@cloud-copilot/iam-data 0.9.202503111 → 0.9.202503141

package/data/actions/access-analyzer.json

@@ -236,7 +236,6 @@
   },
   "getfindingsstatistics": {
     "name": "GetFindingsStatistics",
-    "isPermissionOnly": true,
     "description": "Grants permission to retrieve statistics for findings",
     "accessLevel": "Read",
     "resourceTypes": [

package/data/actions/account.json

@@ -140,22 +140,6 @@
     ],
     "dependentActions": []
   },
-  "getchallengequestions": {
-    "name": "GetChallengeQuestions",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve the challenge questions for an account",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "account",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getcontactinformation": {
     "name": "GetContactInformation",
     "description": "Grants permission to retrieve the primary contact information for an account",
@@ -259,22 +243,6 @@
     ],
     "dependentActions": []
   },
-  "putchallengequestions": {
-    "name": "PutChallengeQuestions",
-    "isPermissionOnly": true,
-    "description": "Grants permission to modify the challenge questions for an account",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "account",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "putcontactinformation": {
     "name": "PutContactInformation",
     "description": "Grants permission to update the primary contact information for an account",

package/data/actions/batch.json

@@ -32,6 +32,24 @@
     ],
     "dependentActions": []
   },
+  "createconsumableresource": {
+    "name": "CreateConsumableResource",
+    "description": "Grants permission to create an AWS Batch consumable resource in your account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "consumable-resource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createjobqueue": {
     "name": "CreateJobQueue",
     "description": "Grants permission to create an AWS Batch job queue in your account",
@@ -95,6 +113,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteconsumableresource": {
+    "name": "DeleteConsumableResource",
+    "description": "Grants permission to delete an AWS Batch consumable resource in your account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "consumable-resource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletejobqueue": {
     "name": "DeleteJobQueue",
     "description": "Grants permission to delete an AWS Batch job queue in your account",
@@ -148,6 +181,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeconsumableresource": {
+    "name": "DescribeConsumableResource",
+    "description": "Grants permission to describe one or more AWS Batch consumable resource in your account",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "consumable-resource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describejobdefinitions": {
     "name": "DescribeJobDefinitions",
     "description": "Grants permission to describe one or more AWS Batch job definitions in your account",
@@ -195,6 +243,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listconsumableresources": {
+    "name": "ListConsumableResources",
+    "description": "Grants permission to list AWS Batch consumable resources in your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listjobs": {
     "name": "ListJobs",
     "description": "Grants permission to list jobs for a specified AWS Batch job queue in your account",
@@ -203,6 +259,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listjobsbyconsumableresource": {
+    "name": "ListJobsByConsumableResource",
+    "description": "Grants permission to list AWS Batch jobs that require a specific consumable resource in your account",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "consumable-resource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listschedulingpolicies": {
     "name": "ListSchedulingPolicies",
     "description": "Grants permission to list AWS Batch scheduling policies in your account",
@@ -222,6 +293,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "consumable-resource",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "job",
         "required": false,
@@ -260,6 +337,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "consumable-resource",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -310,6 +393,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "consumable-resource",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -326,6 +415,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "consumable-resource",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "job",
         "required": false,
@@ -383,6 +478,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "consumable-resource",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "job",
         "required": false,
@@ -428,6 +529,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateconsumableresource": {
+    "name": "UpdateConsumableResource",
+    "description": "Grants permission to update an AWS Batch consumable resource in your account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "consumable-resource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatejobqueue": {
     "name": "UpdateJobQueue",
     "description": "Grants permission to update an AWS Batch job queue in your account",

package/data/actions/bedrock.json

@@ -203,11 +203,23 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "default-prompt-router",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "foundation-model",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "prompt-router",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -476,6 +488,36 @@
     ],
     "dependentActions": []
   },
+  "createpromptrouter": {
+    "name": "CreatePromptRouter",
+    "description": "Grants permission to create a custom prompt router",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application-inference-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "foundation-model",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "inference-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createpromptversion": {
     "name": "CreatePromptVersion",
     "description": "Grants permission to create a version of a prompt",
@@ -844,6 +886,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletepromptrouter": {
+    "name": "DeletePromptRouter",
+    "description": "Grants permission to delete a custom prompt router",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "prompt-router",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteprovisionedmodelthroughput": {
     "name": "DeleteProvisionedModelThroughput",
     "description": "Grants permission to delete a provisioned model throughput that you created earlier",
@@ -1512,6 +1569,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "prompt-router",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -1723,6 +1786,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "prompt-router",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "provisioned-model",
         "required": true,
@@ -1780,6 +1849,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "prompt-router",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "provisioned-model",
         "required": true,
@@ -2311,6 +2386,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "prompt-router",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "prompt-version",
         "required": true,
@@ -2697,6 +2778,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "prompt-router",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "prompt-version",
         "required": false,
@@ -2847,6 +2934,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "prompt-router",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "prompt-version",
         "required": false,

package/data/actions/sagemaker.json

@@ -1498,7 +1498,9 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
       "sagemaker:ModelApprovalStatus",
-      "sagemaker:CustomerMetadataProperties/${MetadataKey}"
+      "sagemaker:CustomerMetadataProperties/${MetadataKey}",
+      "sagemaker:ModelLifeCycle:Stage",
+      "sagemaker:ModelLifeCycle:StageStatus"
     ],
     "dependentActions": []
   },
@@ -6812,7 +6814,9 @@
     "conditionKeys": [
       "sagemaker:ModelApprovalStatus",
       "sagemaker:CustomerMetadataProperties/${MetadataKey}",
-      "sagemaker:CustomerMetadataPropertiesToRemove"
+      "sagemaker:CustomerMetadataPropertiesToRemove",
+      "sagemaker:ModelLifeCycle:Stage",
+      "sagemaker:ModelLifeCycle:StageStatus"
     ],
     "dependentActions": []
   },

package/data/actions/wafv2.json

@@ -82,7 +82,9 @@
         "name": "ipset",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "wafv2:TagResource"
+        ]
       }
     ],
     "conditionKeys": [
@@ -100,7 +102,9 @@
         "name": "regexpatternset",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "wafv2:TagResource"
+        ]
       }
     ],
     "conditionKeys": [
@@ -118,7 +122,9 @@
         "name": "rulegroup",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "wafv2:TagResource"
+        ]
       },
       {
         "name": "ipset",
@@ -148,7 +154,9 @@
         "name": "webacl",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "wafv2:TagResource"
+        ]
       },
       {
         "name": "ipset",

package/data/conditionKeys/sagemaker.json

@@ -159,6 +159,16 @@
     "description": "Filters access by the model arn associated with the resource in the request",
     "type": "ARN"
   },
+  "sagemaker:modellifecycle:stage": {
+    "key": "sagemaker:ModelLifeCycle:Stage",
+    "description": "Filters access by stage field in the model life cycle object associated with the model-package resource in the request",
+    "type": "String"
+  },
+  "sagemaker:modellifecycle:stagestatus": {
+    "key": "sagemaker:ModelLifeCycle:StageStatus",
+    "description": "Filters access by stageStatus field in the model life cycle object associated with the model-package resource in the request",
+    "type": "String"
+  },
   "sagemaker:networkisolation": {
     "key": "sagemaker:NetworkIsolation",
     "description": "Filters access by the network isolation associated with the resource in the request",

package/data/resourceTypes/batch.json

@@ -37,5 +37,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "consumable-resource": {
+    "key": "consumable-resource",
+    "arn": "arn:${Partition}:batch:${Region}:${Account}:consumable-resource/${ConsumableResourceName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/bedrock.json

@@ -18,6 +18,10 @@
     "key": "default-prompt-router",
     "arn": "arn:${Partition}:bedrock:${Region}:${Account}:default-prompt-router/${ResourceId}"
   },
+  "prompt-router": {
+    "key": "prompt-router",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:prompt-router/${ResourceId}"
+  },
   "application-inference-profile": {
     "key": "application-inference-profile",
     "arn": "arn:${Partition}:bedrock:${Region}:${Account}:application-inference-profile/${ResourceId}",

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202503111",
+  "version": "0.9.202503141",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2025-03-11T04:46:35.798Z",
+  "updatedAt": "2025-03-14T04:45:11.413Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",