@cloud-copilot/iam-data 0.9.202504301 → 0.9.202505011

package/data/actions/deadline.json

@@ -460,10 +460,16 @@
         "name": "worker",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "deadline:ListTagsForResource",
+          "deadline:TagResource"
+        ]
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "deletebudget": {
@@ -1639,9 +1645,17 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "worker",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "deadline:CalledAction"
+    ],
     "dependentActions": []
   },
   "listtasks": {
@@ -1824,11 +1838,18 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "worker",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "deadline:CalledAction"
     ],
     "dependentActions": []
   },
@@ -1860,6 +1881,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "worker",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [

package/data/actions/kinesis.json

@@ -1,7 +1,7 @@
 {
   "addtagstostream": {
     "name": "AddTagsToStream",
-    "description": "Grants permission to add or update tags for the specified Amazon Kinesis stream. Each stream can have up to 10 tags",
+    "description": "Grants permission to add or update tags for the specified Amazon Kinesis stream. Each stream can have up to 50 tags",
     "accessLevel": "Tagging",
     "resourceTypes": [
       {
@@ -62,7 +62,9 @@
       {
         "name": "consumer",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
@@ -106,7 +108,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "describelimits": {
@@ -146,7 +150,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "describestreamsummary": {
@@ -207,7 +213,9 @@
       {
         "name": "consumer",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
@@ -298,6 +306,31 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list the tags for the specified Amazon Kinesis resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "consumer",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforstream": {
     "name": "ListTagsForStream",
     "description": "Grants permission to list the tags for the specified Amazon Kinesis stream",
@@ -374,7 +407,9 @@
       {
         "name": "consumer",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
@@ -402,6 +437,8 @@
       }
     ],
     "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}",
       "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
@@ -499,6 +536,64 @@
         "dependentActions": []
       }
     ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to add or update tags for the specified Amazon Kinesis resource. Each resource can have up to 50 tags",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "consumer",
+        "required": true,
+        "conditionKeys": [
+          "aws:TagKeys",
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [
+          "aws:TagKeys",
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove tags from the specified Kinesis data resource. Removed tags are deleted and cannot be recovered after this operation successfully completes",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "consumer",
+        "required": true,
+        "conditionKeys": [
+          "aws:TagKeys",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [
+          "aws:TagKeys",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },

package/data/actions/route53resolver.json

@@ -563,9 +563,15 @@
     "description": "Grants permission to get information about a specified Resolver rule, such as the domain name that the rule forwards DNS queries for and the IP address that queries are forwarded to",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "autodefined-rule",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "resolver-rule",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -578,9 +584,15 @@
     "description": "Grants permission to get information about an association between a specified Resolver rule and a VPC",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "autodefined-rule",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "resolver-rule",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }

package/data/actions/ssm-guiconnect.json

@@ -8,6 +8,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteconnectionrecordingpreferences": {
+    "name": "DeleteConnectionRecordingPreferences",
+    "description": "Grants permission to remove GUI Connect connection recording preferences",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getconnection": {
     "name": "GetConnection",
     "isPermissionOnly": true,
@@ -17,6 +25,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getconnectionrecordingpreferences": {
+    "name": "GetConnectionRecordingPreferences",
+    "description": "Grants permission to get GUI Connect connection recording preferences",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listconnections": {
     "name": "ListConnections",
     "isPermissionOnly": true,
@@ -34,5 +50,13 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "updateconnectionrecordingpreferences": {
+    "name": "UpdateConnectionRecordingPreferences",
+    "description": "Grants permission to update GUI Connect connection recording preferences",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

package/data/actions/ssm.json

@@ -461,6 +461,12 @@
     "description": "Grants permission to delete a Systems Manager resource policy",
     "accessLevel": "Permissions management",
     "resourceTypes": [
+      {
+        "name": "document",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "opsitemgroup",
         "required": false,
@@ -1013,6 +1019,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getaccesstoken": {
+    "name": "GetAccessToken",
+    "description": "Grants permission to return a credentials set to be used with just-in-time node access",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "opsitem",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getautomationexecution": {
     "name": "GetAutomationExecution",
     "description": "Grants permission to view details of a specified Automation execution",
@@ -1368,6 +1389,12 @@
     "description": "Grants permission to retrieve lists of Systems Manager resource policies",
     "accessLevel": "List",
     "resourceTypes": [
+      {
+        "name": "document",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "opsitemgroup",
         "required": false,
@@ -1782,6 +1809,12 @@
     "description": "Grants permission to create or update a Systems Manager resource policy",
     "accessLevel": "Permissions management",
     "resourceTypes": [
+      {
+        "name": "document",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "opsitemgroup",
         "required": false,
@@ -2033,6 +2066,30 @@
     ],
     "dependentActions": []
   },
+  "startaccessrequest": {
+    "name": "StartAccessRequest",
+    "description": "Grants permission to start the workflow for just-in-time node access sessions",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "instance",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "managed-instance",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "startassociationsonce": {
     "name": "StartAssociationsOnce",
     "description": "Grants permission to run a specified association manually",
@@ -2139,7 +2196,8 @@
     ],
     "conditionKeys": [
       "ssm:resourceTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "ssm:AccessRequestId"
     ],
     "dependentActions": []
   },

package/data/conditionKeys/deadline.json

@@ -19,6 +19,11 @@
     "description": "Filters access by the associated membership level of the principal provided in the request",
     "type": "String"
   },
+  "deadline:calledaction": {
+    "key": "deadline:CalledAction",
+    "description": "Filters access by the allowed action in the request",
+    "type": "String"
+  },
   "deadline:farmmembershiplevels": {
     "key": "deadline:FarmMembershipLevels",
     "description": "Filters access by membership levels on the farm",

package/data/conditionKeys/ssm.json

@@ -19,6 +19,11 @@
     "description": "Filters access by the ARN of the instance from which the request originated",
     "type": "ARN"
   },
+  "ssm:accessrequestid": {
+    "key": "ssm:AccessRequestId",
+    "description": "Filters access by verifying that a user has access to the access request ID specified in the request",
+    "type": "String"
+  },
   "ssm:autoapprove": {
     "key": "ssm:AutoApprove",
     "description": "Filters access by verifying that a user has permission to start Change Manager workflows without a review step (with the exception of change freeze events)",

package/data/resourceTypes/deadline.json

@@ -60,6 +60,7 @@
     "key": "worker",
     "arn": "arn:${Partition}:deadline:${Region}:${Account}:farm/${FarmId}/fleet/${FleetId}/worker/${WorkerId}",
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "deadline:FarmMembershipLevels",
       "deadline:FleetMembershipLevels"
     ]

package/data/resourceTypes/route53resolver.json

@@ -20,6 +20,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "autodefined-rule": {
+    "key": "autodefined-rule",
+    "arn": "arn:${Partition}:route53resolver:${Region}:${Account}:autodefined-rule/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "resolver-endpoint": {
     "key": "resolver-endpoint",
     "arn": "arn:${Partition}:route53resolver:${Region}:${Account}:resolver-endpoint/${ResourceId}",

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202504301",
+  "version": "0.9.202505011",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2025-04-30T04:48:40.474Z",
+  "updatedAt": "2025-05-01T04:49:07.465Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",