@cloud-copilot/iam-data 0.9.202506281 → 0.9.202507021

package/data/actions/apigateway.json

@@ -1,4 +1,26 @@
 {
+  "createroutingrule": {
+    "name": "CreateRoutingRule",
+    "description": "Grants permission to create a routing rule",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "RoutingRule",
+        "required": true,
+        "conditionKeys": [
+          "apigateway:Request/Priority",
+          "apigateway:Request/ConditionBasePaths"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "apigateway:Request/Priority",
+      "apigateway:Request/ConditionBasePaths"
+    ],
+    "dependentActions": []
+  },
   "delete": {
     "name": "DELETE",
     "description": "Grants permission to delete a particular resource",
@@ -167,6 +189,28 @@
     ],
     "dependentActions": []
   },
+  "deleteroutingrule": {
+    "name": "DeleteRoutingRule",
+    "description": "Grants permission to delete a routing rule",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "RoutingRule",
+        "required": true,
+        "conditionKeys": [
+          "apigateway:Resource/Priority",
+          "apigateway:Resource/ConditionBasePaths"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "apigateway:Resource/Priority",
+      "apigateway:Resource/ConditionBasePaths"
+    ],
+    "dependentActions": []
+  },
   "get": {
     "name": "GET",
     "description": "Grants permission to read a particular resource",
@@ -446,6 +490,40 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getroutingrule": {
+    "name": "GetRoutingRule",
+    "description": "Grants permission to read a routing rule",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "RoutingRule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "listroutingrule": {
+    "name": "ListRoutingRule",
+    "description": "Grants permission to list routing rules under a domain name",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "RoutingRule",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "patch": {
     "name": "PATCH",
     "description": "Grants permission to update a particular resource",
@@ -794,6 +872,32 @@
     ],
     "dependentActions": []
   },
+  "updateroutingrule": {
+    "name": "UpdateRoutingRule",
+    "description": "Grants permission to update a routing rule using the PutRoutingRule API",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "RoutingRule",
+        "required": true,
+        "conditionKeys": [
+          "apigateway:Request/Priority",
+          "apigateway:Request/ConditionBasePaths",
+          "apigateway:Resource/Priority",
+          "apigateway:Resource/ConditionBasePaths"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "apigateway:Request/Priority",
+      "apigateway:Request/ConditionBasePaths",
+      "apigateway:Resource/Priority",
+      "apigateway:Resource/ConditionBasePaths"
+    ],
+    "dependentActions": []
+  },
   "addcertificatetodomain": {
     "name": "AddCertificateToDomain",
     "description": "Grants permission to add certificates for mutual TLS authentication to a domain name. This is an additional authorization control for managing the DomainName resource due to the sensitive nature of mTLS",

package/data/actions/cassandra.json

@@ -137,6 +137,59 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getrecords": {
+    "name": "GetRecords",
+    "description": "Grants permission to retrieve the CDC stream records from a given shard",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getsharditerator": {
+    "name": "GetShardIterator",
+    "description": "Grants permission to return a shard iterator",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getstream": {
+    "name": "GetStream",
+    "description": "Grants permission to return information about a CDC stream, including the composition of its shards",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "stream",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "liststreams": {
+    "name": "ListStreams",
+    "description": "Grants permission to return an array of CDC stream ARNs associated with the current account and endpoint",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "modify": {
     "name": "Modify",
     "description": "Grants permission to INSERT, UPDATE or DELETE data in a table",
@@ -253,7 +306,7 @@
   },
   "tagresource": {
     "name": "TagResource",
-    "description": "Grants permission to tag a keyspace or table",
+    "description": "Grants permission to tag a keyspace, table, or stream",
     "accessLevel": "Tagging",
     "resourceTypes": [
       {
@@ -262,6 +315,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "stream",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "table",
         "required": false,
@@ -300,7 +359,7 @@
   },
   "untagresource": {
     "name": "UntagResource",
-    "description": "Grants permission to untag a keyspace or table",
+    "description": "Grants permission to untag a keyspace, table or stream",
     "accessLevel": "Tagging",
     "resourceTypes": [
       {
@@ -309,6 +368,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "stream",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "table",
         "required": false,

package/data/actions/dsql.json

@@ -1,6 +1,7 @@
 {
   "addpeercluster": {
     "name": "AddPeerCluster",
+    "isPermissionOnly": true,
     "description": "Grants permission to add a peer cluster to a multi-Region cluster",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -167,6 +168,7 @@
   },
   "putmultiregionproperties": {
     "name": "PutMultiRegionProperties",
+    "isPermissionOnly": true,
     "description": "Grants permission to update multi-Region properties of a cluster",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -182,6 +184,7 @@
   },
   "putwitnessregion": {
     "name": "PutWitnessRegion",
+    "isPermissionOnly": true,
     "description": "Grants permission to configure and update the witness Region of a multi-Region cluster",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -201,6 +204,7 @@
   },
   "removepeercluster": {
     "name": "RemovePeerCluster",
+    "isPermissionOnly": true,
     "description": "Grants permission to remove a peer cluster from a multi-Region cluster",
     "accessLevel": "Write",
     "resourceTypes": [

package/data/actions/dynamodb.json

@@ -94,6 +94,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createglobaltablewitness": {
+    "name": "CreateGlobalTableWitness",
+    "isPermissionOnly": true,
+    "description": "Grants permission to add a Witness to a Global Table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createtable": {
     "name": "CreateTable",
     "description": "Grants permission to the CreateTable operation adds a new table to your account",
@@ -143,6 +159,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteglobaltablewitness": {
+    "name": "DeleteGlobalTableWitness",
+    "isPermissionOnly": true,
+    "description": "Grants permission to remove a Witness from a Global Table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteitem": {
     "name": "DeleteItem",
     "description": "Grants permission to deletes a single item in a table by primary key",

package/data/actions/odb.json

@@ -0,0 +1,796 @@
+{
+  "acceptmarketplaceregistration": {
+    "name": "AcceptMarketplaceRegistration",
+    "description": "Grants permission to register the Amazon Web Services Marketplace token for your Amazon Web Services account to activate your Oracle Database@Amazon Web Services subscription",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createcloudautonomousvmcluster": {
+    "name": "CreateCloudAutonomousVmCluster",
+    "description": "Grants permission to create a new Autonomous VM cluster in the specified Exadata infrastructure",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cloud-exadata-infrastructure",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "odb-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createcloudexadatainfrastructure": {
+    "name": "CreateCloudExadataInfrastructure",
+    "description": "Grants permission to create an Exadata infrastructure",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createcloudvmcluster": {
+    "name": "CreateCloudVmCluster",
+    "description": "Grants permission to create a VM cluster on the specified Exadata infrastructure",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cloud-exadata-infrastructure",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "odb-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createdbnode": {
+    "name": "CreateDbNode",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create a DB Node",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db-node",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createodbnetwork": {
+    "name": "CreateOdbNetwork",
+    "description": "Grants permission to create an ODB network",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createodbpeeringconnection": {
+    "name": "CreateOdbPeeringConnection",
+    "description": "Grants permission to create an ODB Peering Connection",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "odb-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createoutboundintegration": {
+    "name": "CreateOutboundIntegration",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create an Outbound Integration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cloud-autonomous-vm-cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cloud-vm-cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletecloudautonomousvmcluster": {
+    "name": "DeleteCloudAutonomousVmCluster",
+    "description": "Grants permission to Deletes an Autonomous VM cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cloud-autonomous-vm-cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletecloudexadatainfrastructure": {
+    "name": "DeleteCloudExadataInfrastructure",
+    "description": "Grants permission to delete a specified Exadata infrastructure. Before you use this operation, make sure to delete all of the VM clusters that are hosted on this Exadata infrastructure",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cloud-exadata-infrastructure",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletecloudvmcluster": {
+    "name": "DeleteCloudVmCluster",
+    "description": "Grants permission to delete a specified VM cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cloud-vm-cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletedbnode": {
+    "name": "DeleteDbNode",
+    "isPermissionOnly": true,
+    "description": "Grants permission to delete a DB Node",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "db-node",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteodbnetwork": {
+    "name": "DeleteOdbNetwork",
+    "description": "Grants permission to delete the specified ODB network",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "odb-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteodbpeeringconnection": {
+    "name": "DeleteOdbPeeringConnection",
+    "description": "Grants permission to delete the specified ODB Peering Connection. When you delete an ODB peering connection, the underlying VPC peering connection is also deleted",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "odb-peering-connection",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteresourcepolicy": {
+    "name": "DeleteResourcePolicy",
+    "isPermissionOnly": true,
+    "description": "Grants permission to delete a resource policy",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cloud-exadata-infrastructure",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "odb-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getcloudautonomousvmcluster": {
+    "name": "GetCloudAutonomousVmCluster",
+    "description": "Grants permission to get information about a specific Autonomous VM cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cloud-autonomous-vm-cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getcloudexadatainfrastructure": {
+    "name": "GetCloudExadataInfrastructure",
+    "description": "Grants permission to get information about the specified Exadata infrastructure",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cloud-exadata-infrastructure",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getcloudexadatainfrastructureunallocatedresources": {
+    "name": "GetCloudExadataInfrastructureUnallocatedResources",
+    "description": "Grants permission to retrieve information about unallocated resources in a specified Cloud Exadata Infrastructure",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cloud-exadata-infrastructure",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getcloudvmcluster": {
+    "name": "GetCloudVmCluster",
+    "description": "Grants permission to get information about the specified VM cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cloud-vm-cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getdbnode": {
+    "name": "GetDbNode",
+    "description": "Grants permission to get information about the specified DB node",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cloud-vm-cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db-node",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getdbserver": {
+    "name": "GetDbServer",
+    "description": "Grants permission to get information about the specified database server",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cloud-exadata-infrastructure",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getocionboardingstatus": {
+    "name": "GetOciOnboardingStatus",
+    "description": "Grants permission to get the tenancy activation link and onboarding status for your Amazon Web Services account",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getodbnetwork": {
+    "name": "GetOdbNetwork",
+    "description": "Grants permission to get information about the specified ODB network",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "odb-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getodbpeeringconnection": {
+    "name": "GetOdbPeeringConnection",
+    "description": "Grants permission to get information about the specified ODB Peering connection",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "odb-peering-connection",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getresourcepolicy": {
+    "name": "GetResourcePolicy",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get a resource policy",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cloud-exadata-infrastructure",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "odb-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "initializeservice": {
+    "name": "InitializeService",
+    "description": "Grants permission to initialize the ODB service for the first time in an account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautonomousvirtualmachines": {
+    "name": "ListAutonomousVirtualMachines",
+    "description": "Grants permission to list all Autonomous VMs in an Autonomous VM cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cloud-autonomous-vm-cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcloudautonomousvmclusters": {
+    "name": "ListCloudAutonomousVmClusters",
+    "description": "Grants permission to list all Autonomous VM clusters in a specified Cloud Exadata infrastructure",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cloud-exadata-infrastructure",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcloudexadatainfrastructures": {
+    "name": "ListCloudExadataInfrastructures",
+    "description": "Grants permission to list information about the Exadata infrastructures owned by your Amazon Web Services account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcloudvmclusters": {
+    "name": "ListCloudVmClusters",
+    "description": "Grants permission to list information about the VM clusters owned by your Amazon Web Services account or only the ones on the specified Exadata infrastructure",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cloud-exadata-infrastructure",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listdbnodes": {
+    "name": "ListDbNodes",
+    "description": "Grants permission to list information about the DB nodes for the specified VM cluster",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "cloud-vm-cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listdbservers": {
+    "name": "ListDbServers",
+    "description": "Grants permission to list information about the database servers that belong to the specified Exadata infrastructure",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cloud-exadata-infrastructure",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listdbsystemshapes": {
+    "name": "ListDbSystemShapes",
+    "description": "Grants permission to list information about the shapes that are available for an Exadata infrastructure",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listgiversions": {
+    "name": "ListGiVersions",
+    "description": "Grants permission to list information about Oracle Grid Infrastructure (GI) software versions that are available for a VM cluster for the specified shape",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listodbnetworks": {
+    "name": "ListOdbNetworks",
+    "description": "Grants permission to list information about the ODB networks owned by your Amazon Web Services account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listodbpeeringconnections": {
+    "name": "ListOdbPeeringConnections",
+    "description": "Grants permission to list all ODB peering connections or those associated with a specific ODB network",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "odb-network",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listsystemversions": {
+    "name": "ListSystemVersions",
+    "description": "Grants permission to list information about the system versions that are available for a VM cluster for the specified giVersion and shape",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list information about the tags applied to this resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cloud-autonomous-vm-cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cloud-exadata-infrastructure",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cloud-vm-cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db-node",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "odb-network",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "odb-peering-connection",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "putresourcepolicy": {
+    "name": "PutResourcePolicy",
+    "isPermissionOnly": true,
+    "description": "Grants permission to update a resource policy",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cloud-exadata-infrastructure",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "odb-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "rebootdbnode": {
+    "name": "RebootDbNode",
+    "description": "Grants permission to reboot the specified DB node in a VM cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cloud-vm-cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db-node",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startdbnode": {
+    "name": "StartDbNode",
+    "description": "Grants permission to start the specified DB node in a VM cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cloud-vm-cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db-node",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopdbnode": {
+    "name": "StopDbNode",
+    "description": "Grants permission to stop the specified DB node in a VM cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cloud-vm-cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to apply tags to the specified resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "cloud-autonomous-vm-cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cloud-exadata-infrastructure",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cloud-vm-cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db-node",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "odb-network",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "odb-peering-connection",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove tags from the specified resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "cloud-autonomous-vm-cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cloud-exadata-infrastructure",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "cloud-vm-cluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "db-node",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "odb-network",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "odb-peering-connection",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updatecloudexadatainfrastructure": {
+    "name": "UpdateCloudExadataInfrastructure",
+    "description": "Grants permission to update the properties of an Exadata infrastructure resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cloud-exadata-infrastructure",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateodbnetwork": {
+    "name": "UpdateOdbNetwork",
+    "description": "Grants permission to update properties of a specified ODB network",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "odb-network",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/rekognition.json

@@ -608,14 +608,7 @@
     "name": "ListStreamProcessors",
     "description": "Grants permission to get a list of your stream processors",
     "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "streamprocessor",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },

package/data/conditionKeys/apigateway.json

@@ -29,6 +29,11 @@
     "description": "Filters access by URI of a Lambda authorizer function. Available during CreateAuthorizer and UpdateAuthorizer. Also available during import and reimport as an ArrayOfString",
     "type": "ArrayOfString"
   },
+  "apigateway:request/conditionbasepaths": {
+    "key": "apigateway:Request/ConditionBasePaths",
+    "description": "Filters access by base paths defined on the condition of a routing rule. Available during the CreateRoutingRule and UpdateRoutingRule operations",
+    "type": "ArrayOfString"
+  },
   "apigateway:request/disableexecuteapiendpoint": {
     "key": "apigateway:Request/DisableExecuteApiEndpoint",
     "description": "Filters access by status of the default execute-api endpoint. Available during the CreateRestApi and DeleteRestApi operations",
@@ -49,11 +54,21 @@
     "description": "Filters access by version of the truststore used for mutual TLS authentication. Available during the CreateDomainName and UpdateDomainName operations",
     "type": "String"
   },
+  "apigateway:request/priority": {
+    "key": "apigateway:Request/Priority",
+    "description": "Filters access by priority of the routing rule. Available during the CreateRoutingRule and UpdateRoutingRule operations",
+    "type": "Numeric"
+  },
   "apigateway:request/routeauthorizationtype": {
     "key": "apigateway:Request/RouteAuthorizationType",
     "description": "Filters access by authorization type, for example NONE, AWS_IAM, CUSTOM, JWT, COGNITO_USER_POOLS. Available during the CreateMethod and PutMethod operations Also available as a collection during import",
     "type": "ArrayOfString"
   },
+  "apigateway:request/routingmode": {
+    "key": "apigateway:Request/RoutingMode",
+    "description": "Filters access by routing mode of the domain name. Available during the CreateDomainName and UpdateDomainName operations",
+    "type": "String"
+  },
   "apigateway:request/securitypolicy": {
     "key": "apigateway:Request/SecurityPolicy",
     "description": "Filters access by TLS version. Available during the CreateDomain and UpdateDomain operations",
@@ -94,6 +109,11 @@
     "description": "Filters access by URI of a Lambda authorizer function. Available during UpdateAuthorizer and DeleteAuthorizer operations. Also available during reimport as an ArrayOfString",
     "type": "ArrayOfString"
   },
+  "apigateway:resource/conditionbasepaths": {
+    "key": "apigateway:Resource/ConditionBasePaths",
+    "description": "Filters access by base paths defined on the condition of the existing routing rule. Available during the UpdateRoutingRule and DeleteRoutingRule operations",
+    "type": "ArrayOfString"
+  },
   "apigateway:resource/disableexecuteapiendpoint": {
     "key": "apigateway:Resource/DisableExecuteApiEndpoint",
     "description": "Filters access by status of the default execute-api endpoint of the current RestApi resource. Available during UpdateRestApi and DeleteRestApi operations",
@@ -114,11 +134,21 @@
     "description": "Filters access by version of the truststore used for mutual TLS authentication. Available during UpdateDomainName and DeleteDomainName operations",
     "type": "String"
   },
+  "apigateway:resource/priority": {
+    "key": "apigateway:Resource/Priority",
+    "description": "Filters access by priority of the existing routing rule. Available during the UpdateRoutingRule and DeleteRoutingRule operations",
+    "type": "Numeric"
+  },
   "apigateway:resource/routeauthorizationtype": {
     "key": "apigateway:Resource/RouteAuthorizationType",
     "description": "Filters access by authorization type of the existing Method resource, for example NONE, AWS_IAM, CUSTOM, JWT, COGNITO_USER_POOLS. Available during the PutMethod and DeleteMethod operations. Also available as a collection during reimport",
     "type": "ArrayOfString"
   },
+  "apigateway:resource/routingmode": {
+    "key": "apigateway:Resource/RoutingMode",
+    "description": "Filters access by routing mode of the domain name. Available during the UpdateDomainName and DeleteDomainName operations",
+    "type": "String"
+  },
   "apigateway:resource/securitypolicy": {
     "key": "apigateway:Resource/SecurityPolicy",
     "description": "Filters access by TLS version. Available during UpdateDomain and DeleteDomain operations",

package/data/conditionKeys/odb.json

@@ -0,0 +1,17 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair that is allowed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair of a resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by a list of tag keys that are allowed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/resourceTypes/apigateway.json

@@ -211,6 +211,15 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "routingrule": {
+    "key": "RoutingRule",
+    "arn": "arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/${DomainName}/routingrules/${RoutingRuleId}",
+    "conditionKeys": [
+      "apigateway:Resource/ConditionBasePaths",
+      "apigateway:Resource/Priority",
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "stage": {
     "key": "Stage",
     "arn": "arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/stages/${StageName}",
@@ -330,6 +339,7 @@
       "apigateway:Resource/EndpointType",
       "apigateway:Resource/MtlsTrustStoreUri",
       "apigateway:Resource/MtlsTrustStoreVersion",
+      "apigateway:Resource/RoutingMode",
       "apigateway:Resource/SecurityPolicy",
       "aws:ResourceTag/${TagKey}"
     ]
@@ -342,6 +352,7 @@
       "apigateway:Request/MtlsTrustStoreUri",
       "apigateway:Request/MtlsTrustStoreVersion",
       "apigateway:Request/SecurityPolicy",
+      "apigateway:Resource/RoutingMode",
       "aws:ResourceTag/${TagKey}"
     ]
   },
@@ -410,6 +421,7 @@
     "conditionKeys": [
       "apigateway:Request/EndpointType",
       "apigateway:Resource/EndpointType",
+      "apigateway:Resource/RoutingMode",
       "aws:ResourceTag/${TagKey}"
     ]
   },

package/data/resourceTypes/cassandra.json

@@ -12,5 +12,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "stream": {
+    "key": "stream",
+    "arn": "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/${KeyspaceName}/table/${TableName}/stream/${StreamLabel}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/odb.json

@@ -0,0 +1,44 @@
+{
+  "cloud-autonomous-vm-cluster": {
+    "key": "cloud-autonomous-vm-cluster",
+    "arn": "arn:${Partition}:odb:${Region}:${Account}:cloud-autonomous-vm-cluster/${CloudAutonomousVmClusterId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "cloud-exadata-infrastructure": {
+    "key": "cloud-exadata-infrastructure",
+    "arn": "arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/${CloudExadataInfrastructureId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "cloud-vm-cluster": {
+    "key": "cloud-vm-cluster",
+    "arn": "arn:${Partition}:odb:${Region}:${Account}:cloud-vm-cluster/${CloudVmClusterId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "db-node": {
+    "key": "db-node",
+    "arn": "arn:${Partition}:odb:${Region}:${Account}:db-node/${DbNodeId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "odb-network": {
+    "key": "odb-network",
+    "arn": "arn:${Partition}:odb:${Region}:${Account}:odb-network/${OdbNetworkId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "odb-peering-connection": {
+    "key": "odb-peering-connection",
+    "arn": "arn:${Partition}:odb:${Region}:${Account}:odb-peering-connection/${OdbPeeringConnectionId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

package/data/serviceNames.json

@@ -270,6 +270,7 @@
   "notifications-contacts": "AWS User Notifications Contacts",
   "oam": "Amazon CloudWatch Observability Access Manager",
   "observabilityadmin": "Amazon CloudWatch Observability Admin Service",
+  "odb": "AWS Service - Oracle Database@AWS",
   "omics": "AWS HealthOmics",
   "one": "Amazon One Enterprise",
   "opensearch": "Amazon OpenSearch",

package/data/services.json

@@ -270,6 +270,7 @@
   "notifications-contacts",
   "oam",
   "observabilityadmin",
+  "odb",
   "omics",
   "one",
   "opensearch",

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202506281",
+  "version": "0.9.202507021",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2025-06-28T04:52:10.840Z",
+  "updatedAt": "2025-07-02T04:54:47.508Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",