@cloud-copilot/iam-data 0.9.202502281 → 0.9.202503041

package/data/actions/bedrock.json

@@ -1606,7 +1606,14 @@
     "isPermissionOnly": true,
     "description": "Grants permission to invoke blueprint recommendations asynchronously",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "data-automation-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -1630,6 +1637,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "data-automation-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "data-automation-project",
         "required": true,
@@ -2200,12 +2213,30 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "blueprint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "custom-model",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "data-automation-invocation-job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "data-automation-project",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "evaluation-job",
         "required": true,
@@ -2568,12 +2599,30 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "blueprint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "custom-model",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "data-automation-invocation-job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "data-automation-project",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "evaluation-job",
         "required": false,
@@ -2700,12 +2749,30 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "blueprint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "custom-model",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "data-automation-invocation-job",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "data-automation-project",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "evaluation-job",
         "required": false,

package/data/actions/iotmanagedintegrations.json

@@ -0,0 +1,570 @@
+{
+  "createcredentiallocker": {
+    "name": "CreateCredentialLocker",
+    "description": "Grants permission to create a product credential locker. This operation will trigger the creation of all the manufacturing resources including Wi-Fi setup key pair and device certificate",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createdestination": {
+    "name": "CreateDestination",
+    "description": "Grants permission to create a destination",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createeventlogconfiguration": {
+    "name": "CreateEventLogConfiguration",
+    "description": "Grants permission to set the event log configuration for the account, a resource type, or a specific resource",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createmanagedthing": {
+    "name": "CreateManagedThing",
+    "description": "Grants permission to create a Managed Thing",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createnotificationconfiguration": {
+    "name": "CreateNotificationConfiguration",
+    "description": "Grants permission to create a notification configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createotatask": {
+    "name": "CreateOtaTask",
+    "description": "Grants permission to customers to create an OTA task to update their devices",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createotataskconfiguration": {
+    "name": "CreateOtaTaskConfiguration",
+    "description": "Grants permission to create an OTA task configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createprovisioningprofile": {
+    "name": "CreateProvisioningProfile",
+    "description": "Grants permission to create a new provisioning profile",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletecredentiallocker": {
+    "name": "DeleteCredentialLocker",
+    "description": "Grants permission to delete a Credential Locker. This operation cannot be undone and any existing device won't be able to use the IoT Managed Integrations Setup",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "CredentialLockerResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedestination": {
+    "name": "DeleteDestination",
+    "description": "Grants permission to delete a destination",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteeventlogconfiguration": {
+    "name": "DeleteEventLogConfiguration",
+    "description": "Grants permission to delete an event log configuration by log configuration ID",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletemanagedthing": {
+    "name": "DeleteManagedThing",
+    "description": "Grants permission to delete a managed thing. If a Controller is deleted, all the devices connected to it will have their status changed to pending. Note, it is not possible to remove a Cloud device",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ManagedThingResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletenotificationconfiguration": {
+    "name": "DeleteNotificationConfiguration",
+    "description": "Grants permission to delete a notification configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteotatask": {
+    "name": "DeleteOtaTask",
+    "description": "Grants permission to delete an OTA task",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "OtaTaskResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteotataskconfiguration": {
+    "name": "DeleteOtaTaskConfiguration",
+    "description": "Grants permission to delete a OTA task configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteprovisioningprofile": {
+    "name": "DeleteProvisioningProfile",
+    "description": "Grants permission to delete a provisioning Profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ProvisioningProfileResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getcredentiallocker": {
+    "name": "GetCredentialLocker",
+    "description": "Grants permission to get an existing Credential Locker information",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "CredentialLockerResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getcustomendpoint": {
+    "name": "GetCustomEndpoint",
+    "description": "Grants permission to customers to retrieve the custom endpoint address",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getdefaultencryptionconfiguration": {
+    "name": "GetDefaultEncryptionConfiguration",
+    "description": "Grants permission to get a connector by AWS ARN",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getdestination": {
+    "name": "GetDestination",
+    "description": "Grants permission to get a destination",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getdevicediscovery": {
+    "name": "GetDeviceDiscovery",
+    "description": "Grants permission to get the current state of a device discovery",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "geteventlogconfiguration": {
+    "name": "GetEventLogConfiguration",
+    "description": "Grants permission to get an event log configuration by log configuration ID",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gethubconfiguration": {
+    "name": "GetHubConfiguration",
+    "description": "Grants permission to get hub configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmanagedthing": {
+    "name": "GetManagedThing",
+    "description": "Grants permission to get a managed thing",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ManagedThingResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmanagedthingcapabilities": {
+    "name": "GetManagedThingCapabilities",
+    "description": "Grants permission to get capabilities by ManagedThingId",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ManagedThingResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmanagedthingconnectivitydata": {
+    "name": "GetManagedThingConnectivityData",
+    "description": "Grants permission to get the connectivity status of a Managed Thing",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ManagedThingResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmanagedthingmetadata": {
+    "name": "GetManagedThingMetaData",
+    "description": "Grants permission to get metaData info by ManagedThingId",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ManagedThingResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmanagedthingstate": {
+    "name": "GetManagedThingState",
+    "description": "Grants permission to get managed thing states by managed thing id",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ManagedThingResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getnotificationconfiguration": {
+    "name": "GetNotificationConfiguration",
+    "description": "Grants permission to get a notification configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getotatask": {
+    "name": "GetOtaTask",
+    "description": "Grants permission to get the Ota task",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "OtaTaskResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getotataskconfiguration": {
+    "name": "GetOtaTaskConfiguration",
+    "description": "Grants permission to get an OTA task configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getprovisioningprofile": {
+    "name": "GetProvisioningProfile",
+    "description": "Grants permission to get an existing provisioning profile information",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ProvisioningProfileResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getruntimelogconfiguration": {
+    "name": "GetRuntimeLogConfiguration",
+    "description": "Grants permission to get runtime log configuration for a specific managed thing or for all managed things as a group",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getschemaversion": {
+    "name": "GetSchemaVersion",
+    "description": "Grants permission to get a schema version with the provided information",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcredentiallockers": {
+    "name": "ListCredentialLockers",
+    "description": "Grants permission to list the existing Credential Locker",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listdestinations": {
+    "name": "ListDestinations",
+    "description": "Grants permission to list all the destinations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listeventlogconfigurations": {
+    "name": "ListEventLogConfigurations",
+    "description": "Grants permission to list all event log configurations for account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listmanagedthingschemas": {
+    "name": "ListManagedThingSchemas",
+    "description": "Grants permission to list Schemas Associated With Managed Thing",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ManagedThingResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listmanagedthings": {
+    "name": "ListManagedThings",
+    "description": "Grants permission to list all the managed things",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnotificationconfigurations": {
+    "name": "ListNotificationConfigurations",
+    "description": "Grants permission to list all the notification configurations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listotataskconfigurations": {
+    "name": "ListOtaTaskConfigurations",
+    "description": "Grants permission to list all the OTA task configurations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listotataskexecutions": {
+    "name": "ListOtaTaskExecutions",
+    "description": "Grants permission to list all the Ota task executions",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "OtaTaskResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listotatasks": {
+    "name": "ListOtaTasks",
+    "description": "Grants permission to list all the OTA tasks",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listprovisioningprofiles": {
+    "name": "ListProvisioningProfiles",
+    "description": "Grants permission to list the existing provisioning profile",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listschemaversions": {
+    "name": "ListSchemaVersions",
+    "description": "Grants permission to list schema versions with the provided information",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putdefaultencryptionconfiguration": {
+    "name": "PutDefaultEncryptionConfiguration",
+    "description": "Grants permission to associate KMS key with IoT Managed Integration service",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "puthubconfiguration": {
+    "name": "PutHubConfiguration",
+    "description": "Grants permission to update a hub configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putruntimelogconfiguration": {
+    "name": "PutRuntimeLogConfiguration",
+    "description": "Grants permission to set the runtime log configuration for a specific managed thing or for all managed  things as a group",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "registercustomendpoint": {
+    "name": "RegisterCustomEndpoint",
+    "description": "Grants permission to customers to request us to manage the server trust for them or bring their own external server trusts for the custom domain",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "resetruntimelogconfiguration": {
+    "name": "ResetRuntimeLogConfiguration",
+    "description": "Grants permission to reset a runtime log configuration for a specific managed thing or for all managed things as a group",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "sendmanagedthingcommand": {
+    "name": "SendManagedThingCommand",
+    "description": "Grants permission to use the SendManagedThingCommand API to send commands to managed things",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startdevicediscovery": {
+    "name": "StartDeviceDiscovery",
+    "description": "Grants permission to request to start device discovery",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatedestination": {
+    "name": "UpdateDestination",
+    "description": "Grants permission to update a destination",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateeventlogconfiguration": {
+    "name": "UpdateEventLogConfiguration",
+    "description": "Grants permission to update an event log configuration by log configuration ID",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatemanagedthing": {
+    "name": "UpdateManagedThing",
+    "description": "Grants permission to update a managed thing",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ManagedThingResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatenotificationconfiguration": {
+    "name": "UpdateNotificationConfiguration",
+    "description": "Grants permission to update a notification configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateotatask": {
+    "name": "UpdateOtaTask",
+    "description": "Grants permission to update an OTA Task",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "OtaTaskResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/qdeveloper.json

@@ -0,0 +1,111 @@
+{
+  "exportartifact": {
+    "name": "ExportArtifact",
+    "description": "Grants permission to export artifacts from Amazon Q Developer",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "codeTransformation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "importartifact": {
+    "name": "ImportArtifact",
+    "description": "Grants permission to import artifacts to Amazon Q Developer",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "codeTransformation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list all tags associated with an Amazon Q Developer resource",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "codeTransformation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startagentsession": {
+    "name": "StartAgentSession",
+    "description": "Grants permission to start an agent session with Amazon Q Developer",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to associate tags with an Amazon Q Developer resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "codeTransformation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "transformcode": {
+    "name": "TransformCode",
+    "description": "Grants permission to transform code with Amazon Q Developer Transform Agent",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "codeTransformation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to remove tags associated with an Amazon Q Developer resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "codeTransformation",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  }
+}

package/data/actions/redshift-serverless.json

@@ -410,6 +410,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettrack": {
+    "name": "GetTrack",
+    "description": "Grants permission to get information about a track in Amazon Redshift Serverless",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getusagelimit": {
     "name": "GetUsageLimit",
     "description": "Grants permission to get information about a usage limit in Amazon Redshift Serverless",
@@ -556,6 +564,14 @@
     ],
     "dependentActions": []
   },
+  "listtracks": {
+    "name": "ListTracks",
+    "description": "Grants permission to list tracks available in Amazon Redshift Serverless",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listusagelimits": {
     "name": "ListUsageLimits",
     "description": "Grants permission to list all usage limits within Amazon Redshift Serverless",

package/data/actions/s3.json

@@ -84,11 +84,7 @@
       "s3:x-amz-server-side-encryption-aws-kms-key-id",
       "s3:x-amz-server-side-encryption-customer-algorithm",
       "s3:x-amz-storage-class",
-      "s3:x-amz-website-redirect-location",
-      "s3:object-lock-mode",
-      "s3:object-lock-retain-until-date",
-      "s3:object-lock-remaining-retention-days",
-      "s3:object-lock-legal-hold"
+      "s3:x-amz-website-redirect-location"
     ],
     "dependentActions": []
   },

package/data/actions/sagemaker.json

@@ -1376,7 +1376,8 @@
       "aws:TagKeys",
       "sagemaker:NetworkIsolation",
       "sagemaker:VpcSecurityGroupIds",
-      "sagemaker:VpcSubnets"
+      "sagemaker:VpcSubnets",
+      "sagemaker:DirectGatedModelAccess"
     ],
     "dependentActions": []
   },
@@ -1919,7 +1920,8 @@
       "sagemaker:VpcSecurityGroupIds",
       "sagemaker:VpcSubnets",
       "sagemaker:KeepAlivePeriod",
-      "sagemaker:EnableRemoteDebug"
+      "sagemaker:EnableRemoteDebug",
+      "sagemaker:DirectGatedModelAccess"
     ],
     "dependentActions": []
   },
@@ -6319,6 +6321,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "trainhubmodel": {
+    "name": "TrainHubModel",
+    "description": "Grants permission to train a model in hub",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "hub",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "hub-content",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateaction": {
     "name": "UpdateAction",
     "description": "Grants permission to update an action",
@@ -6625,6 +6648,48 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatehubcontent": {
+    "name": "UpdateHubContent",
+    "description": "Grants permission to update hub content",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "hub",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "hub-content",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatehubcontentreference": {
+    "name": "UpdateHubContentReference",
+    "description": "Grants permission to update hub content reference",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "hub",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "hub-content",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateimage": {
     "name": "UpdateImage",
     "description": "Grants permission to update the properties of a SageMaker Image",

package/data/conditionKeys/iotmanagedintegrations.json

@@ -0,0 +1 @@
+{}

package/data/conditionKeys/qdeveloper.json

@@ -0,0 +1,17 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the Amazon Q Developer resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/sagemaker.json

@@ -34,6 +34,11 @@
     "description": "Filters access by the list of metadata properties associated with the model-package resource in the request",
     "type": "ArrayOfString"
   },
+  "sagemaker:directgatedmodelaccess": {
+    "key": "sagemaker:DirectGatedModelAccess",
+    "description": "Used to deny direct access to SageMaker gated ModelReferences",
+    "type": "String"
+  },
   "sagemaker:directinternetaccess": {
     "key": "sagemaker:DirectInternetAccess",
     "description": "Filters access by the direct internet access associated with the resource in the request",

package/data/resourceTypes/bedrock.json

@@ -160,6 +160,10 @@
     "key": "data-automation-invocation-job",
     "arn": "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-invocation/${JobId}"
   },
+  "data-automation-profile": {
+    "key": "data-automation-profile",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-profile/${ProfileId}"
+  },
   "session": {
     "key": "session",
     "arn": "arn:${Partition}:bedrock:${Region}:${Account}:session/${SessionId}",

package/data/resourceTypes/iotmanagedintegrations.json

@@ -0,0 +1,18 @@
+{
+  "credentiallockerresource": {
+    "key": "CredentialLockerResource",
+    "arn": "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:credential-locker/${Identifier}"
+  },
+  "managedthingresource": {
+    "key": "ManagedThingResource",
+    "arn": "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:managed-thing/${Identifier}"
+  },
+  "otataskresource": {
+    "key": "OtaTaskResource",
+    "arn": "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:ota-task/${Identifier}"
+  },
+  "provisioningprofileresource": {
+    "key": "ProvisioningProfileResource",
+    "arn": "arn:${Partition}:iotmanagedintegrations:${Region}:${Account}:provisioning-profile/${Identifier}"
+  }
+}

package/data/resourceTypes/qdeveloper.json

@@ -0,0 +1,9 @@
+{
+  "codetransformation": {
+    "key": "codeTransformation",
+    "arn": "arn:${Partition}:qdeveloper:${Region}:${Account}:codeTransformation/${Identifier}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

package/data/serviceNames.json

@@ -200,6 +200,7 @@
   "iotfleethub": "AWS IoT Fleet Hub for Device Management",
   "iotfleetwise": "AWS IoT FleetWise",
   "iotjobsdata": "AWS IoT Jobs DataPlane",
+  "iotmanagedintegrations": "AWS IoT Managed Integrations Service",
   "iotsitewise": "AWS IoT SiteWise",
   "iottwinmaker": "AWS IoT TwinMaker",
   "iotwireless": "AWS IoT Wireless",
@@ -295,6 +296,7 @@
   "q": "Amazon Q",
   "qapps": "Amazon Q Business Q Apps",
   "qbusiness": "Amazon Q Business",
+  "qdeveloper": "Amazon Q Developer",
   "qldb": "Amazon QLDB",
   "quicksight": "Amazon QuickSight",
   "ram": "AWS Resource Access Manager (RAM)",

package/data/services.json

@@ -200,6 +200,7 @@
   "iotfleethub",
   "iotfleetwise",
   "iotjobsdata",
+  "iotmanagedintegrations",
   "iotsitewise",
   "iottwinmaker",
   "iotwireless",
@@ -295,6 +296,7 @@
   "q",
   "qapps",
   "qbusiness",
+  "qdeveloper",
   "qldb",
   "quicksight",
   "ram",

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202502281",
+  "version": "0.9.202503041",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2025-02-28T04:45:22.232Z",
+  "updatedAt": "2025-03-04T04:45:58.959Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",
@@ -33,9 +33,9 @@
   "devDependencies": {
     "@cloud-copilot/prettier-config": "^0.1.1",
     "@types/node": "^22.5.0",
-    "@vitest/coverage-v8": "^2.0.5",
+    "@vitest/coverage-v8": "^3.0.7",
     "typescript": "^5.5.4",
-    "vitest": "^2.0.5"
+    "vitest": "^3.0.7"
   },
   "prettier": "@cloud-copilot/prettier-config"
 }