@cloud-copilot/iam-data 0.9.202502251 → 0.9.202502271

package/data/actions/cloudshell.json

@@ -1,4 +1,20 @@
 {
+  "approvecommand": {
+    "name": "ApproveCommand",
+    "isPermissionOnly": true,
+    "description": "Grants permission to approve a command sent by another AWS service",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Environment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createenvironment": {
     "name": "CreateEnvironment",
     "isPermissionOnly": true,

package/data/actions/ecs.json

@@ -38,22 +38,29 @@
       {
         "name": "service",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "ecs:cluster",
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
-      "ecs:cluster",
       "ecs:capacity-provider",
       "ecs:task-definition",
       "ecs:enable-ebs-volumes",
       "ecs:enable-execute-command",
       "ecs:enable-service-connect",
       "ecs:namespace",
-      "ecs:enable-vpc-lattice"
+      "ecs:enable-vpc-lattice",
+      "ecs:enable-ecs-managed-tags",
+      "ecs:propagate-tags",
+      "ecs:auto-assign-public-ip",
+      "ecs:subnet",
+      "ecs:task-cpu",
+      "ecs:task-memory"
     ],
     "dependentActions": []
   },
@@ -708,10 +715,23 @@
     "name": "RegisterTaskDefinition",
     "description": "Grants permission to register a new task definition from the supplied family and containerDefinitions",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "task-definition",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "ecs:compute-compatibility",
+      "ecs:privileged",
+      "ecs:task-cpu",
+      "ecs:task-memory"
     ],
     "dependentActions": []
   },
@@ -1057,20 +1077,27 @@
       {
         "name": "service",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "ecs:cluster",
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "ecs:cluster",
       "ecs:capacity-provider",
       "ecs:enable-ebs-volumes",
       "ecs:enable-execute-command",
       "ecs:enable-service-connect",
       "ecs:namespace",
       "ecs:task-definition",
-      "ecs:enable-vpc-lattice"
+      "ecs:enable-vpc-lattice",
+      "ecs:enable-ecs-managed-tags",
+      "ecs:propagate-tags",
+      "ecs:auto-assign-public-ip",
+      "ecs:subnet",
+      "ecs:task-cpu",
+      "ecs:task-memory"
     ],
     "dependentActions": []
   },

package/data/actions/ram.json

@@ -112,7 +112,8 @@
       "ram:RequestedResourceType",
       "ram:ResourceArn",
       "ram:RequestedAllowsExternalPrincipals",
-      "ram:Principal"
+      "ram:Principal",
+      "ram:AllowsExternalPrincipals"
     ],
     "dependentActions": []
   },

package/data/conditionKeys/ecs.json

@@ -29,16 +29,26 @@
     "description": "Filters access by the Amazon ECS account setting name",
     "type": "String"
   },
+  "ecs:auto-assign-public-ip": {
+    "key": "ecs:auto-assign-public-ip",
+    "description": "Filters access by the public IP assignment configuration of your Amazon ECS task or Amazon ECS service that uses awsvpc network mode",
+    "type": "Bool"
+  },
   "ecs:capacity-provider": {
     "key": "ecs:capacity-provider",
     "description": "Filters access by the ARN of an Amazon ECS capacity provider",
-    "type": "ARN"
+    "type": "ArrayOfARN"
   },
   "ecs:cluster": {
     "key": "ecs:cluster",
     "description": "Filters access by the ARN of an Amazon ECS cluster",
     "type": "ARN"
   },
+  "ecs:compute-compatibility": {
+    "key": "ecs:compute-compatibility",
+    "description": "Filters access by the required compatibilities field provided in the request",
+    "type": "ArrayOfString"
+  },
   "ecs:container-instances": {
     "key": "ecs:container-instances",
     "description": "Filters access by the ARN of an Amazon ECS container instance",
@@ -54,6 +64,11 @@
     "description": "Filters access by the Amazon ECS managed Amazon EBS volume capability of your ECS task or service",
     "type": "String"
   },
+  "ecs:enable-ecs-managed-tags": {
+    "key": "ecs:enable-ecs-managed-tags",
+    "description": "Filters access by the enableECSManagedTags configuration of your Amazon ECS task or Amazon ECS service",
+    "type": "Bool"
+  },
   "ecs:enable-execute-command": {
     "key": "ecs:enable-execute-command",
     "description": "Filters access by the execute-command capability of your Amazon ECS task or Amazon ECS service",
@@ -79,19 +94,44 @@
     "description": "Filters access by the ARN of AWS Cloud Map namespace which is defined in the Service Connect Configuration",
     "type": "ARN"
   },
+  "ecs:privileged": {
+    "key": "ecs:privileged",
+    "description": "Filters access by the privileged field provided in the request",
+    "type": "String"
+  },
+  "ecs:propagate-tags": {
+    "key": "ecs:propagate-tags",
+    "description": "Filters access by the tag propagation configuration of your Amazon ECS task or Amazon ECS service",
+    "type": "String"
+  },
   "ecs:service": {
     "key": "ecs:service",
     "description": "Filters access by the ARN of an Amazon ECS service",
     "type": "ARN"
   },
+  "ecs:subnet": {
+    "key": "ecs:subnet",
+    "description": "Filters access by the subnet configuration of your Amazon ECS task or Amazon ECS service that uses awsvpc network mode",
+    "type": "ArrayOfString"
+  },
   "ecs:task": {
     "key": "ecs:task",
     "description": "Filters access by the ARN of an Amazon ECS task",
     "type": "ARN"
   },
+  "ecs:task-cpu": {
+    "key": "ecs:task-cpu",
+    "description": "Filters access by the task cpu, as an integer with 1024 = 1 vCPU, provided in the request",
+    "type": "Numeric"
+  },
   "ecs:task-definition": {
     "key": "ecs:task-definition",
     "description": "Filters access by the ARN of an Amazon ECS task definition",
     "type": "ARN"
+  },
+  "ecs:task-memory": {
+    "key": "ecs:task-memory",
+    "description": "Filters access by the task memory, as an integer representing MiB, provided in the request",
+    "type": "Numeric"
   }
 }

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202502251",
+  "version": "0.9.202502271",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2025-02-25T04:44:50.867Z",
+  "updatedAt": "2025-02-27T04:45:51.639Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",