@cloud-copilot/iam-data 0.9.202501101 → 0.9.202501121

package/data/actions/apigateway.json

@@ -52,6 +52,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "DomainNameAccessAssociation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "GatewayResponse",
         "required": false,
@@ -88,6 +94,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "PrivateBasePathMapping",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "PrivateDomainName",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "RequestValidator",
         "required": false,
@@ -250,6 +268,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "DomainNameAccessAssociations",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "DomainNames",
         "required": false,
@@ -304,6 +328,24 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "PrivateBasePathMapping",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "PrivateBasePathMappings",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "PrivateDomainName",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "RequestValidator",
         "required": false,
@@ -499,6 +541,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "PrivateBasePathMapping",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "PrivateDomainName",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "RequestValidator",
         "required": false,
@@ -601,6 +655,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "DomainNameAccessAssociations",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "DomainNames",
         "required": false,
@@ -631,6 +691,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "PrivateBasePathMappings",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "RequestValidators",
         "required": false,
@@ -749,6 +815,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createaccessassociation": {
+    "name": "CreateAccessAssociation",
+    "description": "Grants permission to create an access association from an access association source to a custom domain name for private APIs",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "PrivateDomainName",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "rejectaccessassociation": {
+    "name": "RejectAccessAssociation",
+    "description": "Grants permission to reject an existing access association owned by another account to a custom domain name for private APIs",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "PrivateDomainName",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "removecertificatefromdomain": {
     "name": "RemoveCertificateFromDomain",
     "description": "Grants permission to remove certificates for mutual TLS authentication from a domain name. This is an additional authorization control for managing the DomainName resource due to the sensitive nature of mTLS",
@@ -791,6 +887,42 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatedomainnamemanagementpolicy": {
+    "name": "UpdateDomainNameManagementPolicy",
+    "description": "Grants permission to update the management policy of a custom domain name for private APIs",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "PrivateDomainName",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatedomainnamepolicy": {
+    "name": "UpdateDomainNamePolicy",
+    "description": "Grants permission to update the invoke policy of a custom domain name for private APIs",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "DomainNames",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "PrivateDomainName",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updaterestapipolicy": {
     "name": "UpdateRestApiPolicy",
     "description": "Grants permission to manage the IAM resource policy for an API. This is an additional authorization control for managing an API due to the sensitive nature of the resource policy",

package/data/actions/imagebuilder.json

@@ -674,6 +674,32 @@
       "kms:GenerateDataKeyWithoutPlaintext"
     ]
   },
+  "importdiskimage": {
+    "name": "ImportDiskImage",
+    "description": "Grants permission to import a disk image",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "imageVersion",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": [
+      "iam:CreateServiceLinkedRole",
+      "iam:PassRole",
+      "imagebuilder:GetInfrastructureConfiguration",
+      "imagebuilder:GetWorkflow",
+      "imagebuilder:TagResource",
+      "s3:GetObject",
+      "s3:ListBucket"
+    ]
+  },
   "importvmimage": {
     "name": "ImportVmImage",
     "description": "Grants permission to import an image",

package/data/actions/medialive.json

@@ -1377,6 +1377,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listversions": {
+    "name": "ListVersions",
+    "description": "Grants permission to list available versions of MediaLive",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "pollanywhere": {
     "name": "PollAnywhere",
     "description": "Grants permission to the node to poll the cluster",

package/data/conditionKeys/apigateway.json

@@ -138,5 +138,15 @@
     "key": "aws:TagKeys",
     "description": "Filters access by the tag keys in the request",
     "type": "ArrayOfString"
+  },
+  "apigateway:request/accessassociationsource": {
+    "key": "apigateway:Request/AccessAssociationSource",
+    "description": "Filters access by access association source. Available during the CreateDomainNameAccessAssociation operation",
+    "type": "String"
+  },
+  "apigateway:request/domainnamearn": {
+    "key": "apigateway:Request/DomainNameArn",
+    "description": "Filters access by domain name ARN. Available during the CreateDomainNameAccessAssociation operation",
+    "type": "ARN"
   }
 }

package/data/resourceTypes/apigateway.json

@@ -342,6 +342,19 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "domainnameaccessassociation": {
+    "key": "DomainNameAccessAssociation",
+    "arn": "arn:${Partition}:apigateway:${Region}:${Account}:/domainnameaccessassociations/domainname/${DomainName}/${SourceType}/${SourceId}"
+  },
+  "domainnameaccessassociations": {
+    "key": "DomainNameAccessAssociations",
+    "arn": "arn:${Partition}:apigateway:${Region}:${Account}:/domainnameaccessassociations",
+    "conditionKeys": [
+      "apigateway:Request/AccessAssociationSource",
+      "apigateway:Request/DomainNameArn",
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "gatewayresponse": {
     "key": "GatewayResponse",
     "arn": "arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/gatewayresponses/${ResponseType}",
@@ -374,6 +387,29 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "privatebasepathmapping": {
+    "key": "PrivateBasePathMapping",
+    "arn": "arn:${Partition}:apigateway:${Region}::/domainnames/${DomainName}+${DomainIdentifier}/basepathmappings/${BasePath}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "privatebasepathmappings": {
+    "key": "PrivateBasePathMappings",
+    "arn": "arn:${Partition}:apigateway:${Region}::/domainnames/${DomainName}+${DomainIdentifier}/basepathmappings",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "privatedomainname": {
+    "key": "PrivateDomainName",
+    "arn": "arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/${DomainName}+${DomainIdentifier}",
+    "conditionKeys": [
+      "apigateway:Request/EndpointType",
+      "apigateway:Resource/EndpointType",
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "requestvalidator": {
     "key": "RequestValidator",
     "arn": "arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/requestvalidators/${RequestValidatorId}",

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202501101",
+  "version": "0.9.202501121",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2025-01-10T04:44:08.884Z",
+  "updatedAt": "2025-01-12T04:43:58.601Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",