@cloud-copilot/iam-data 0.9.202412101 → 0.9.202412111

package/data/actions/cleanrooms.json

@@ -1269,7 +1269,7 @@
     "name": "PassCollaboration",
     "isPermissionOnly": true,
     "description": "Grants permission to access a collaboration in the context of Clean Rooms ML custom models",
-    "accessLevel": "Write",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "collaboration",
@@ -1285,7 +1285,7 @@
     "name": "PassMembership",
     "isPermissionOnly": true,
     "description": "Grants permission to access a membership in the context of Clean Rooms ML custom models",
-    "accessLevel": "Write",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "membership",

package/data/actions/cognito-idp.json

@@ -496,6 +496,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createmanagedloginbranding": {
+    "name": "CreateManagedLoginBranding",
+    "description": "Grants permission to create a branding settings for managed login and associate it with an app client",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createresourceserver": {
     "name": "CreateResourceServer",
     "description": "Grants permission to create and configure scopes for OAuth 2.0 resource servers",
@@ -598,6 +613,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletemanagedloginbranding": {
+    "name": "DeleteManagedLoginBranding",
+    "description": "Grants permission to delete the managed login branding style for any app client",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteresourceserver": {
     "name": "DeleteResourceServer",
     "description": "Grants permission to delete any OAuth 2.0 resource server from user pools",
@@ -689,6 +719,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describemanagedloginbranding": {
+    "name": "DescribeManagedLoginBranding",
+    "description": "Grants permission to get the detailed information about the branding style of managed login",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describemanagedloginbrandingbyclient": {
+    "name": "DescribeManagedLoginBrandingByClient",
+    "description": "Grants permission to get the detailed information about the branding style of managed login associated with an appclient",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeresourceserver": {
     "name": "DescribeResourceServer",
     "description": "Grants permission to describe any OAuth 2.0 resource server",
@@ -1343,6 +1403,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatemanagedloginbranding": {
+    "name": "UpdateManagedLoginBranding",
+    "description": "Grants permission to update the branding settings of a managed login",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateresourceserver": {
     "name": "UpdateResourceServer",
     "description": "Grants permission to update the configuration of any OAuth 2.0 resource server",

package/data/actions/mgn.json

@@ -144,6 +144,14 @@
     ],
     "dependentActions": []
   },
+  "createnetworkmigrationdefinition": {
+    "name": "CreateNetworkMigrationDefinition",
+    "description": "Grants permission to create a network migration definition",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createreplicationconfigurationtemplate": {
     "name": "CreateReplicationConfigurationTemplate",
     "description": "Grants permission to create replication configuration template",
@@ -238,6 +246,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletenetworkmigrationdefinition": {
+    "name": "DeleteNetworkMigrationDefinition",
+    "description": "Grants permission to delete a network migration definition",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletereplicationconfigurationtemplate": {
     "name": "DeleteReplicationConfigurationTemplate",
     "description": "Grants permission to delete replication configuration template",
@@ -556,6 +579,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getnetworkmigrationdefinition": {
+    "name": "GetNetworkMigrationDefinition",
+    "description": "Grants permission to get a network migration definition",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getnetworkmigrationmappersegmentconstruct": {
+    "name": "GetNetworkMigrationMapperSegmentConstruct",
+    "description": "Grants permission to get a network migration mapper segment construct",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getreplicationconfiguration": {
     "name": "GetReplicationConfiguration",
     "description": "Grants permission to get replication configuration",
@@ -686,6 +739,179 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listnetworkmigrationanalyses": {
+    "name": "ListNetworkMigrationAnalyses",
+    "description": "Grants permission to list network migration analyses",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationanalysisresults": {
+    "name": "ListNetworkMigrationAnalysisResults",
+    "description": "Grants permission to list network migration analysis results",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationcodegenerationsegments": {
+    "name": "ListNetworkMigrationCodeGenerationSegments",
+    "description": "Grants permission to list network migration code generation segments",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationcodegenerations": {
+    "name": "ListNetworkMigrationCodeGenerations",
+    "description": "Grants permission to list network migration code generations",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationdefinitions": {
+    "name": "ListNetworkMigrationDefinitions",
+    "description": "Grants permission to list network migration definitions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationdeployedstacks": {
+    "name": "ListNetworkMigrationDeployedStacks",
+    "description": "Grants permission to list network migration deployed stacks",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationdeployedstacksdeletions": {
+    "name": "ListNetworkMigrationDeployedStacksDeletions",
+    "description": "Grants permission to list network migration deployed stacks deletions",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationdeployments": {
+    "name": "ListNetworkMigrationDeployments",
+    "description": "Grants permission to list network migration deployments",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationexecutions": {
+    "name": "ListNetworkMigrationExecutions",
+    "description": "Grants permission to list network migration executions",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationmappersegmentconstructs": {
+    "name": "ListNetworkMigrationMapperSegmentConstructs",
+    "description": "Grants permission to list network migration mapper segment constructs",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationmappersegments": {
+    "name": "ListNetworkMigrationMapperSegments",
+    "description": "Grants permission to list network migration mapper segments",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationmappings": {
+    "name": "ListNetworkMigrationMappings",
+    "description": "Grants permission to list network migration mappings",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listsourceserveractions": {
     "name": "ListSourceServerActions",
     "description": "Grants permission to list source server action documents",
@@ -1140,6 +1366,323 @@
       "s3:PutObject"
     ]
   },
+  "startnetworkmigrationanalysis": {
+    "name": "StartNetworkMigrationAnalysis",
+    "description": "Grants permission to start a network migration analysis",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "directconnect:DescribeConnections",
+      "directconnect:DescribeDirectConnectGatewayAssociations",
+      "directconnect:DescribeDirectConnectGatewayAttachments",
+      "directconnect:DescribeDirectConnectGateways",
+      "directconnect:DescribeVirtualGateways",
+      "directconnect:DescribeVirtualInterfaces",
+      "ec2:AuthorizeSecurityGroupIngress",
+      "ec2:CreateNetworkInsightsPath",
+      "ec2:CreateNetworkInterface",
+      "ec2:CreateSecurityGroup",
+      "ec2:CreateTags",
+      "ec2:DeleteNetworkInsightsAnalysis",
+      "ec2:DeleteNetworkInsightsPath",
+      "ec2:DeleteNetworkInterface",
+      "ec2:DeleteSecurityGroup",
+      "ec2:DeleteTags",
+      "ec2:DescribeAvailabilityZones",
+      "ec2:DescribeCustomerGateways",
+      "ec2:DescribeInstances",
+      "ec2:DescribeInternetGateways",
+      "ec2:DescribeManagedPrefixLists",
+      "ec2:DescribeNatGateways",
+      "ec2:DescribeNetworkAcls",
+      "ec2:DescribeNetworkInsightsAnalyses",
+      "ec2:DescribeNetworkInsightsPaths",
+      "ec2:DescribeNetworkInterfaces",
+      "ec2:DescribePrefixLists",
+      "ec2:DescribeRegions",
+      "ec2:DescribeRouteTables",
+      "ec2:DescribeSecurityGroups",
+      "ec2:DescribeSubnets",
+      "ec2:DescribeTransitGatewayAttachments",
+      "ec2:DescribeTransitGatewayConnects",
+      "ec2:DescribeTransitGatewayPeeringAttachments",
+      "ec2:DescribeTransitGatewayRouteTables",
+      "ec2:DescribeTransitGatewayVpcAttachments",
+      "ec2:DescribeTransitGateways",
+      "ec2:DescribeVpcEndpointServiceConfigurations",
+      "ec2:DescribeVpcEndpoints",
+      "ec2:DescribeVpcPeeringConnections",
+      "ec2:DescribeVpcs",
+      "ec2:DescribeVpnConnections",
+      "ec2:DescribeVpnGateways",
+      "ec2:GetManagedPrefixListEntries",
+      "ec2:GetTransitGatewayRouteTablePropagations",
+      "ec2:SearchTransitGatewayRoutes",
+      "ec2:StartNetworkInsightsAnalysis",
+      "elasticloadbalancing:DescribeListeners",
+      "elasticloadbalancing:DescribeLoadBalancerAttributes",
+      "elasticloadbalancing:DescribeLoadBalancers",
+      "elasticloadbalancing:DescribeRules",
+      "elasticloadbalancing:DescribeTags",
+      "elasticloadbalancing:DescribeTargetGroupAttributes",
+      "elasticloadbalancing:DescribeTargetGroups",
+      "elasticloadbalancing:DescribeTargetHealth",
+      "globalaccelerator:ListAccelerators",
+      "globalaccelerator:ListCustomRoutingAccelerators",
+      "globalaccelerator:ListCustomRoutingEndpointGroups",
+      "globalaccelerator:ListCustomRoutingListeners",
+      "globalaccelerator:ListCustomRoutingPortMappings",
+      "globalaccelerator:ListEndpointGroups",
+      "globalaccelerator:ListListeners",
+      "network-firewall:DescribeFirewall",
+      "network-firewall:DescribeFirewallPolicy",
+      "network-firewall:DescribeResourcePolicy",
+      "network-firewall:DescribeRuleGroup",
+      "network-firewall:ListFirewallPolicies",
+      "network-firewall:ListFirewalls",
+      "network-firewall:ListRuleGroups",
+      "tiros:CreateQuery",
+      "tiros:ExtendQuery",
+      "tiros:GetQueryAnswer",
+      "tiros:GetQueryExplanation",
+      "tiros:GetQueryExtensionAccounts"
+    ]
+  },
+  "startnetworkmigrationcodegeneration": {
+    "name": "StartNetworkMigrationCodeGeneration",
+    "description": "Grants permission to start network migration code generation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startnetworkmigrationdeployedstacksdeletion": {
+    "name": "StartNetworkMigrationDeployedStacksDeletion",
+    "description": "Grants permission to start deletion of network migration deployed stacks",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:AcceptTransitGatewayVpcAttachment",
+      "ec2:AssociateNatGatewayAddress",
+      "ec2:AssociateRouteTable",
+      "ec2:AssociateSubnetCidrBlock",
+      "ec2:AssociateTransitGatewayRouteTable",
+      "ec2:AssociateVpcCidrBlock",
+      "ec2:AttachInternetGateway",
+      "ec2:AttachVolume",
+      "ec2:AuthorizeSecurityGroupEgress",
+      "ec2:AuthorizeSecurityGroupIngress",
+      "ec2:DeleteInternetGateway",
+      "ec2:DeleteLaunchTemplate",
+      "ec2:DeleteLaunchTemplateVersions",
+      "ec2:DeleteNatGateway",
+      "ec2:DeleteNetworkAcl",
+      "ec2:DeleteNetworkAclEntry",
+      "ec2:DeleteNetworkInsightsAnalysis",
+      "ec2:DeleteNetworkInsightsPath",
+      "ec2:DeleteNetworkInterface",
+      "ec2:DeleteRoute",
+      "ec2:DeleteRouteTable",
+      "ec2:DeleteSecurityGroup",
+      "ec2:DeleteSnapshot",
+      "ec2:DeleteSubnet",
+      "ec2:DeleteTransitGateway",
+      "ec2:DeleteTransitGatewayRoute",
+      "ec2:DeleteTransitGatewayRouteTable",
+      "ec2:DeleteTransitGatewayVpcAttachment",
+      "ec2:DeleteVolume",
+      "ec2:DeleteVpc",
+      "ec2:DetachInternetGateway",
+      "ec2:DetachVolume",
+      "ec2:DisableTransitGatewayRouteTablePropagation",
+      "ec2:DisassociateNatGatewayAddress",
+      "ec2:DisassociateRouteTable",
+      "ec2:DisassociateTransitGatewayRouteTable",
+      "ec2:EnableTransitGatewayRouteTablePropagation",
+      "ec2:ModifyInstanceAttribute",
+      "ec2:ModifyLaunchTemplate",
+      "ec2:ModifySubnetAttribute",
+      "ec2:ModifyTransitGateway",
+      "ec2:ModifyTransitGatewayVpcAttachment",
+      "ec2:ModifyVolume",
+      "ec2:ModifyVpcAttribute",
+      "ec2:RejectTransitGatewayVpcAttachment",
+      "ec2:ReleaseAddress",
+      "ec2:ReplaceNetworkAclAssociation",
+      "ec2:ReplaceNetworkAclEntry",
+      "ec2:ReplaceRoute",
+      "ec2:ReplaceTransitGatewayRoute",
+      "ec2:RevokeSecurityGroupEgress",
+      "ec2:RevokeSecurityGroupIngress",
+      "ec2:SearchTransitGatewayRoutes"
+    ]
+  },
+  "startnetworkmigrationdeployment": {
+    "name": "StartNetworkMigrationDeployment",
+    "description": "Grants permission to start a network migration deployment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:AcceptTransitGatewayVpcAttachment",
+      "ec2:AssociateNatGatewayAddress",
+      "ec2:AssociateRouteTable",
+      "ec2:AssociateSubnetCidrBlock",
+      "ec2:AssociateTransitGatewayRouteTable",
+      "ec2:AssociateVpcCidrBlock",
+      "ec2:AttachInternetGateway",
+      "ec2:AttachVolume",
+      "ec2:AuthorizeSecurityGroupEgress",
+      "ec2:AuthorizeSecurityGroupIngress",
+      "ec2:CreateNatGateway",
+      "ec2:CreateNetworkAcl",
+      "ec2:CreateNetworkAclEntry",
+      "ec2:CreateNetworkInsightsPath",
+      "ec2:CreateNetworkInterface",
+      "ec2:CreateRoute",
+      "ec2:CreateRouteTable",
+      "ec2:CreateSecurityGroup",
+      "ec2:CreateSubnet",
+      "ec2:CreateTags",
+      "ec2:CreateTransitGatewayRoute",
+      "ec2:CreateTransitGatewayRouteTable",
+      "ec2:CreateTransitGatewayVpcAttachment",
+      "ec2:DeleteInternetGateway",
+      "ec2:DeleteLaunchTemplate",
+      "ec2:DeleteLaunchTemplateVersions",
+      "ec2:DeleteNatGateway",
+      "ec2:DeleteNetworkAcl",
+      "ec2:DeleteNetworkAclEntry",
+      "ec2:DeleteNetworkInsightsAnalysis",
+      "ec2:DeleteNetworkInsightsPath",
+      "ec2:DeleteNetworkInterface",
+      "ec2:DeleteRoute",
+      "ec2:DeleteRouteTable",
+      "ec2:DeleteSecurityGroup",
+      "ec2:DeleteSnapshot",
+      "ec2:DeleteSubnet",
+      "ec2:DeleteTransitGateway",
+      "ec2:DeleteTransitGatewayRoute",
+      "ec2:DeleteTransitGatewayRouteTable",
+      "ec2:DeleteTransitGatewayVpcAttachment",
+      "ec2:DeleteVolume",
+      "ec2:DeleteVpc",
+      "ec2:DescribeAccountAttributes",
+      "ec2:DescribeAddresses",
+      "ec2:DescribeAvailabilityZones",
+      "ec2:DescribeCustomerGateways",
+      "ec2:DescribeEgressOnlyInternetGateways",
+      "ec2:DescribeHosts",
+      "ec2:DescribeImages",
+      "ec2:DescribeInstanceAttribute",
+      "ec2:DescribeInstanceStatus",
+      "ec2:DescribeInstanceTypes",
+      "ec2:DescribeInstances",
+      "ec2:DescribeInternetGateways",
+      "ec2:DescribeLaunchTemplateVersions",
+      "ec2:DescribeLaunchTemplates",
+      "ec2:DescribeManagedPrefixLists",
+      "ec2:DescribeNatGateways",
+      "ec2:DescribeNetworkAcls",
+      "ec2:DescribeNetworkInsightsAnalyses",
+      "ec2:DescribeNetworkInsightsPaths",
+      "ec2:DescribeNetworkInterfaces",
+      "ec2:DescribePrefixLists",
+      "ec2:DescribeRegions",
+      "ec2:DescribeRouteTables",
+      "ec2:DescribeSecurityGroupRules",
+      "ec2:DescribeSecurityGroups",
+      "ec2:DescribeSnapshots",
+      "ec2:DescribeSubnets",
+      "ec2:DescribeTransitGatewayAttachments",
+      "ec2:DescribeTransitGatewayConnects",
+      "ec2:DescribeTransitGatewayPeeringAttachments",
+      "ec2:DescribeTransitGatewayRouteTables",
+      "ec2:DescribeTransitGatewayVpcAttachments",
+      "ec2:DescribeTransitGateways",
+      "ec2:DescribeVolumes",
+      "ec2:DescribeVpcEndpointServiceConfigurations",
+      "ec2:DescribeVpcEndpoints",
+      "ec2:DescribeVpcPeeringConnections",
+      "ec2:DescribeVpcs",
+      "ec2:DescribeVpnConnections",
+      "ec2:DescribeVpnGateways",
+      "ec2:DetachInternetGateway",
+      "ec2:DetachVolume",
+      "ec2:DisableTransitGatewayRouteTablePropagation",
+      "ec2:DisassociateNatGatewayAddress",
+      "ec2:DisassociateRouteTable",
+      "ec2:DisassociateTransitGatewayRouteTable",
+      "ec2:EnableTransitGatewayRouteTablePropagation",
+      "ec2:GetEbsDefaultKmsKeyId",
+      "ec2:GetEbsEncryptionByDefault",
+      "ec2:GetManagedPrefixListEntries",
+      "ec2:GetTransitGatewayRouteTableAssociations",
+      "ec2:GetTransitGatewayRouteTablePropagations",
+      "ec2:ModifyInstanceAttribute",
+      "ec2:ModifyLaunchTemplate",
+      "ec2:ModifySubnetAttribute",
+      "ec2:ModifyTransitGateway",
+      "ec2:ModifyTransitGatewayVpcAttachment",
+      "ec2:ModifyVolume",
+      "ec2:ModifyVpcAttribute",
+      "ec2:RejectTransitGatewayVpcAttachment",
+      "ec2:ReleaseAddress",
+      "ec2:ReplaceNetworkAclAssociation",
+      "ec2:ReplaceNetworkAclEntry",
+      "ec2:ReplaceRoute",
+      "ec2:ReplaceTransitGatewayRoute",
+      "ec2:RevokeSecurityGroupEgress",
+      "ec2:RevokeSecurityGroupIngress",
+      "ec2:SearchTransitGatewayRoutes",
+      "ec2:StartNetworkInsightsAnalysis"
+    ]
+  },
+  "startnetworkmigrationmapping": {
+    "name": "StartNetworkMigrationMapping",
+    "description": "Grants permission to start a network migration mapping",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startreplication": {
     "name": "StartReplication",
     "description": "Grants permission to start replication",
@@ -1538,6 +2081,51 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatenetworkmigrationdefinition": {
+    "name": "UpdateNetworkMigrationDefinition",
+    "description": "Grants permission to update a network migration definition",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatenetworkmigrationmappersegment": {
+    "name": "UpdateNetworkMigrationMapperSegment",
+    "description": "Grants permission to update a network migration mapper segment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatenetworkmigrationmappersegmentconstruct": {
+    "name": "UpdateNetworkMigrationMapperSegmentConstruct",
+    "description": "Grants permission to update a network migration mapper segment construct",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatereplicationconfiguration": {
     "name": "UpdateReplicationConfiguration",
     "description": "Grants permission to update replication configuration",

package/data/resourceTypes/mgn.json

@@ -68,5 +68,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "networkmigrationdefinitionresource": {
+    "key": "NetworkMigrationDefinitionResource",
+    "arn": "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/${NetworkMigrationDefinitionID}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202412101",
+  "version": "0.9.202412111",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2024-12-10T04:47:20.347Z",
+  "updatedAt": "2024-12-11T04:47:49.091Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",