@cloud-copilot/iam-data 0.9.202501161 → 0.9.202501221

package/data/actions/connect.json

@@ -610,6 +610,25 @@
     ],
     "dependentActions": []
   },
+  "createemailaddress": {
+    "name": "CreateEmailAddress",
+    "description": "Grants permission to create an email address resource in an Amazon Connect instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "instance",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "connect:InstanceId"
+    ],
+    "dependentActions": []
+  },
   "createevaluationform": {
     "name": "CreateEvaluationForm",
     "description": "Grants permission to create an evaluation form in the specified Amazon Connect instance. The form can be used to define questions related to agent performance, and create sections to organize such questions. Question and section identifiers cannot be duplicated within the same evaluation form",
@@ -1261,6 +1280,24 @@
     ],
     "dependentActions": []
   },
+  "deleteemailaddress": {
+    "name": "DeleteEmailAddress",
+    "description": "Grants permission to delete an email address resource in an Amazon Connect instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "email-address",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "connect:InstanceId"
+    ],
+    "dependentActions": []
+  },
   "deleteevaluationform": {
     "name": "DeleteEvaluationForm",
     "description": "Grants permission to delete an evaluation form in the specified Amazon Connect instance. If the version property is provided, only the specified version of the evaluation form is deleted",
@@ -1772,6 +1809,24 @@
     ],
     "dependentActions": []
   },
+  "describeemailaddress": {
+    "name": "DescribeEmailAddress",
+    "description": "Grants permission to describe an email address resource in an Amazon Connect instance",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "email-address",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "connect:InstanceId"
+    ],
+    "dependentActions": []
+  },
   "describeevaluationform": {
     "name": "DescribeEvaluationForm",
     "description": "Grants permission to describe an evaluation form in the specified Amazon Connect instance. If the version property is not provided, the latest version of the evaluation form is described",
@@ -2812,6 +2867,23 @@
     ],
     "dependentActions": []
   },
+  "listassociatedcontacts": {
+    "name": "ListAssociatedContacts",
+    "description": "Grants permission to list the contacts associated with an email address in an Amazon Connect instance",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "contact",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "connect:InstanceId"
+    ],
+    "dependentActions": []
+  },
   "listauthenticationprofiles": {
     "name": "ListAuthenticationProfiles",
     "description": "Grants permission to list authentication profile resources in an Amazon Connect instance",
@@ -3971,6 +4043,26 @@
     ],
     "dependentActions": []
   },
+  "searchemailaddresses": {
+    "name": "SearchEmailAddresses",
+    "description": "Grants permission to search email address resources in an Amazon Connect instance",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "instance",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "connect:DescribeEmailAddress"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "connect:InstanceId",
+      "connect:SearchTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "searchhoursofoperationoverrides": {
     "name": "SearchHoursOfOperationOverrides",
     "description": "Grants permission to search hours of operation override resources in an Amazon Connect instance",
@@ -4429,6 +4521,30 @@
     ],
     "dependentActions": []
   },
+  "startoutboundemailcontact": {
+    "name": "StartOutboundEmailContact",
+    "description": "Grants permission to initiate an outbound email using the Amazon Connect API",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "instance",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "contact-flow",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "connect:InstanceId"
+    ],
+    "dependentActions": []
+  },
   "startoutboundvoicecontact": {
     "name": "StartOutboundVoiceContact",
     "description": "Grants permission to initiate outbound calls using the Amazon Connect API",
@@ -5193,6 +5309,24 @@
     ],
     "dependentActions": []
   },
+  "updateemailaddressmetadata": {
+    "name": "UpdateEmailAddressMetadata",
+    "description": "Grants permission to update the metadata of an email address resource in an Amazon Connect instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "email-address",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "connect:InstanceId"
+    ],
+    "dependentActions": []
+  },
   "updateevaluationform": {
     "name": "UpdateEvaluationForm",
     "description": "Grants permission to update details about a specific evaluation form version in the specified Amazon Connect instance. Question and section identifiers cannot be duplicated within the same evaluation form",
@@ -5520,6 +5654,24 @@
     ],
     "dependentActions": []
   },
+  "updatequeueoutboundemailconfig": {
+    "name": "UpdateQueueOutboundEmailConfig",
+    "description": "Grants permission to update the outbound email configuration for a queue in an Amazon Connect instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "queue",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "connect:InstanceId"
+    ],
+    "dependentActions": []
+  },
   "updatequeuestatus": {
     "name": "UpdateQueueStatus",
     "description": "Grants permission to update queue status in an Amazon Connect instance",

package/data/actions/lakeformation.json

@@ -172,7 +172,9 @@
     "description": "Grants permission to virtual data lake access",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "lakeformation:EnabledOnlyForMetaDataAccess"
+    ],
     "dependentActions": []
   },
   "getdatacellsfilter": {

package/data/actions/notifications.json

@@ -14,6 +14,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "associatemanagednotificationaccountcontact": {
+    "name": "AssociateManagedNotificationAccountContact",
+    "description": "Grants permission to associate an Account contact to a particular Managed Notification Configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ManagedNotificationConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "associatemanagednotificationadditionalchannel": {
+    "name": "AssociateManagedNotificationAdditionalChannel",
+    "description": "Grants permission to associate a Channel to a particular Managed Notification Configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ManagedNotificationConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createeventrule": {
     "name": "CreateEventRule",
     "description": "Grants permission to create a new EventRule, associating it with a NotificationConfiguration",
@@ -71,6 +101,16 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disablenotificationsaccessfororganization": {
+    "name": "DisableNotificationsAccessForOrganization",
+    "description": "Grants permission to disable Service Trust for AWS User Notifications",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "organizations:DisableAWSServiceAccess"
+    ]
+  },
   "disassociatechannel": {
     "name": "DisassociateChannel",
     "description": "Grants permission to remove a Channel from a NotificationConfiguration",
@@ -86,6 +126,47 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disassociatemanagednotificationaccountcontact": {
+    "name": "DisassociateManagedNotificationAccountContact",
+    "description": "Grants permission to remove an Account contact from a Managed Notification Configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ManagedNotificationConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disassociatemanagednotificationadditionalchannel": {
+    "name": "DisassociateManagedNotificationAdditionalChannel",
+    "description": "Grants permission to remove a Channel from a Managed Notification Configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ManagedNotificationConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "enablenotificationsaccessfororganization": {
+    "name": "EnableNotificationsAccessForOrganization",
+    "description": "Grants permission to enable Service Trust for AWS User Notifications",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "iam:CreateServiceLinkedRole",
+      "organizations:EnableAWSServiceAccess"
+    ]
+  },
   "geteventrule": {
     "name": "GetEventRule",
     "description": "Grants permission to get an EventRule",
@@ -101,6 +182,60 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getfeatureoptinstatus": {
+    "name": "GetFeatureOptInStatus",
+    "isPermissionOnly": true,
+    "description": "Grants permission to read the opt-in status of an AWS User Notification Service feature",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmanagednotificationchildevent": {
+    "name": "GetManagedNotificationChildEvent",
+    "description": "Grants permission to get a Managed Notification Child Event",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ManagedNotificationChildEvent",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmanagednotificationconfiguration": {
+    "name": "GetManagedNotificationConfiguration",
+    "description": "Grants permission to get a Managed Notification Configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ManagedNotificationConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmanagednotificationevent": {
+    "name": "GetManagedNotificationEvent",
+    "description": "Grants permission to get a Managed NotificationEvent",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ManagedNotificationEvent",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getnotificationconfiguration": {
     "name": "GetNotificationConfiguration",
     "description": "Grants permission to get a NotificationConfiguration",
@@ -131,11 +266,26 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getnotificationsaccessfororganization": {
+    "name": "GetNotificationsAccessForOrganization",
+    "description": "Grants permission to read Service Trust for AWS User Notifications",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listchannels": {
     "name": "ListChannels",
     "description": "Grants permission to list Channels by NotificationConfiguration",
     "accessLevel": "List",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "NotificationConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -147,6 +297,45 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listmanagednotificationchannelassociations": {
+    "name": "ListManagedNotificationChannelAssociations",
+    "description": "Grants permission to list Account contacts and Channels associated with a Managed Notification Configuration",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "ManagedNotificationConfiguration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listmanagednotificationchildevents": {
+    "name": "ListManagedNotificationChildEvents",
+    "description": "Grants permission to list Managed Notification Child Events",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listmanagednotificationconfigurations": {
+    "name": "ListManagedNotificationConfigurations",
+    "description": "Grants permission to list Managed Notification Configurations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listmanagednotificationevents": {
+    "name": "ListManagedNotificationEvents",
+    "description": "Grants permission to list Managed Notification Events",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listnotificationconfigurations": {
     "name": "ListNotificationConfigurations",
     "description": "Grants permission to list NotificationConfigurations",
@@ -174,7 +363,16 @@
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to get tags for a resource",
-    "accessLevel": "Read",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putfeatureoptinstatus": {
+    "name": "PutFeatureOptInStatus",
+    "isPermissionOnly": true,
+    "description": "Grants permission to update the opt-in status of an AWS User Notification Service feature",
+    "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []

package/data/actions/partnercentral.json

@@ -53,7 +53,7 @@
   },
   "createengagement": {
     "name": "CreateEngagement",
-    "description": "Grants permission to create engagements on AWS Partner Central",
+    "description": "Grants permission to creating engagements in AWS Partner Central",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
@@ -63,7 +63,7 @@
   },
   "createengagementinvitation": {
     "name": "CreateEngagementInvitation",
-    "description": "Grants permission to create engagement invitations on AWS Partner Central",
+    "description": "Grants permission to creating engagement invitations in AWS Partner Central",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
@@ -83,7 +83,7 @@
   },
   "createresourcesnapshot": {
     "name": "CreateResourceSnapshot",
-    "description": "Grants permission to create resource snapshots on AWS Partner Central",
+    "description": "Grants permission to creating resource snapshots in AWS Partner Central",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -100,15 +100,19 @@
   },
   "createresourcesnapshotjob": {
     "name": "CreateResourceSnapshotJob",
-    "description": "Grants permission to create resource snapshot jobs on AWS Partner Central",
+    "description": "Grants permission to creating resource snapshot jobs in AWS Partner Central",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "partnercentral:Catalog"
+    ],
     "dependentActions": []
   },
   "deleteresourcesnapshotjob": {
     "name": "DeleteResourceSnapshotJob",
-    "description": "Grants permission to delete resource snapshot jobs on AWS Partner Central",
+    "description": "Grants permission to deleting resource snapshot jobs on AWS Partner Central",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -118,7 +122,11 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "partnercentral:Catalog"
+    ],
     "dependentActions": []
   },
   "disassociateopportunity": {
@@ -158,7 +166,7 @@
   },
   "getengagement": {
     "name": "GetEngagement",
-    "description": "Grants permission to retrieve engagement details on AWS Partner Central",
+    "description": "Grants permission to retrieval of engagement details in AWS Partner Central",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -209,7 +217,7 @@
   },
   "getresourcesnapshot": {
     "name": "GetResourceSnapshot",
-    "description": "Grants permission to retrieve resource snapshot details on AWS Partner Central",
+    "description": "Grants permission to retrieving resource snapshot details in AWS Partner Central",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -226,7 +234,7 @@
   },
   "getresourcesnapshotjob": {
     "name": "GetResourceSnapshotJob",
-    "description": "Grants permission to retrieve resource snapshot job details on AWS Partner Central",
+    "description": "Grants permission to retrieving resource snapshot job details in AWS Partner Central",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -237,15 +245,24 @@
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
       "partnercentral:Catalog"
     ],
     "dependentActions": []
   },
   "getsellingsystemsettings": {
     "name": "GetSellingSystemSettings",
-    "description": "Grants permission to retrieve system settings settings on AWS Partner Central",
+    "description": "Grants permission to retrieving system settings settings in AWS Partner Central",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "selling-system-settings",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "partnercentral:Catalog"
     ],
@@ -253,7 +270,7 @@
   },
   "listengagementbyacceptinginvitationtasks": {
     "name": "ListEngagementByAcceptingInvitationTasks",
-    "description": "Grants permission to list engagements by accepting invitation tasks on AWS Partner Central",
+    "description": "Grants permission to listing engagements by accepting invitation tasks in AWS Partner\nCentral",
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [
@@ -263,7 +280,7 @@
   },
   "listengagementfromopportunitytasks": {
     "name": "ListEngagementFromOpportunityTasks",
-    "description": "Grants permission to list engagements from opportunity tasks on AWS Partner Central",
+    "description": "Grants permission to listing engagements from opportunity tasks in AWS Partner Central",
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [
@@ -283,7 +300,7 @@
   },
   "listengagementmembers": {
     "name": "ListEngagementMembers",
-    "description": "Grants permission to list engagement members on AWS Partner Central",
+    "description": "Grants permission to listing engagement members in AWS Partner Central",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -300,7 +317,7 @@
   },
   "listengagementresourceassociations": {
     "name": "ListEngagementResourceAssociations",
-    "description": "Grants permission to list engagement resource associations on AWS Partner Central",
+    "description": "Grants permission to listing engagement resource associations in AWS Partner Central",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -317,7 +334,7 @@
   },
   "listengagements": {
     "name": "ListEngagements",
-    "description": "Grants permission to list engagements on AWS Partner Central",
+    "description": "Grants permission to listing engagements in AWS Partner Central",
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [
@@ -337,7 +354,7 @@
   },
   "listresourcesnapshotjobs": {
     "name": "ListResourceSnapshotJobs",
-    "description": "Grants permission to list resource snapshot jobs on AWS Partner Central",
+    "description": "Grants permission to listing resource snapshot jobs in AWS Partner Central",
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [
@@ -347,7 +364,7 @@
   },
   "listresourcesnapshots": {
     "name": "ListResourceSnapshots",
-    "description": "Grants permission to list resource snapshots on AWS Partner Central",
+    "description": "Grants permission to listing resource snapshots in AWS Partner Central",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -372,11 +389,30 @@
     ],
     "dependentActions": []
   },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to add lists tags to a resource. Supported resource: ResourceSnapshotJob",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
   "putsellingsystemsettings": {
     "name": "PutSellingSystemSettings",
-    "description": "Grants permission to put system settings settings on AWS Partner Central",
+    "description": "Grants permission to put system settings settings in AWS Partner Central",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "selling-system-settings",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -403,6 +439,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
       "partnercentral:Catalog"
     ],
     "dependentActions": [
@@ -420,6 +458,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
       "partnercentral:Catalog"
     ],
     "dependentActions": [
@@ -433,7 +473,7 @@
   },
   "startresourcesnapshotjob": {
     "name": "StartResourceSnapshotJob",
-    "description": "Grants permission to start resource snapshot jobs on AWS Partner Central",
+    "description": "Grants permission to starting resource snapshot jobs in AWS Partner Central",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -443,12 +483,16 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "partnercentral:Catalog"
+    ],
     "dependentActions": []
   },
   "stopresourcesnapshotjob": {
     "name": "StopResourceSnapshotJob",
-    "description": "Grants permission to stop resource snapshot jobs on AWS Partner Central",
+    "description": "Grants permission to stopping resource snapshot jobs in AWS Partner Central",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -458,7 +502,11 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "partnercentral:Catalog"
+    ],
     "dependentActions": []
   },
   "submitopportunity": {
@@ -478,6 +526,31 @@
     ],
     "dependentActions": []
   },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to add new tags to a resource. Supported resource: ResourceSnapshotJob",
+    "accessLevel": "Tagging",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove tags from a resource. Supported resource: ResourceSnapshotJob",
+    "accessLevel": "Tagging",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
   "updateopportunity": {
     "name": "UpdateOpportunity",
     "description": "Grants permission to update Opportunities on AWS Partner Central",

package/data/actions/rds.json

@@ -819,12 +819,6 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
-      },
-      {
-        "name": "snapshot-tenant-database",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
       }
     ],
     "conditionKeys": [

package/data/conditionKeys/codebuild.json

@@ -13,5 +13,15 @@
     "key": "aws:TagKeys",
     "description": "Filters access by actions based on the presence of tag keys in the request",
     "type": "ArrayOfString"
+  },
+  "codebuild:buildarn": {
+    "key": "codebuild:buildArn",
+    "description": "Filters access by the ARN of the AWS CodeBuild build from which the request originated",
+    "type": "ARN"
+  },
+  "codebuild:projectarn": {
+    "key": "codebuild:projectArn",
+    "description": "Filters access by the ARN of the AWS CodeBuild project from which the request originated",
+    "type": "ARN"
   }
 }

package/data/conditionKeys/directconnect.json

@@ -12,6 +12,6 @@
   "aws:tagkeys": {
     "key": "aws:TagKeys",
     "description": "Filters access by actions based on the presence of tag keys in the request",
-    "type": "String"
+    "type": "ArrayOfString"
   }
 }

package/data/conditionKeys/lakeformation.json

@@ -1 +1,7 @@
-{}
+{
+  "lakeformation:enabledonlyformetadataaccess": {
+    "key": "lakeformation:EnabledOnlyForMetaDataAccess",
+    "description": "Filters access by the presence of the key configured for role's identity-based policy",
+    "type": "Bool"
+  }
+}

package/data/conditionKeys/partnercentral.json

@@ -1,4 +1,19 @@
 {
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  },
   "partnercentral:catalog": {
     "key": "partnercentral:Catalog",
     "description": "Filters access by a specific Catalog. Accepted values: [AWS, Sandbox]",

package/data/resourceTypes/connect.json

@@ -220,5 +220,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "email-address": {
+    "key": "email-address",
+    "arn": "arn:${Partition}:connect:${Region}:${Account}:instance/${InstanceId}/email-address/${EmailAddressId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/notifications.json

@@ -13,5 +13,17 @@
   "notificationevent": {
     "key": "NotificationEvent",
     "arn": "arn:${Partition}:notifications:${Region}:${Account}:configuration/${NotificationConfigurationId}/event/${NotificationEventId}"
+  },
+  "managednotificationchildevent": {
+    "key": "ManagedNotificationChildEvent",
+    "arn": "arn:${Partition}:notifications::${Account}:managed-notification-configuration/category/${Category}/sub-category/${Subcategory}/event/${NotificationEventId}/child-event/${NotificationChildEventId}"
+  },
+  "managednotificationconfiguration": {
+    "key": "ManagedNotificationConfiguration",
+    "arn": "arn:${Partition}:notifications::${Account}:managed-notification-configuration/category/${Category}/sub-category/${Subcategory}"
+  },
+  "managednotificationevent": {
+    "key": "ManagedNotificationEvent",
+    "arn": "arn:${Partition}:notifications::${Account}:managed-notification-configuration/category/${Category}/sub-category/${Subcategory}/event/${NotificationEventId}"
   }
 }

package/data/resourceTypes/partnercentral.json

@@ -27,6 +27,10 @@
     "key": "ResourceSnapshot",
     "arn": "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/engagement/${EngagementIdentifier}/resource/${ResourceType}/${ResourceIdentifier}/template/${TemplateIdentifier}/resource-snapshot/${SnapshotRevision}"
   },
+  "selling-system-settings": {
+    "key": "selling-system-settings",
+    "arn": "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/selling-system-settings"
+  },
   "solution": {
     "key": "Solution",
     "arn": "arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/solution/${Identifier}"

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202501161",
+  "version": "0.9.202501221",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2025-01-16T04:43:20.587Z",
+  "updatedAt": "2025-01-22T04:44:28.235Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",