@cloud-copilot/iam-data 0.9.202411251 → 0.9.202411261

package/data/actions/aoss.json

@@ -11,7 +11,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aoss:collection",
+      "aoss:CollectionId"
+    ],
     "dependentActions": []
   },
   "batchgetcollection": {
@@ -117,7 +120,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aoss:collection",
+      "aoss:CollectionId"
+    ],
     "dependentActions": []
   },
   "deleteaccesspolicy": {

package/data/actions/networkmanager.json

@@ -231,6 +231,29 @@
     ],
     "dependentActions": []
   },
+  "createdirectconnectgatewayattachment": {
+    "name": "CreateDirectConnectGatewayAttachment",
+    "description": "Grants permission to create a Direct Connect gateway attachment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "core-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "ec2:DescribeRegions",
+          "networkmanager:TagResource"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "networkmanager:directConnectGatewayArn",
+      "networkmanager:edgeLocations"
+    ],
+    "dependentActions": []
+  },
   "createglobalnetwork": {
     "name": "CreateGlobalNetwork",
     "description": "Grants permission to create a new global network",
@@ -864,6 +887,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdirectconnectgatewayattachment": {
+    "name": "GetDirectConnectGatewayAttachment",
+    "description": "Grants permission to retrieve a Direct Connect gateway attachment",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "attachment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getlinkassociations": {
     "name": "GetLinkAssociations",
     "description": "Grants permission to describe link associations",
@@ -1555,6 +1593,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatedirectconnectgatewayattachment": {
+    "name": "UpdateDirectConnectGatewayAttachment",
+    "description": "Grants permission to update a Direct Connect gateway attachment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "attachment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "ec2:DescribeRegions"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "networkmanager:edgeLocations"
+    ],
+    "dependentActions": []
+  },
   "updateglobalnetwork": {
     "name": "UpdateGlobalNetwork",
     "description": "Grants permission to update a global network",

package/data/actions/redshift-data.json

@@ -18,7 +18,8 @@
       }
     ],
     "conditionKeys": [
-      "redshift-data:session-owner-iam-userid"
+      "redshift-data:session-owner-iam-userid",
+      "redshift-data:glue-catalog-arn"
     ],
     "dependentActions": []
   },
@@ -82,10 +83,26 @@
       }
     ],
     "conditionKeys": [
-      "redshift-data:session-owner-iam-userid"
+      "redshift-data:session-owner-iam-userid",
+      "redshift-data:glue-catalog-arn"
     ],
     "dependentActions": []
   },
+  "getstagingbucketlocation": {
+    "name": "GetStagingBucketLocation",
+    "description": "Grants permission to get staging bucket location for a given managed workgroup",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "managed-workgroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getstatementresult": {
     "name": "GetStatementResult",
     "description": "Grants permission to fetch the result of a query",

package/data/actions/redshift-serverless.json

@@ -326,6 +326,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getmanagedworkgroup": {
+    "name": "GetManagedWorkgroup",
+    "description": "Grants permission to create a Amazon Redshift Managed Serverless workgroup with the specified configuration settings",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "managed-workgroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getnamespace": {
     "name": "GetNamespace",
     "description": "Grants permission to get information about a namespace in Amazon Redshift Serverless",

package/data/conditionKeys/networkmanager.json

@@ -19,6 +19,16 @@
     "description": "Filters access by which customer gateways can be associated or disassociated",
     "type": "ARN"
   },
+  "networkmanager:directconnectgatewayarn": {
+    "key": "networkmanager:directConnectGatewayArn",
+    "description": "Filters access by which Direct Connect gateway can be used to a create/update attachment",
+    "type": "ARN"
+  },
+  "networkmanager:edgelocations": {
+    "key": "networkmanager:edgeLocations",
+    "description": "Filters access by which edge locations can be added or removed from a Direct Connect gateway attachment",
+    "type": "ArrayOfString"
+  },
   "networkmanager:subnetarns": {
     "key": "networkmanager:subnetArns",
     "description": "Filters access by which VPC subnets can be added or removed from a VPC attachment",

package/data/conditionKeys/redshift-data.json

@@ -4,6 +4,11 @@
     "description": "Filters access by tag-value associated with the resource",
     "type": "String"
   },
+  "redshift-data:glue-catalog-arn": {
+    "key": "redshift-data:glue-catalog-arn",
+    "description": "Filters access by glue catalog arn",
+    "type": "ARN"
+  },
   "redshift-data:session-owner-iam-userid": {
     "key": "redshift-data:session-owner-iam-userid",
     "description": "Filters access by session owner iam userid",

package/data/conditionKeys/redshift-serverless.json

@@ -19,6 +19,11 @@
     "description": "Filters access by the endpoint access identifier",
     "type": "String"
   },
+  "redshift-serverless:managedworkgroupname": {
+    "key": "redshift-serverless:managedWorkgroupName",
+    "description": "Filters access by the managed workgroup identifier",
+    "type": "String"
+  },
   "redshift-serverless:namespaceid": {
     "key": "redshift-serverless:namespaceId",
     "description": "Filters access by the namespace identifier",

package/data/resourceTypes/redshift-data.json

@@ -12,5 +12,9 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "managed-workgroup": {
+    "key": "managed-workgroup",
+    "arn": "arn:${Partition}:redshift-serverless:${Region}:${Account}:managed-workgroup/${ManagedWorkgroupId}"
   }
 }

package/data/resourceTypes/redshift-serverless.json

@@ -20,6 +20,10 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "managed-workgroup": {
+    "key": "managed-workgroup",
+    "arn": "arn:${Partition}:redshift-serverless:${Region}:${Account}:managed-workgroup/${ManagedWorkgroupName}"
+  },
   "recoverypoint": {
     "key": "recoveryPoint",
     "arn": "arn:${Partition}:redshift-serverless:${Region}:${Account}:recoverypoint/${RecoveryPointId}",

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202411251",
+  "version": "0.9.202411261",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2024-11-25T04:47:16.782Z",
+  "updatedAt": "2024-11-26T04:47:07.046Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",