@cloud-copilot/iam-data 0.9.202501101 → 0.9.202501141

package/data/actions/apigateway.json

@@ -52,6 +52,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "DomainNameAccessAssociation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "GatewayResponse",
         "required": false,
@@ -88,6 +94,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "PrivateBasePathMapping",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "PrivateDomainName",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "RequestValidator",
         "required": false,
@@ -250,6 +268,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "DomainNameAccessAssociations",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "DomainNames",
         "required": false,
@@ -304,6 +328,24 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "PrivateBasePathMapping",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "PrivateBasePathMappings",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "PrivateDomainName",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "RequestValidator",
         "required": false,
@@ -499,6 +541,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "PrivateBasePathMapping",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "PrivateDomainName",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "RequestValidator",
         "required": false,
@@ -601,6 +655,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "DomainNameAccessAssociations",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "DomainNames",
         "required": false,
@@ -631,6 +691,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "PrivateBasePathMappings",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "RequestValidators",
         "required": false,
@@ -749,6 +815,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createaccessassociation": {
+    "name": "CreateAccessAssociation",
+    "description": "Grants permission to create an access association from an access association source to a custom domain name for private APIs",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "PrivateDomainName",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "rejectaccessassociation": {
+    "name": "RejectAccessAssociation",
+    "description": "Grants permission to reject an existing access association owned by another account to a custom domain name for private APIs",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "PrivateDomainName",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "removecertificatefromdomain": {
     "name": "RemoveCertificateFromDomain",
     "description": "Grants permission to remove certificates for mutual TLS authentication from a domain name. This is an additional authorization control for managing the DomainName resource due to the sensitive nature of mTLS",
@@ -791,6 +887,42 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatedomainnamemanagementpolicy": {
+    "name": "UpdateDomainNameManagementPolicy",
+    "description": "Grants permission to update the management policy of a custom domain name for private APIs",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "PrivateDomainName",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatedomainnamepolicy": {
+    "name": "UpdateDomainNamePolicy",
+    "description": "Grants permission to update the invoke policy of a custom domain name for private APIs",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "DomainNames",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "PrivateDomainName",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updaterestapipolicy": {
     "name": "UpdateRestApiPolicy",
     "description": "Grants permission to manage the IAM resource policy for an API. This is an additional authorization control for managing an API due to the sensitive nature of the resource policy",

package/data/actions/datasync.json

@@ -822,6 +822,81 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatelocationefs": {
+    "name": "UpdateLocationEfs",
+    "description": "Grants permission to update an EFS sync Location",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "location",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatelocationfsxlustre": {
+    "name": "UpdateLocationFsxLustre",
+    "description": "Grants permission to update an FSx Lustre sync Location",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "location",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatelocationfsxontap": {
+    "name": "UpdateLocationFsxOntap",
+    "description": "Grants permission to update an FSx ONTAP sync Location",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "location",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatelocationfsxopenzfs": {
+    "name": "UpdateLocationFsxOpenZfs",
+    "description": "Grants permission to update an FSx OpenZFS sync Location",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "location",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatelocationfsxwindows": {
+    "name": "UpdateLocationFsxWindows",
+    "description": "Grants permission to update an FSx Windows sync Location",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "location",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatelocationhdfs": {
     "name": "UpdateLocationHdfs",
     "description": "Grants permission to update an HDFS sync Location",
@@ -867,6 +942,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatelocations3": {
+    "name": "UpdateLocationS3",
+    "description": "Grants permission to update an S3 sync Location",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "location",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatelocationsmb": {
     "name": "UpdateLocationSmb",
     "description": "Grants permission to update a SMB sync location",

package/data/actions/imagebuilder.json

@@ -674,6 +674,32 @@
       "kms:GenerateDataKeyWithoutPlaintext"
     ]
   },
+  "importdiskimage": {
+    "name": "ImportDiskImage",
+    "description": "Grants permission to import a disk image",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "imageVersion",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": [
+      "iam:CreateServiceLinkedRole",
+      "iam:PassRole",
+      "imagebuilder:GetInfrastructureConfiguration",
+      "imagebuilder:GetWorkflow",
+      "imagebuilder:TagResource",
+      "s3:GetObject",
+      "s3:ListBucket"
+    ]
+  },
   "importvmimage": {
     "name": "ImportVmImage",
     "description": "Grants permission to import an image",

package/data/actions/medialive.json

@@ -1377,6 +1377,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listversions": {
+    "name": "ListVersions",
+    "description": "Grants permission to list available versions of MediaLive",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "pollanywhere": {
     "name": "PollAnywhere",
     "description": "Grants permission to the node to poll the cluster",

package/data/actions/transcribe.json

@@ -4,7 +4,10 @@
     "description": "Grants permission to create an analytics category. Amazon Transcribe applies the conditions specified by your analytics categories to your call analytics jobs",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createlanguagemodel": {
@@ -64,7 +67,14 @@
     "name": "DeleteCallAnalyticsCategory",
     "description": "Grants permission to delete a call analytics category using its name from Amazon Transcribe",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "callanalyticscategory",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -72,7 +82,14 @@
     "name": "DeleteCallAnalyticsJob",
     "description": "Grants permission to delete a previously submitted call analytics job along with any other generated results such as the transcription, models, and so on",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "callanalyticsjob",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -200,7 +217,14 @@
     "name": "GetCallAnalyticsCategory",
     "description": "Grants permission to retrieve information about a call analytics category",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "callanalyticscategory",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -208,7 +232,14 @@
     "name": "GetCallAnalyticsJob",
     "description": "Grants permission to return information about a call analytics job",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "callanalyticsjob",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -389,7 +420,9 @@
     "resourceTypes": [],
     "conditionKeys": [
       "transcribe:OutputEncryptionKMSKeyId",
-      "transcribe:OutputLocation"
+      "transcribe:OutputLocation",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": [
       "s3:GetObject"
@@ -515,7 +548,14 @@
     "name": "UpdateCallAnalyticsCategory",
     "description": "Grants permission to update the call analytics category with new values. The UpdateCallAnalyticsCategory operation overwrites all of the existing information with the values that you provide in the request",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "callanalyticscategory",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },

package/data/conditionKeys/apigateway.json

@@ -138,5 +138,15 @@
     "key": "aws:TagKeys",
     "description": "Filters access by the tag keys in the request",
     "type": "ArrayOfString"
+  },
+  "apigateway:request/accessassociationsource": {
+    "key": "apigateway:Request/AccessAssociationSource",
+    "description": "Filters access by access association source. Available during the CreateDomainNameAccessAssociation operation",
+    "type": "String"
+  },
+  "apigateway:request/domainnamearn": {
+    "key": "apigateway:Request/DomainNameArn",
+    "description": "Filters access by domain name ARN. Available during the CreateDomainNameAccessAssociation operation",
+    "type": "ARN"
   }
 }

package/data/resourceTypes/apigateway.json

@@ -342,6 +342,19 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "domainnameaccessassociation": {
+    "key": "DomainNameAccessAssociation",
+    "arn": "arn:${Partition}:apigateway:${Region}:${Account}:/domainnameaccessassociations/domainname/${DomainName}/${SourceType}/${SourceId}"
+  },
+  "domainnameaccessassociations": {
+    "key": "DomainNameAccessAssociations",
+    "arn": "arn:${Partition}:apigateway:${Region}:${Account}:/domainnameaccessassociations",
+    "conditionKeys": [
+      "apigateway:Request/AccessAssociationSource",
+      "apigateway:Request/DomainNameArn",
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "gatewayresponse": {
     "key": "GatewayResponse",
     "arn": "arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/gatewayresponses/${ResponseType}",
@@ -374,6 +387,29 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "privatebasepathmapping": {
+    "key": "PrivateBasePathMapping",
+    "arn": "arn:${Partition}:apigateway:${Region}::/domainnames/${DomainName}+${DomainIdentifier}/basepathmappings/${BasePath}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "privatebasepathmappings": {
+    "key": "PrivateBasePathMappings",
+    "arn": "arn:${Partition}:apigateway:${Region}::/domainnames/${DomainName}+${DomainIdentifier}/basepathmappings",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "privatedomainname": {
+    "key": "PrivateDomainName",
+    "arn": "arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/${DomainName}+${DomainIdentifier}",
+    "conditionKeys": [
+      "apigateway:Request/EndpointType",
+      "apigateway:Resource/EndpointType",
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "requestvalidator": {
     "key": "RequestValidator",
     "arn": "arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/requestvalidators/${RequestValidatorId}",

package/data/resourceTypes/transcribe.json

@@ -43,11 +43,17 @@
   },
   "callanalyticsjob": {
     "key": "callanalyticsjob",
-    "arn": "arn:${Partition}:transcribe:${Region}:${Account}:analytics-job/${JobName}"
+    "arn": "arn:${Partition}:transcribe:${Region}:${Account}:analytics-job/${JobName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "callanalyticscategory": {
     "key": "callanalyticscategory",
-    "arn": "arn:${Partition}:transcribe:${Region}:${Account}:analytics-category/${CategoryName}"
+    "arn": "arn:${Partition}:transcribe:${Region}:${Account}:analytics-category/${CategoryName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "medicalscribejob": {
     "key": "medicalscribejob",

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202501101",
+  "version": "0.9.202501141",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2025-01-10T04:44:08.884Z",
+  "updatedAt": "2025-01-14T04:43:04.501Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",