@cloud-copilot/iam-data 0.9.202505141 → 0.9.202505161

package/data/actions/backup-search.json

@@ -103,6 +103,7 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []

package/data/actions/dsql.json

@@ -1,4 +1,21 @@
 {
+  "addpeercluster": {
+    "name": "AddPeerCluster",
+    "description": "Grants permission to add a peer cluster to a multi-Region cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "dsql:PutMultiRegionProperties"
+    ]
+  },
   "createcluster": {
     "name": "CreateCluster",
     "description": "Grants permission to create new clusters",
@@ -21,7 +38,7 @@
   },
   "createmultiregionclusters": {
     "name": "CreateMultiRegionClusters",
-    "description": "Grants permission to create multi-Region clusters. Creating multi-Region clusters also requires CreateCluster permission in each specified Region",
+    "description": "Grants permission to create multi-Region clusters. Creating multi-Region clusters also requires CreateCluster permission in each specified Region. **This action is deprecated as of 05/09/2025 and will be removed on 05/21/2025.**",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -85,7 +102,7 @@
   },
   "deletemultiregionclusters": {
     "name": "DeleteMultiRegionClusters",
-    "description": "Grants permission to delete multi-Region clusters. Deleting multi-Region clusters also requires DeleteCluster permission in each specified Region",
+    "description": "Grants permission to delete multi-Region clusters. Deleting multi-Region clusters also requires DeleteCluster permission in each specified Region. **This action is deprecated as of 05/09/2025 and will be removed on 05/21/2025.**",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -117,7 +134,7 @@
   },
   "getvpcendpointservicename": {
     "name": "GetVpcEndpointServiceName",
-    "description": "Grants permission to retrieve endpoint service name specific to a cluster",
+    "description": "Grants permission to retrieve the VPC endpoint service name for a cluster",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -153,6 +170,55 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putmultiregionproperties": {
+    "name": "PutMultiRegionProperties",
+    "description": "Grants permission to update multi-Region properties of a cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putwitnessregion": {
+    "name": "PutWitnessRegion",
+    "description": "Grants permission to configure and update the witness Region of a multi-Region cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "dsql:PutMultiRegionProperties"
+    ]
+  },
+  "removepeercluster": {
+    "name": "RemovePeerCluster",
+    "description": "Grants permission to remove a peer cluster from a multi-Region cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "dsql:PutMultiRegionProperties"
+    ]
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to Aurora DSQL resources",

package/data/actions/events.json

@@ -66,6 +66,18 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "alias",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "key",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -900,6 +912,18 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "alias",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "key",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],

package/data/actions/license-manager.json

@@ -57,7 +57,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "creategrantversion": {
@@ -80,7 +83,10 @@
     "description": "Grants permission to create a new license",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createlicenseconfiguration": {
@@ -463,9 +469,27 @@
     "description": "Grants permission to list tags for a selected resource",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "grant",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "license",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "license-configuration",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "report-generator",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -516,16 +540,34 @@
     "description": "Grants permission to tag a selected resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "grant",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "license",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "license-configuration",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "report-generator",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -534,14 +576,34 @@
     "description": "Grants permission to untag a selected resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "grant",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "license",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "license-configuration",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "report-generator",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "updatelicenseconfiguration": {

package/data/conditionKeys/dsql.json

@@ -16,7 +16,7 @@
   },
   "dsql:witnessregion": {
     "key": "dsql:WitnessRegion",
-    "description": "Filters access by the witness region of linked clusters",
-    "type": "ArrayOfString"
+    "description": "Filters access by the witness region of multi-Region clusters",
+    "type": "String"
   }
 }

package/data/conditionKeys/license-manager.json

@@ -4,6 +4,11 @@
     "description": "Filters access by the tags that are passed in the request",
     "type": "String"
   },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
   "aws:tagkeys": {
     "key": "aws:TagKeys",
     "description": "Filters access by tag keys that are passed in the request",

package/data/resourceTypes/events.json

@@ -59,5 +59,13 @@
   "terminate-instance": {
     "key": "terminate-instance",
     "arn": "arn:${Partition}:events:${Region}:${Account}:target/terminate-instance"
+  },
+  "alias": {
+    "key": "alias",
+    "arn": "arn:${Partition}:kms:${Region}:${Account}:alias/${Alias}"
+  },
+  "key": {
+    "key": "key",
+    "arn": "arn:${Partition}:kms:${Region}:${Account}:key/${KeyId}"
   }
 }

package/data/resourceTypes/license-manager.json

@@ -3,21 +3,29 @@
     "key": "license-configuration",
     "arn": "arn:${Partition}:license-manager:${Region}:${Account}:license-configuration:${LicenseConfigurationId}",
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "license-manager:ResourceTag/${TagKey}"
     ]
   },
   "license": {
     "key": "license",
-    "arn": "arn:${Partition}:license-manager::${Account}:license:${LicenseId}"
+    "arn": "arn:${Partition}:license-manager::${Account}:license:${LicenseId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "grant": {
     "key": "grant",
-    "arn": "arn:${Partition}:license-manager::${Account}:grant:${GrantId}"
+    "arn": "arn:${Partition}:license-manager::${Account}:grant:${GrantId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "report-generator": {
     "key": "report-generator",
     "arn": "arn:${Partition}:license-manager:${Region}:${Account}:report-generator:${ReportGeneratorId}",
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "license-manager:ResourceTag/${TagKey}"
     ]
   }

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202505141",
+  "version": "0.9.202505161",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2025-05-14T04:48:25.835Z",
+  "updatedAt": "2025-05-16T04:48:53.114Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",