@cloud-copilot/iam-data 0.8.202411021 → 0.8.202411071

package/data/actions/application-signals.json

@@ -63,6 +63,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listobservedentities": {
+    "name": "ListObservedEntities",
+    "description": "Grants permission to list entities associated with other entities",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listservicedependencies": {
     "name": "ListServiceDependencies",
     "description": "Grants permission to list service dependencies",

package/data/actions/appsync.json

@@ -44,6 +44,20 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createapi": {
+    "name": "CreateApi",
+    "description": "Grants permission to create an API",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": [
+      "iam:CreateServiceLinkedRole"
+    ]
+  },
   "createapicache": {
     "name": "CreateApiCache",
     "description": "Grants permission to create an API cache in AppSync",
@@ -60,6 +74,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createchannelnamespace": {
+    "name": "CreateChannelNamespace",
+    "description": "Grants permission to create a channel namespace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channelNamespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createdatasource": {
     "name": "CreateDataSource",
     "description": "Grants permission to create a data source",
@@ -114,6 +147,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteapi": {
+    "name": "DeleteApi",
+    "description": "Grants permission to delete a API. This will also clean up every AppSync resource below that API",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "api",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deleteapicache": {
     "name": "DeleteApiCache",
     "description": "Grants permission to delete an API cache in AppSync",
@@ -130,6 +180,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletechannelnamespace": {
+    "name": "DeleteChannelNamespace",
+    "description": "Grants permission to delete a channel namespace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channelNamespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deletedatasource": {
     "name": "DeleteDataSource",
     "description": "Grants permission to delete a data source",
@@ -264,6 +331,51 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "eventconnect": {
+    "name": "EventConnect",
+    "description": "Grants permission to connect to an Event API",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "api",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "eventpublish": {
+    "name": "EventPublish",
+    "description": "Grants permission to publish events to a channel namespace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channelNamespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "eventsubscribe": {
+    "name": "EventSubscribe",
+    "description": "Grants permission to subscribe to a channel namespace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channelNamespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "flushapicache": {
     "name": "FlushApiCache",
     "description": "Grants permission to flush an API cache in AppSync",
@@ -272,6 +384,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getapi": {
+    "name": "GetApi",
+    "description": "Grants permission to retrieve an API",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "api",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "getapiassociation": {
     "name": "GetApiAssociation",
     "description": "Grants permission to read custom domain name - GraphQL API association details in AppSync",
@@ -295,6 +424,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getchannelnamespace": {
+    "name": "GetChannelNamespace",
+    "description": "Grants permission to retrieve a channel namespace",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "channelNamespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "getdatasource": {
     "name": "GetDataSource",
     "description": "Grants permission to retrieve a data source",
@@ -444,6 +590,33 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listapis": {
+    "name": "ListApis",
+    "description": "Grants permission to list APIs",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "listchannelnamespaces": {
+    "name": "ListChannelNamespaces",
+    "description": "Grants permission to list channel namespace",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "api",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "listdatasources": {
     "name": "ListDataSources",
     "description": "Grants permission to list the data sources for a given API",
@@ -505,6 +678,18 @@
     "description": "Grants permission to list the tags for a resource",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "api",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "channelNamespace",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "graphqlapi",
         "required": false,
@@ -616,12 +801,36 @@
     "description": "Grants permission to tag a resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "api",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "channelNamespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "graphqlapi",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "api",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "channelNamespace",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "graphqlapi",
         "required": false,
@@ -641,12 +850,36 @@
     "description": "Grants permission to untag a resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "api",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "channelNamespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "graphqlapi",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "api",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "channelNamespace",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "graphqlapi",
         "required": false,
@@ -655,7 +888,27 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "updateapi": {
+    "name": "UpdateApi",
+    "description": "Grants permission to update an API",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "api",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:CreateServiceLinkedRole"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -675,6 +928,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatechannelnamespace": {
+    "name": "UpdateChannelNamespace",
+    "description": "Grants permission to update a channel namespace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channelNamespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "updatedatasource": {
     "name": "UpdateDataSource",
     "description": "Grants permission to update a data source",

package/data/actions/aps.json

@@ -716,6 +716,32 @@
     ],
     "dependentActions": []
   },
+  "updatescraper": {
+    "name": "UpdateScraper",
+    "description": "Grants permission to update a scraper",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "scraper",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "aps:CreateScraper",
+          "aps:TagResource"
+        ]
+      },
+      {
+        "name": "workspace",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "updateworkspacealias": {
     "name": "UpdateWorkspaceAlias",
     "description": "Grants permission to modify the alias of existing AMP workspace",

package/data/actions/cloudwatch.json

@@ -395,6 +395,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listentitiesformetric": {
+    "name": "ListEntitiesForMetric",
+    "isPermissionOnly": true,
+    "description": "Grants permission to retrieve all the entities that are emitting a given metric",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listmanagedinsightrules": {
     "name": "ListManagedInsightRules",
     "description": "Grants permission to list available managed Insight Rules for a given Resource ARN",

package/data/actions/docdb-elastic.json

@@ -1,4 +1,21 @@
 {
+  "applypendingmaintenanceaction": {
+    "name": "ApplyPendingMaintenanceAction",
+    "description": "Grants permission to apply pending maintenance actions on Amazon DocDB-Elastic cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "copyclustersnapshot": {
     "name": "CopyClusterSnapshot",
     "description": "Grants permission to copy a new Amazon DocDB-Elastic cluster snapshot",
@@ -186,6 +203,23 @@
     ],
     "dependentActions": []
   },
+  "getpendingmaintenanceaction": {
+    "name": "GetPendingMaintenanceAction",
+    "description": "Grants permission to view details about pending maintenance actions on Amazon DocDB-Elastic cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "listclustersnapshots": {
     "name": "ListClusterSnapshots",
     "description": "Grants permission to list the cluster snapshots in your account",
@@ -202,6 +236,16 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listpendingmaintenanceactions": {
+    "name": "ListPendingMaintenanceActions",
+    "description": "Grants permission to list details about pending maintenance actions on any Amazon DocDB-Elastic cluster",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to lists tag for an DocumentDB Elastic resource",

package/data/actions/ec2.json

@@ -24,6 +24,41 @@
     ],
     "dependentActions": []
   },
+  "acceptcapacityreservationbillingownership": {
+    "name": "AcceptCapacityReservationBillingOwnership",
+    "description": "Grants permission to accept assign billing of the available capacity of a shared Capacity Reservation to the calling account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacity-reservation",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:CapacityReservationFleet",
+          "ec2:CreateDate",
+          "ec2:DestinationCapacityReservationId",
+          "ec2:EbsOptimized",
+          "ec2:EndDate",
+          "ec2:EndDateType",
+          "ec2:InstanceCount",
+          "ec2:InstanceMatchCriteria",
+          "ec2:InstancePlatform",
+          "ec2:InstanceType",
+          "ec2:OutpostArn",
+          "ec2:PlacementGroup",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SourceCapacityReservationId",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "acceptreservedinstancesexchangequote": {
     "name": "AcceptReservedInstancesExchangeQuote",
     "description": "Grants permission to accept a Convertible Reserved Instance exchange quote",
@@ -435,6 +470,41 @@
     ],
     "dependentActions": []
   },
+  "associatecapacityreservationbillingowner": {
+    "name": "AssociateCapacityReservationBillingOwner",
+    "description": "Grants permission to assign billing of the unused capacity of a shared Capacity Reservation to a consumer account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacity-reservation",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:CapacityReservationFleet",
+          "ec2:CreateDate",
+          "ec2:DestinationCapacityReservationId",
+          "ec2:EbsOptimized",
+          "ec2:EndDate",
+          "ec2:EndDateType",
+          "ec2:InstanceCount",
+          "ec2:InstanceMatchCriteria",
+          "ec2:InstancePlatform",
+          "ec2:InstanceType",
+          "ec2:OutpostArn",
+          "ec2:PlacementGroup",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SourceCapacityReservationId",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "associateclientvpntargetnetwork": {
     "name": "AssociateClientVpnTargetNetwork",
     "description": "Grants permission to associate a target network with a Client VPN endpoint",
@@ -720,6 +790,41 @@
     ],
     "dependentActions": []
   },
+  "associatesecuritygroupvpc": {
+    "name": "AssociateSecurityGroupVpc",
+    "description": "Grants permission to associate a security group with another VPC in the same Region",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "security-group",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SecurityGroupID",
+          "ec2:Vpc"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "vpc",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:Ipv4IpamPoolId",
+          "ec2:Ipv6IpamPoolId",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:Tenancy",
+          "ec2:VpcID"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "associatesubnetcidrblock": {
     "name": "AssociateSubnetCidrBlock",
     "description": "Grants permission to associate a CIDR block with a subnet",
@@ -8098,6 +8203,16 @@
     ],
     "dependentActions": []
   },
+  "describecapacityreservationbillingrequests": {
+    "name": "DescribeCapacityReservationBillingRequests",
+    "description": "Grants permission to describe one or more requests to assign the billing of the unused capacity of a Capacity Reservation",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describecapacityreservationfleets": {
     "name": "DescribeCapacityReservationFleets",
     "description": "Grants permission to describe one or more Capacity Reservation Fleets",
@@ -8644,6 +8759,16 @@
     ],
     "dependentActions": []
   },
+  "describeinstanceimagemetadata": {
+    "name": "DescribeInstanceImageMetadata",
+    "description": "Grants permission to describe the AMI that was used to launch an instance",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describeinstancestatus": {
     "name": "DescribeInstanceStatus",
     "description": "Grants permission to describe the status of one or more instances",
@@ -9179,6 +9304,16 @@
     ],
     "dependentActions": []
   },
+  "describesecuritygroupvpcassociations": {
+    "name": "DescribeSecurityGroupVpcAssociations",
+    "description": "Grants permission to describe security group VPC associations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describesecuritygroups": {
     "name": "DescribeSecurityGroups",
     "description": "Grants permission to describe one or more security groups",
@@ -10380,6 +10515,41 @@
     ],
     "dependentActions": []
   },
+  "disassociatecapacityreservationbillingowner": {
+    "name": "DisassociateCapacityReservationBillingOwner",
+    "description": "Grants permission to cancel a pending request to assign billing of the unused capacity of a Capacity Reservation to a consumer account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacity-reservation",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:CapacityReservationFleet",
+          "ec2:CreateDate",
+          "ec2:DestinationCapacityReservationId",
+          "ec2:EbsOptimized",
+          "ec2:EndDate",
+          "ec2:EndDateType",
+          "ec2:InstanceCount",
+          "ec2:InstanceMatchCriteria",
+          "ec2:InstancePlatform",
+          "ec2:InstanceType",
+          "ec2:OutpostArn",
+          "ec2:PlacementGroup",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SourceCapacityReservationId",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "disassociateclientvpntargetnetwork": {
     "name": "DisassociateClientVpnTargetNetwork",
     "description": "Grants permission to disassociate a target network from a Client VPN endpoint",
@@ -10633,6 +10803,41 @@
     ],
     "dependentActions": []
   },
+  "disassociatesecuritygroupvpc": {
+    "name": "DisassociateSecurityGroupVpc",
+    "description": "Grants permission to disassociate a security group from a VPC",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "security-group",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SecurityGroupID",
+          "ec2:Vpc"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "vpc",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:Ipv4IpamPoolId",
+          "ec2:Ipv6IpamPoolId",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:Tenancy",
+          "ec2:VpcID"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "disassociatesubnetcidrblock": {
     "name": "DisassociateSubnetCidrBlock",
     "description": "Grants permission to disassociate a CIDR block from a subnet",
@@ -12995,6 +13200,44 @@
     ],
     "dependentActions": []
   },
+  "modifyinstancecpuoptions": {
+    "name": "ModifyInstanceCpuOptions",
+    "description": "Grants permission to modify the CPU options on an instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "instance",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
+          "ec2:AvailabilityZone",
+          "ec2:CpuOptionsAmdSevSnp",
+          "ec2:EbsOptimized",
+          "ec2:InstanceAutoRecovery",
+          "ec2:InstanceID",
+          "ec2:InstanceMarketType",
+          "ec2:InstanceMetadataTags",
+          "ec2:InstanceProfile",
+          "ec2:InstanceType",
+          "ec2:MetadataHttpEndpoint",
+          "ec2:MetadataHttpPutResponseHopLimit",
+          "ec2:MetadataHttpTokens",
+          "ec2:PlacementGroup",
+          "ec2:ProductCode",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:RootDeviceType",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "modifyinstancecreditspecification": {
     "name": "ModifyInstanceCreditSpecification",
     "description": "Grants permission to modify the credit option for CPU usage on an instance",
@@ -15019,6 +15262,41 @@
     ],
     "dependentActions": []
   },
+  "rejectcapacityreservationbillingownership": {
+    "name": "RejectCapacityReservationBillingOwnership",
+    "description": "Grants permission to reject a request to assign billing of the available capacity of a shared Capacity Reservation to your account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacity-reservation",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:CapacityReservationFleet",
+          "ec2:CreateDate",
+          "ec2:DestinationCapacityReservationId",
+          "ec2:EbsOptimized",
+          "ec2:EndDate",
+          "ec2:EndDateType",
+          "ec2:InstanceCount",
+          "ec2:InstanceMatchCriteria",
+          "ec2:InstancePlatform",
+          "ec2:InstanceType",
+          "ec2:OutpostArn",
+          "ec2:PlacementGroup",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SourceCapacityReservationId",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "rejecttransitgatewaymulticastdomainassociations": {
     "name": "RejectTransitGatewayMulticastDomainAssociations",
     "description": "Grants permission to reject requests to associate cross-account subnets with a transit gateway multicast domain",

package/data/actions/geo-maps.json

@@ -0,0 +1,32 @@
+{
+  "getstaticmap": {
+    "name": "GetStaticMap",
+    "description": "Grants permission to retrieve the static map",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gettile": {
+    "name": "GetTile",
+    "description": "Grants permission to retrieve the map tile",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/geo-places.json

@@ -0,0 +1,107 @@
+{
+  "autocomplete": {
+    "name": "Autocomplete",
+    "description": "Grants permission to autocomplete text input with potential places and addresses as the user types",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "geocode": {
+    "name": "Geocode",
+    "description": "Grants permission to geocode a textual address or place into geographic coordinates",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getplace": {
+    "name": "GetPlace",
+    "description": "Grants permission to query a place by it's unqiue place ID",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "reversegeocode": {
+    "name": "ReverseGeocode",
+    "description": "Grants permission to convert geographic coordinates into a human-readable address or place",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "searchnearby": {
+    "name": "SearchNearby",
+    "description": "Grants permission to retrieve places near a position which match to a set of user defined restrictions such as category or food type offered by the place",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "searchtext": {
+    "name": "SearchText",
+    "description": "Grants permission to query for places using a single free-form text input",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "suggest": {
+    "name": "Suggest",
+    "description": "Grants permission to suggest potential places based on the user's input",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/geo-routes.json

@@ -0,0 +1,77 @@
+{
+  "calculateisolines": {
+    "name": "CalculateIsolines",
+    "description": "Grants permission to determine destinations or service areas reachable within a specified time",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "calculateroutematrix": {
+    "name": "CalculateRouteMatrix",
+    "description": "Grants permission to calculate routing matrice which providing travel time and distances between sets of origins and destinations",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "calculateroutes": {
+    "name": "CalculateRoutes",
+    "description": "Grants permission to calculates routes between two or more locations",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "optimizewaypoints": {
+    "name": "OptimizeWaypoints",
+    "description": "Grants permission to calculate the most efficient sequence for visiting multiple waypoints or locations along a route",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "snaptoroads": {
+    "name": "SnapToRoads",
+    "description": "Grants permission to enhances the accuracy of geographic positioning by aligning GPS coordinates to the nearest road segments on a digital map",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/qapps.json

@@ -41,6 +41,51 @@
     ],
     "dependentActions": []
   },
+  "batchcreatecategory": {
+    "name": "BatchCreateCategory",
+    "description": "Grants permission to create the categories of a library in the Q Business application environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchdeletecategory": {
+    "name": "BatchDeleteCategory",
+    "description": "Grants permission to delete the categories of a library in the Q Business application environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchupdatecategory": {
+    "name": "BatchUpdateCategory",
+    "description": "Grants permission to update the categories of a library in the Q Business application environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "copyqapp": {
     "name": "CopyQApp",
     "isPermissionOnly": true,
@@ -417,6 +462,21 @@
     ],
     "dependentActions": []
   },
+  "listcategories": {
+    "name": "ListCategories",
+    "description": "Grants permission to list categories in the Q Business application environment",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listlibraryitems": {
     "name": "ListLibraryItems",
     "description": "Grants permission to list library items in the Q Business application environment",

package/data/actions/tax.json

@@ -15,6 +15,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletesupplementaltaxregistration": {
+    "name": "DeleteSupplementalTaxRegistration",
+    "description": "Grants permission to delete supplemental tax registration data",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletetaxregistration": {
     "name": "DeleteTaxRegistration",
     "description": "Grants permission to delete tax registration data",
@@ -75,6 +83,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listsupplementaltaxregistrations": {
+    "name": "ListSupplementalTaxRegistrations",
+    "description": "Grants permission to view supplemental tax registrations",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtaxregistrations": {
     "name": "ListTaxRegistrations",
     "description": "Grants permission to view tax registrations",
@@ -83,6 +99,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putsupplementaltaxregistration": {
+    "name": "PutSupplementalTaxRegistration",
+    "description": "Grants permission to update supplemental tax registrations data",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "puttaxinheritance": {
     "name": "PutTaxInheritance",
     "isPermissionOnly": true,

package/data/actions/thinclient.json

@@ -68,6 +68,24 @@
   },
   "getdevice": {
     "name": "GetDevice",
+    "description": "Grants permission to get devices",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "device",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "getdevicedetails": {
+    "name": "GetDeviceDetails",
+    "isPermissionOnly": true,
     "description": "Grants permission to get details of devices",
     "accessLevel": "Read",
     "resourceTypes": [

package/data/conditionKeys/geo-maps.json

@@ -0,0 +1 @@
+{}

package/data/conditionKeys/geo-places.json

@@ -0,0 +1 @@
+{}

package/data/conditionKeys/geo-routes.json

@@ -0,0 +1 @@
+{}

package/data/resourceTypes/appsync.json

@@ -33,5 +33,19 @@
   "mergedapiassociation": {
     "key": "mergedApiAssociation",
     "arn": "arn:${Partition}:appsync:${Region}:${Account}:apis/${SourceGraphQLAPIId}/mergedApiAssociations/${Associationid}"
+  },
+  "api": {
+    "key": "api",
+    "arn": "arn:${Partition}:appsync:${Region}:${Account}:apis/${ApiId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "channelnamespace": {
+    "key": "channelNamespace",
+    "arn": "arn:${Partition}:appsync:${Region}:${Account}:apis/${ApiId}/channelNamespace/${ChannelNamespaceName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/geo-maps.json

@@ -0,0 +1,6 @@
+{
+  "provider": {
+    "key": "provider",
+    "arn": "arn:${Partition}:geo-maps:${Region}::provider/default"
+  }
+}

package/data/resourceTypes/geo-places.json

@@ -0,0 +1,6 @@
+{
+  "provider": {
+    "key": "provider",
+    "arn": "arn:${Partition}:geo-places:${Region}::provider/default"
+  }
+}

package/data/resourceTypes/geo-routes.json

@@ -0,0 +1,6 @@
+{
+  "provider": {
+    "key": "provider",
+    "arn": "arn:${Partition}:geo-routes:${Region}::provider/default"
+  }
+}

package/data/serviceNames.json

@@ -164,6 +164,9 @@
   "fsx": "Amazon FSx",
   "gamelift": "Amazon GameLift",
   "geo": "Amazon Location",
+  "geo-maps": "Amazon Location Service Maps",
+  "geo-places": "Amazon Location Service Places",
+  "geo-routes": "Amazon Location Service Routes",
   "glacier": "Amazon S3 Glacier",
   "globalaccelerator": "AWS Global Accelerator",
   "glue": "AWS Glue",

package/data/services.json

@@ -164,6 +164,9 @@
   "fsx",
   "gamelift",
   "geo",
+  "geo-maps",
+  "geo-places",
+  "geo-routes",
   "glacier",
   "globalaccelerator",
   "glue",

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.8.202411021",
+  "version": "0.8.202411071",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2024-11-02T04:47:44.596Z",
+  "updatedAt": "2024-11-07T04:47:34.746Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",