@cloud-copilot/iam-data 0.9.202505021 → 0.9.202505071

package/data/actions/qbusiness.json

@@ -156,6 +156,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createanonymouswebexperienceurl": {
+    "name": "CreateAnonymousWebExperienceUrl",
+    "description": "Grants permission to create a unique URL for anonymous Amazon Q Business web experience",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "web-experience",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createapplication": {
     "name": "CreateApplication",
     "description": "Grants permission to create an application",

package/data/actions/verifiedpermissions.json

@@ -34,7 +34,11 @@
     "description": "Grants permission to create a Cedar policy and save it in the specified policy store",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createpolicytemplate": {
@@ -155,7 +159,9 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "verifiedpermissions:ListTagsForResource"
+    ]
   },
   "getpolicytemplate": {
     "name": "GetPolicyTemplate",
@@ -270,6 +276,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to view a list of resource tags for the specified policy store",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "policy-store",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putschema": {
     "name": "PutSchema",
     "description": "Grants permission to create or update the policy schema in the specified policy store",
@@ -285,6 +306,41 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to add tags to the specified policy store",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "policy-store",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove tags from the specified policy store",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "policy-store",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "updateidentitysource": {
     "name": "UpdateIdentitySource",
     "description": "Grants permission to update the specified identity source to use a new identity provider (IdP) source, or to change the mapping of identities from the IdP to a different principal entity type",

package/data/conditionKeys/sso.json

@@ -16,7 +16,7 @@
   },
   "sso:applicationaccount": {
     "key": "sso:ApplicationAccount",
-    "description": "Filters access by the account which creates the application",
+    "description": "Filters access by the account which creates the application. This condition key is not supported for customer managed SAML applications",
     "type": "String"
   }
 }

package/data/conditionKeys/verifiedpermissions.json

@@ -1 +1,17 @@
-{}
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair that is allowed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair of a resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by a list of tag keys that are allowed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/resourceTypes/backup-gateway.json

@@ -1,21 +1,21 @@
 {
   "gateway": {
     "key": "gateway",
-    "arn": "arn:${Partition}:backup-gateway::${Account}:gateway/${GatewayId}",
+    "arn": "arn:${Partition}:backup-gateway:${Region}:${Account}:gateway/${GatewayId}",
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
   },
   "hypervisor": {
     "key": "hypervisor",
-    "arn": "arn:${Partition}:backup-gateway::${Account}:hypervisor/${HypervisorId}",
+    "arn": "arn:${Partition}:backup-gateway:${Region}:${Account}:hypervisor/${HypervisorId}",
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
   },
   "virtualmachine": {
     "key": "virtualmachine",
-    "arn": "arn:${Partition}:backup-gateway::${Account}:vm/${VirtualmachineId}",
+    "arn": "arn:${Partition}:backup-gateway:${Region}:${Account}:vm/${VirtualmachineId}",
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]

package/data/resourceTypes/verifiedpermissions.json

@@ -1,6 +1,9 @@
 {
   "policy-store": {
     "key": "policy-store",
-    "arn": "arn:${Partition}:verifiedpermissions::${Account}:policy-store/${PolicyStoreId}"
+    "arn": "arn:${Partition}:verifiedpermissions::${Account}:policy-store/${PolicyStoreId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202505021",
+  "version": "0.9.202505071",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2025-05-02T04:47:52.205Z",
+  "updatedAt": "2025-05-07T04:48:14.735Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",