@cloud-copilot/iam-data 0.9.202506281 → 0.9.202507031

package/data/actions/rekognition.json

@@ -608,14 +608,7 @@
     "name": "ListStreamProcessors",
     "description": "Grants permission to get a list of your stream processors",
     "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "streamprocessor",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },

package/data/actions/ssm.json

@@ -1781,7 +1781,9 @@
     "description": "Grants permission to add or update inventory items on multiple specified managed instances",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "ssm:InventoryTypeName"
+    ],
     "dependentActions": []
   },
   "putparameter": {

package/data/conditionKeys/apigateway.json

@@ -29,6 +29,11 @@
     "description": "Filters access by URI of a Lambda authorizer function. Available during CreateAuthorizer and UpdateAuthorizer. Also available during import and reimport as an ArrayOfString",
     "type": "ArrayOfString"
   },
+  "apigateway:request/conditionbasepaths": {
+    "key": "apigateway:Request/ConditionBasePaths",
+    "description": "Filters access by base paths defined on the condition of a routing rule. Available during the CreateRoutingRule and UpdateRoutingRule operations",
+    "type": "ArrayOfString"
+  },
   "apigateway:request/disableexecuteapiendpoint": {
     "key": "apigateway:Request/DisableExecuteApiEndpoint",
     "description": "Filters access by status of the default execute-api endpoint. Available during the CreateRestApi and DeleteRestApi operations",
@@ -49,11 +54,21 @@
     "description": "Filters access by version of the truststore used for mutual TLS authentication. Available during the CreateDomainName and UpdateDomainName operations",
     "type": "String"
   },
+  "apigateway:request/priority": {
+    "key": "apigateway:Request/Priority",
+    "description": "Filters access by priority of the routing rule. Available during the CreateRoutingRule and UpdateRoutingRule operations",
+    "type": "Numeric"
+  },
   "apigateway:request/routeauthorizationtype": {
     "key": "apigateway:Request/RouteAuthorizationType",
     "description": "Filters access by authorization type, for example NONE, AWS_IAM, CUSTOM, JWT, COGNITO_USER_POOLS. Available during the CreateMethod and PutMethod operations Also available as a collection during import",
     "type": "ArrayOfString"
   },
+  "apigateway:request/routingmode": {
+    "key": "apigateway:Request/RoutingMode",
+    "description": "Filters access by routing mode of the domain name. Available during the CreateDomainName and UpdateDomainName operations",
+    "type": "String"
+  },
   "apigateway:request/securitypolicy": {
     "key": "apigateway:Request/SecurityPolicy",
     "description": "Filters access by TLS version. Available during the CreateDomain and UpdateDomain operations",
@@ -94,6 +109,11 @@
     "description": "Filters access by URI of a Lambda authorizer function. Available during UpdateAuthorizer and DeleteAuthorizer operations. Also available during reimport as an ArrayOfString",
     "type": "ArrayOfString"
   },
+  "apigateway:resource/conditionbasepaths": {
+    "key": "apigateway:Resource/ConditionBasePaths",
+    "description": "Filters access by base paths defined on the condition of the existing routing rule. Available during the UpdateRoutingRule and DeleteRoutingRule operations",
+    "type": "ArrayOfString"
+  },
   "apigateway:resource/disableexecuteapiendpoint": {
     "key": "apigateway:Resource/DisableExecuteApiEndpoint",
     "description": "Filters access by status of the default execute-api endpoint of the current RestApi resource. Available during UpdateRestApi and DeleteRestApi operations",
@@ -114,11 +134,21 @@
     "description": "Filters access by version of the truststore used for mutual TLS authentication. Available during UpdateDomainName and DeleteDomainName operations",
     "type": "String"
   },
+  "apigateway:resource/priority": {
+    "key": "apigateway:Resource/Priority",
+    "description": "Filters access by priority of the existing routing rule. Available during the UpdateRoutingRule and DeleteRoutingRule operations",
+    "type": "Numeric"
+  },
   "apigateway:resource/routeauthorizationtype": {
     "key": "apigateway:Resource/RouteAuthorizationType",
     "description": "Filters access by authorization type of the existing Method resource, for example NONE, AWS_IAM, CUSTOM, JWT, COGNITO_USER_POOLS. Available during the PutMethod and DeleteMethod operations. Also available as a collection during reimport",
     "type": "ArrayOfString"
   },
+  "apigateway:resource/routingmode": {
+    "key": "apigateway:Resource/RoutingMode",
+    "description": "Filters access by routing mode of the domain name. Available during the UpdateDomainName and DeleteDomainName operations",
+    "type": "String"
+  },
   "apigateway:resource/securitypolicy": {
     "key": "apigateway:Resource/SecurityPolicy",
     "description": "Filters access by TLS version. Available during UpdateDomain and DeleteDomain operations",

package/data/conditionKeys/odb.json

@@ -0,0 +1,17 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair that is allowed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair of a resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by a list of tag keys that are allowed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/ssm.json

@@ -39,6 +39,11 @@
     "description": "Filters access by verifying that a user has permission to access a document belonging to a specific document type. Only available in \"aws\", \"aws-cn\", and \"aws-us-gov\" partitions",
     "type": "String"
   },
+  "ssm:inventorytypename": {
+    "key": "ssm:InventoryTypeName",
+    "description": "Filters access by verifying that a user also has access to the InventoryType specified in the request",
+    "type": "ArrayOfString"
+  },
   "ssm:overwrite": {
     "key": "ssm:Overwrite",
     "description": "Filters access by controling whether Systems Manager parameters can be overwritten",

package/data/resourceTypes/apigateway.json

@@ -211,6 +211,15 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "routingrule": {
+    "key": "RoutingRule",
+    "arn": "arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/${DomainName}/routingrules/${RoutingRuleId}",
+    "conditionKeys": [
+      "apigateway:Resource/ConditionBasePaths",
+      "apigateway:Resource/Priority",
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "stage": {
     "key": "Stage",
     "arn": "arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/stages/${StageName}",
@@ -330,6 +339,7 @@
       "apigateway:Resource/EndpointType",
       "apigateway:Resource/MtlsTrustStoreUri",
       "apigateway:Resource/MtlsTrustStoreVersion",
+      "apigateway:Resource/RoutingMode",
       "apigateway:Resource/SecurityPolicy",
       "aws:ResourceTag/${TagKey}"
     ]
@@ -342,6 +352,7 @@
       "apigateway:Request/MtlsTrustStoreUri",
       "apigateway:Request/MtlsTrustStoreVersion",
       "apigateway:Request/SecurityPolicy",
+      "apigateway:Resource/RoutingMode",
       "aws:ResourceTag/${TagKey}"
     ]
   },
@@ -410,6 +421,7 @@
     "conditionKeys": [
       "apigateway:Request/EndpointType",
       "apigateway:Resource/EndpointType",
+      "apigateway:Resource/RoutingMode",
       "aws:ResourceTag/${TagKey}"
     ]
   },

package/data/resourceTypes/artifact.json

@@ -1,8 +1,4 @@
 {
-  "report-package": {
-    "key": "report-package",
-    "arn": "arn:${Partition}:artifact:::report-package/*"
-  },
   "customer-agreement": {
     "key": "customer-agreement",
     "arn": "arn:${Partition}:artifact::${Account}:customer-agreement/*"
@@ -13,6 +9,10 @@
   },
   "report": {
     "key": "report",
-    "arn": "arn:${Partition}:artifact:${Region}::report/${ReportId}:${Version}"
+    "arn": "arn:${Partition}:artifact:${Region}::report/${ReportId}:${Version}",
+    "conditionKeys": [
+      "artifact:ReportCategory",
+      "artifact:ReportSeries"
+    ]
   }
 }

package/data/resourceTypes/cassandra.json

@@ -12,5 +12,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "stream": {
+    "key": "stream",
+    "arn": "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/${KeyspaceName}/table/${TableName}/stream/${StreamLabel}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/odb.json

@@ -0,0 +1,44 @@
+{
+  "cloud-autonomous-vm-cluster": {
+    "key": "cloud-autonomous-vm-cluster",
+    "arn": "arn:${Partition}:odb:${Region}:${Account}:cloud-autonomous-vm-cluster/${CloudAutonomousVmClusterId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "cloud-exadata-infrastructure": {
+    "key": "cloud-exadata-infrastructure",
+    "arn": "arn:${Partition}:odb:${Region}:${Account}:cloud-exadata-infrastructure/${CloudExadataInfrastructureId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "cloud-vm-cluster": {
+    "key": "cloud-vm-cluster",
+    "arn": "arn:${Partition}:odb:${Region}:${Account}:cloud-vm-cluster/${CloudVmClusterId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "db-node": {
+    "key": "db-node",
+    "arn": "arn:${Partition}:odb:${Region}:${Account}:db-node/${DbNodeId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "odb-network": {
+    "key": "odb-network",
+    "arn": "arn:${Partition}:odb:${Region}:${Account}:odb-network/${OdbNetworkId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "odb-peering-connection": {
+    "key": "odb-peering-connection",
+    "arn": "arn:${Partition}:odb:${Region}:${Account}:odb-peering-connection/${OdbPeeringConnectionId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

package/data/serviceNames.json

@@ -270,6 +270,7 @@
   "notifications-contacts": "AWS User Notifications Contacts",
   "oam": "Amazon CloudWatch Observability Access Manager",
   "observabilityadmin": "Amazon CloudWatch Observability Admin Service",
+  "odb": "AWS Service - Oracle Database@AWS",
   "omics": "AWS HealthOmics",
   "one": "Amazon One Enterprise",
   "opensearch": "Amazon OpenSearch",

package/data/services.json

@@ -270,6 +270,7 @@
   "notifications-contacts",
   "oam",
   "observabilityadmin",
+  "odb",
   "omics",
   "one",
   "opensearch",

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202506281",
+  "version": "0.9.202507031",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2025-06-28T04:52:10.840Z",
+  "updatedAt": "2025-07-03T04:57:53.657Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",