@cloud-copilot/iam-data 0.9.202501041 → 0.9.202501091

package/data/actions/appsync.json

@@ -563,6 +563,7 @@
   },
   "graphql": {
     "name": "GraphQL",
+    "isPermissionOnly": true,
     "description": "Grants permission to send a GraphQL query to a GraphQL API",
     "accessLevel": "Write",
     "resourceTypes": [

package/data/actions/cloudhsm.json

@@ -226,7 +226,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "ec2:DescribeSubnets"
+    ]
   },
   "putresourcepolicy": {
     "name": "PutResourcePolicy",

package/data/actions/s3.json

@@ -2966,7 +2966,7 @@
   "putbucketownershipcontrols": {
     "name": "PutBucketOwnershipControls",
     "description": "Grants permission to add, replace or delete ownership controls on a bucket",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [
       {
         "name": "bucket",

package/data/actions/secretsmanager.json

@@ -43,6 +43,7 @@
     "conditionKeys": [
       "secretsmanager:Name",
       "secretsmanager:Description",
+      "secretsmanager:KmsKeyArn",
       "secretsmanager:KmsKeyId",
       "aws:RequestTag/${TagKey}",
       "aws:ResourceTag/${TagKey}",
@@ -412,6 +413,7 @@
     "conditionKeys": [
       "secretsmanager:SecretId",
       "secretsmanager:Description",
+      "secretsmanager:KmsKeyArn",
       "secretsmanager:KmsKeyId",
       "secretsmanager:resource/AllowRotationLambdaArn",
       "secretsmanager:ResourceTag/tag-key",

package/data/actions/workspaces-web.json

@@ -20,6 +20,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "associatedataprotectionsettings": {
+    "name": "AssociateDataProtectionSettings",
+    "description": "Grants permission to associate data protection settings with web portals",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dataProtectionSettings",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "portal",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "associateipaccesssettings": {
     "name": "AssociateIpAccessSettings",
     "description": "Grants permission to associate ip access settings with web portals",
@@ -151,6 +172,17 @@
       "kms:GenerateDataKey"
     ]
   },
+  "createdataprotectionsettings": {
+    "name": "CreateDataProtectionSettings",
+    "description": "Grants permission to create data protection settings",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "createidentityprovider": {
     "name": "CreateIdentityProvider",
     "description": "Grants permission to create identity providers",
@@ -169,7 +201,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "createipaccesssettings": {
@@ -261,6 +296,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletedataprotectionsettings": {
+    "name": "DeleteDataProtectionSettings",
+    "description": "Grants permission to delete data protection settings",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dataProtectionSettings",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteidentityprovider": {
     "name": "DeleteIdentityProvider",
     "description": "Grants permission to delete identity providers",
@@ -387,6 +437,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disassociatedataprotectionsettings": {
+    "name": "DisassociateDataProtectionSettings",
+    "description": "Grants permission to disassociate data protection logging from web portals",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "portal",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disassociateipaccesssettings": {
     "name": "DisassociateIpAccessSettings",
     "description": "Grants permission to disassociate ip access logging from web portals",
@@ -492,6 +557,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdataprotectionsettings": {
+    "name": "GetDataProtectionSettings",
+    "description": "Grants permission to get details on data protection settings",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "dataProtectionSettings",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getidentityprovider": {
     "name": "GetIdentityProvider",
     "description": "Grants permission to get details on identity providers",
@@ -650,6 +730,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdataprotectionsettings": {
+    "name": "ListDataProtectionSettings",
+    "description": "Grants permission to list data protection settings",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listidentityproviders": {
     "name": "ListIdentityProviders",
     "description": "Grants permission to list identity providers",
@@ -755,6 +843,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "dataProtectionSettings",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "identityProvider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "ipAccessSettings",
         "required": false,
@@ -809,6 +909,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "dataProtectionSettings",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "identityProvider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "ipAccessSettings",
         "required": false,
@@ -866,6 +978,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatedataprotectionsettings": {
+    "name": "UpdateDataProtectionSettings",
+    "description": "Grants permission to update data protection settings",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dataProtectionSettings",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateidentityprovider": {
     "name": "UpdateIdentityProvider",
     "description": "Grants permission to update identity provider",

package/data/conditionKeys/secretsmanager.json

@@ -39,9 +39,14 @@
     "description": "Filters access by whether to overwrite a secret with the same name in the destination Region",
     "type": "Bool"
   },
+  "secretsmanager:kmskeyarn": {
+    "key": "secretsmanager:KmsKeyArn",
+    "description": "Filters access by the key ARN of the KMS key in the request",
+    "type": "ARN"
+  },
   "secretsmanager:kmskeyid": {
     "key": "secretsmanager:KmsKeyId",
-    "description": "Filters access by the key identifier of the KMS key in the request",
+    "description": "Filters access by the key identifier of the KMS key in the request. Deprecated: Use secretsmanager:KmsKeyArn",
     "type": "String"
   },
   "secretsmanager:modifyrotationrules": {

package/data/resourceTypes/workspaces-web.json

@@ -8,7 +8,10 @@
   },
   "identityprovider": {
     "key": "identityProvider",
-    "arn": "arn:${Partition}:workspaces-web:${Region}:${Account}:identityProvider/${PortalId}/${IdentityProviderId}"
+    "arn": "arn:${Partition}:workspaces-web:${Region}:${Account}:identityProvider/${PortalId}/${IdentityProviderId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "networksettings": {
     "key": "networkSettings",
@@ -51,5 +54,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "dataprotectionsettings": {
+    "key": "dataProtectionSettings",
+    "arn": "arn:${Partition}:workspaces-web:${Region}:${Account}:dataProtectionSettings/${DataProtectionSettingsId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202501041",
+  "version": "0.9.202501091",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2025-01-04T04:43:20.830Z",
+  "updatedAt": "2025-01-09T04:44:55.596Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",