@cloud-copilot/iam-data 0.9.202506121 → 0.9.202506141

package/data/actions/amplify.json

@@ -92,10 +92,7 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "createwebhook": {

package/data/actions/cognito-idp.json

@@ -947,6 +947,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettokensfromrefreshtoken": {
+    "name": "GetTokensFromRefreshToken",
+    "description": "Grants permission to update user tokens with refresh tokens",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getuicustomization": {
     "name": "GetUICustomization",
     "description": "Grants permission to get UI customization information for the hosted UI of any app client",

package/data/actions/controlcatalog.json

@@ -22,6 +22,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcontrolmappings": {
+    "name": "ListControlMappings",
+    "description": "Grants permission to return a paginated list of control mappings from the AWS Control Catalog",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcontrols": {
     "name": "ListControls",
     "description": "Grants permission to return a paginated list of all available controls in the AWS Control Catalog library",

package/data/actions/ecs.json

@@ -18,7 +18,9 @@
       {
         "name": "cluster",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -682,12 +684,13 @@
       {
         "name": "cluster",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "ecs:capacity-provider"
     ],
     "dependentActions": []
@@ -700,13 +703,14 @@
       {
         "name": "cluster",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -1034,12 +1038,13 @@
       {
         "name": "cluster",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "ecs:fargate-ephemeral-storage-kms-key"
     ],
     "dependentActions": []

package/data/actions/outposts.json

@@ -51,6 +51,7 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -59,7 +60,14 @@
     "name": "CreatePrivateConnectivityConfig",
     "description": "Grants permission to create a private connectivity configuration",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "outpost",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -70,6 +78,7 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -192,7 +201,14 @@
     "name": "GetPrivateConnectivityConfig",
     "description": "Grants permission to get a private connectivity configuration",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "outpost",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -245,7 +261,14 @@
     "name": "ListAssets",
     "description": "Grants permission to list the assets for your Outpost",
     "accessLevel": "List",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "outpost",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },

package/data/actions/pcs.json

@@ -2,7 +2,7 @@
   "allowvendedlogdeliveryforresource": {
     "name": "AllowVendedLogDeliveryForResource",
     "isPermissionOnly": true,
-    "description": "Grants permission to configure vended log delivery for Skybridge cluster logs",
+    "description": "Grants permission to configure vended log delivery for AWS PCS cluster logs",
     "accessLevel": "Write",
     "resourceTypes": [
       {

package/data/actions/resource-explorer-2.json

@@ -67,7 +67,7 @@
     "name": "DeleteResourcePolicy",
     "isPermissionOnly": true,
     "description": "Grants permission to delete the specified view's resource policy",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [
       {
         "name": "view",
@@ -237,7 +237,7 @@
     "name": "PutResourcePolicy",
     "isPermissionOnly": true,
     "description": "Grants permission to update the specified view's resource policy",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [
       {
         "name": "view",

package/data/actions/s3express.json

@@ -48,7 +48,7 @@
   },
   "createsession": {
     "name": "CreateSession",
-    "description": "Grants permission to Create Session token which is used for object APIs such as PutObject, GetObject, ect",
+    "description": "Grants permission to Create Session token which is used for object APIs such as PutObject, GetObject, etc",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -56,6 +56,14 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "accesspoint",
+        "required": false,
+        "conditionKeys": [
+          "s3express:Permissions"
+        ],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -68,7 +76,8 @@
       "s3express:x-amz-content-sha256",
       "s3express:x-amz-server-side-encryption",
       "s3express:x-amz-server-side-encryption-aws-kms-key-id",
-      "s3express:AllAccessRestrictedToLocalZoneGroup"
+      "s3express:AllAccessRestrictedToLocalZoneGroup",
+      "s3express:Permissions"
     ],
     "dependentActions": []
   },

package/data/actions/support-console.json

@@ -0,0 +1,101 @@
+{
+  "checksubscription": {
+    "name": "CheckSubscription",
+    "isPermissionOnly": true,
+    "description": "Grants permission to check whether the account has access to given product",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createcasedraft": {
+    "name": "CreateCaseDraft",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create or update case draft for the given case type",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createcontact": {
+    "name": "CreateContact",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create an authenticated contact for the given contact type",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletecasedraft": {
+    "name": "DeleteCaseDraft",
+    "isPermissionOnly": true,
+    "description": "Grants permission to delete a case draft for the given case type",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describedynamichelp": {
+    "name": "DescribeDynamicHelp",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get dynamic help resources for given service and category",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getaccountgovcloudenabled": {
+    "name": "GetAccountGovCloudEnabled",
+    "isPermissionOnly": true,
+    "description": "Grants permission to determines whether the calling account is GovCloud enabled",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getaccountstate": {
+    "name": "GetAccountState",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get the state of the calling account",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getbanner": {
+    "name": "GetBanner",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get the support banner information",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getcasedraft": {
+    "name": "GetCaseDraft",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get a case draft for given case type",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getquestionnaire": {
+    "name": "GetQuestionnaire",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get a feedback questionnaire",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "savefeedback": {
+    "name": "SaveFeedback",
+    "isPermissionOnly": true,
+    "description": "Grants permission to save questionnaire feedback",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/conditionKeys/support-console.json

@@ -0,0 +1 @@
+{}

package/data/resourceTypes/support-console.json

@@ -0,0 +1 @@
+{}

package/data/serviceNames.json

@@ -153,7 +153,7 @@
   "es": "Amazon OpenSearch Service",
   "events": "Amazon EventBridge",
   "evidently": "Amazon CloudWatch Evidently",
-  "evs": "Amazon Elastic Virtualization Service",
+  "evs": "Amazon Elastic VMware Service",
   "execute-api": "Amazon API Gateway",
   "finspace": "Amazon FinSpace",
   "finspace-api": "Amazon FinSpace API",
@@ -376,6 +376,7 @@
   "storagegateway": "AWS Storage Gateway",
   "sts": "AWS Security Token Service",
   "support": "AWS Support",
+  "support-console": "AWS Support Console",
   "supportapp": "AWS Support App in Slack",
   "supportplans": "AWS Support Plans",
   "supportrecommendations": "AWS Support Recommendations",

package/data/services.json

@@ -376,6 +376,7 @@
   "storagegateway",
   "sts",
   "support",
+  "support-console",
   "supportapp",
   "supportplans",
   "supportrecommendations",

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202506121",
+  "version": "0.9.202506141",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2025-06-12T04:51:42.250Z",
+  "updatedAt": "2025-06-14T04:50:57.705Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",