "version": "0.22.202610271",
3
+ "version": "0.22.202610291",
4
4
  "description": "AWS IAM Data",
5
5
  "repository": {
6
6
  "type": "git",
7
7
  "url": "git+https://github.com/act-security-labs/iam-data.git"
8
8
  },
9
- "updatedAt": "2026-10-27T04:50:10.381Z",
9
+ "updatedAt": "2026-10-29T04:41:40.229Z",
10
10
  "exports": {
11
11
  ".": {
12
12
  "import": "./dist/esm/index.js",