@cloud-copilot/iam-data 0.9.202503281 → 0.9.202503291

package/data/actions/healthlake.json

@@ -228,6 +228,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "processbundle": {
+    "name": "ProcessBundle",
+    "description": "Grants permission to bundle multiple resource operations",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "datastore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "readresource": {
     "name": "ReadResource",
     "description": "Grants permission to read resource",

package/data/actions/iot.json

@@ -173,8 +173,17 @@
     "name": "AttachThingPrincipal",
     "description": "Grants permission to attach the specified principal to the specified thing",
     "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
+    "resourceTypes": [
+      {
+        "name": "cert",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "iot:thingArn"
+    ],
     "dependentActions": []
   },
   "cancelauditmitigationactionstask": {
@@ -2025,8 +2034,17 @@
     "name": "DetachThingPrincipal",
     "description": "Grants permission to detach the specified principal from the specified thing",
     "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
+    "resourceTypes": [
+      {
+        "name": "cert",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "iot:thingArn"
+    ],
     "dependentActions": []
   },
   "disabletopicrule": {
@@ -2793,7 +2811,29 @@
     "name": "ListPrincipalThings",
     "description": "Grants permission to list the things associated with the specified principal",
     "accessLevel": "List",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "cert",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listprincipalthingsv2": {
+    "name": "ListPrincipalThingsV2",
+    "description": "Grants permission to list the things associated with the specified principal",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cert",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -3115,7 +3155,29 @@
     "name": "ListThingPrincipals",
     "description": "Grants permission to list the principals associated with the specified thing",
     "accessLevel": "List",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listthingprincipalsv2": {
+    "name": "ListThingPrincipalsV2",
+    "description": "Grants permission to list the principals associated with the specified thing",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "thing",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },

package/data/actions/rekognition.json

@@ -87,14 +87,7 @@
     "name": "CreateProject",
     "description": "Grants permission to create an Amazon Rekognition Custom Labels project",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "project",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"

package/data/actions/wafv2.json

@@ -9,14 +9,23 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": [
+          "amplify:AssociateWebACL",
           "apigateway:SetWebACL",
           "apprunner:AssociateWebAcl",
           "appsync:SetWebACL",
           "cognito-idp:AssociateWebACL",
           "ec2:AssociateVerifiedAccessInstanceWebAcl",
-          "elasticloadbalancing:SetWebAcl"
+          "elasticloadbalancing:SetWebAcl",
+          "wafv2:GetPermissionPolicy",
+          "wafv2:PutPermissionPolicy"
         ]
       },
+      {
+        "name": "amplify-app",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "apigateway",
         "required": false,
@@ -350,18 +359,26 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "apigateway",
+        "name": "amplify-app",
         "required": false,
         "conditionKeys": [],
         "dependentActions": [
+          "amplify:DisassociateWebACL",
           "apigateway:SetWebACL",
           "apprunner:DisassociateWebAcl",
           "appsync:SetWebACL",
           "cognito-idp:DisassociateWebACL",
           "ec2:DisassociateVerifiedAccessInstanceWebAcl",
-          "elasticloadbalancing:SetWebAcl"
+          "elasticloadbalancing:SetWebAcl",
+          "wafv2:PutPermissionPolicy"
         ]
       },
+      {
+        "name": "apigateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "apprunner",
         "required": false,
@@ -578,12 +595,19 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": [
+          "amplify:GetWebACLForResource",
           "apprunner:DescribeWebAclForService",
           "cognito-idp:GetWebACLForResource",
           "ec2:GetVerifiedAccessInstanceWebAcl",
           "wafv2:GetWebACL"
         ]
       },
+      {
+        "name": "amplify-app",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "apigateway",
         "required": false,
@@ -700,11 +724,18 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": [
+          "amplify:ListResourcesForWebACL",
           "apprunner:ListAssociatedServicesForWebAcl",
           "cognito-idp:ListResourcesForWebACL",
           "ec2:DescribeVerifiedAccessInstanceWebAclAssociations"
         ]
       },
+      {
+        "name": "amplify-app",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "apprunner",
         "required": false,

package/data/conditionKeys/iot.json

@@ -53,5 +53,10 @@
     "key": "iot:TunnelDestinationService",
     "description": "Filters access by a list of destination services for an IoT Tunnel",
     "type": "ArrayOfString"
+  },
+  "iot:thingarn": {
+    "key": "iot:thingArn",
+    "description": "Filters access by the ARN of an IoT Thing",
+    "type": "ARN"
   }
 }

package/data/resourceTypes/wafv2.json

@@ -54,5 +54,9 @@
   "verified-access-instance": {
     "key": "verified-access-instance",
     "arn": "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/${VerifiedAccessInstanceId}"
+  },
+  "amplify-app": {
+    "key": "amplify-app",
+    "arn": "arn:${Partition}:amplify:${Region}:${Account}:apps/${AppId}"
   }
 }

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202503281",
+  "version": "0.9.202503291",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2025-03-28T04:46:24.551Z",
+  "updatedAt": "2025-03-29T04:47:18.930Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",