@cloud-copilot/iam-data 0.9.202507021 → 0.9.202507041

package/data/actions/app-integrations.json

@@ -97,6 +97,21 @@
     ],
     "dependentActions": []
   },
+  "createdataintegrationschedule": {
+    "name": "CreateDataIntegrationSchedule",
+    "description": "Grants permission to create a data integration schedule",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "data-integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createeventintegration": {
     "name": "CreateEventIntegration",
     "description": "Grants permission to create a new EventIntegration",
@@ -286,6 +301,36 @@
     ],
     "dependentActions": []
   },
+  "getdataintegrationexecution": {
+    "name": "GetDataIntegrationExecution",
+    "description": "Grants permission to get details about a data integration execution",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "data-integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getdataintegrationschedule": {
+    "name": "GetDataIntegrationSchedule",
+    "description": "Grants permission to get details about a data integration schedule",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "data-integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "geteventintegration": {
     "name": "GetEventIntegration",
     "description": "Grants permission to view details about EventIntegrations",
@@ -327,6 +372,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdataintegrationexecutions": {
+    "name": "ListDataIntegrationExecutions",
+    "description": "Grants permission to list data integration executions",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "data-integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listdataintegrationschedules": {
+    "name": "ListDataIntegrationSchedules",
+    "description": "Grants permission to list data integration schedules",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "data-integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdataintegrations": {
     "name": "ListDataIntegrations",
     "description": "Grants permission to list DataIntegrations",
@@ -392,6 +467,24 @@
     ],
     "dependentActions": []
   },
+  "startdataintegrationexecution": {
+    "name": "StartDataIntegrationExecution",
+    "description": "Grants permission to start a data integration execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "data-integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "profile:CreateSegmentSnapshot",
+      "profile:CreateSnapshot"
+    ]
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag an Amazon AppIntegration resource",
@@ -543,6 +636,21 @@
     ],
     "dependentActions": []
   },
+  "updatedataintegrationschedule": {
+    "name": "UpdateDataIntegrationSchedule",
+    "description": "Grants permission to update a data integration schedule",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "data-integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateeventintegration": {
     "name": "UpdateEventIntegration",
     "description": "Grants permission to modify an EventIntegration",

package/data/actions/artifact.json

@@ -29,42 +29,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "downloadagreement": {
-    "name": "DownloadAgreement",
-    "description": "Grants permission to download an AWS agreement that has not yet been accepted or a customer agreement that has been accepted by the customer account",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "agreement",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "customer-agreement",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "get": {
-    "name": "Get",
-    "description": "Grants permission to download an AWS compliance report package",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "report-package",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getaccountsettings": {
     "name": "GetAccountSettings",
     "description": "Grants permission to get the account settings for Artifact",

package/data/actions/connect.json

@@ -755,6 +755,9 @@
           "app-integrations:CreateApplicationAssociation",
           "app-integrations:CreateEventIntegrationAssociation",
           "app-integrations:GetApplication",
+          "app-integrations:GetDataIntegration",
+          "app-integrations:ListDataIntegrationAssociations",
+          "app-integrations:TagResource",
           "cases:GetDomain",
           "chime:AssociateVoiceConnectorConnect",
           "chime:DisassociateVoiceConnectorConnect",
@@ -1441,6 +1444,7 @@
         "dependentActions": [
           "app-integrations:DeleteApplicationAssociation",
           "app-integrations:DeleteEventIntegrationAssociation",
+          "app-integrations:UntagResource",
           "connect:DescribeInstance",
           "ds:DescribeDirectories",
           "events:DeleteRule",

package/data/actions/qbusiness.json

@@ -188,6 +188,24 @@
     ],
     "dependentActions": []
   },
+  "createchatresponseconfiguration": {
+    "name": "CreateChatResponseConfiguration",
+    "description": "Grants permission to create a chat response configuration to the application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createdataaccessor": {
     "name": "CreateDataAccessor",
     "description": "Grants permission to create DataAccessor to the application",
@@ -424,6 +442,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletechatresponseconfiguration": {
+    "name": "DeleteChatResponseConfiguration",
+    "description": "Grants permission to delete a chat response configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "chat-response-configuration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteconversation": {
     "name": "DeleteConversation",
     "description": "Grants permission to delete a conversation",
@@ -691,6 +730,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getchatresponseconfiguration": {
+    "name": "GetChatResponseConfiguration",
+    "description": "Grants permission to get a chat response configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "chat-response-configuration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdataaccessor": {
     "name": "GetDataAccessor",
     "description": "Grants permission to get DataAccessor",
@@ -948,6 +1008,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listchatresponseconfigurations": {
+    "name": "ListChatResponseConfigurations",
+    "description": "Grants permission to list chat response configurations for an application",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listconversations": {
     "name": "ListConversations",
     "description": "Grants permission to list all conversations for an application",
@@ -1206,6 +1281,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "chat-response-configuration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "data-accessor",
         "required": false,
@@ -1436,6 +1517,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "chat-response-configuration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "data-accessor",
         "required": false,
@@ -1496,6 +1583,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "chat-response-configuration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "data-accessor",
         "required": false,
@@ -1574,6 +1667,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatechatresponseconfiguration": {
+    "name": "UpdateChatResponseConfiguration",
+    "description": "Grants permission to update a chat response configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "chat-response-configuration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatedataaccessor": {
     "name": "UpdateDataAccessor",
     "description": "Grants permission to update DataAccessor",

package/data/actions/s3express.json

@@ -42,7 +42,9 @@
       "s3express:ResourceAccount",
       "s3express:signatureversion",
       "s3express:TlsVersion",
-      "s3express:x-amz-content-sha256"
+      "s3express:x-amz-content-sha256",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -199,7 +201,14 @@
     "name": "GetAccessPoint",
     "description": "Grants permission to return configuration information about the specified access point",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "s3express:DataAccessPointAccount",
       "s3express:DataAccessPointArn",
@@ -351,6 +360,27 @@
     ],
     "dependentActions": []
   },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to lists all of the tags for a specified resource",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "putaccesspointpolicy": {
     "name": "PutAccessPointPolicy",
     "description": "Grants permission to associate an access policy with a specified access point",
@@ -461,5 +491,50 @@
       "s3express:x-amz-content-sha256"
     ],
     "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to create a new user-defined tag or update an existing tag",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove the specified user-defined tags from an S3 resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
   }
 }

package/data/actions/ssm.json

@@ -1781,7 +1781,9 @@
     "description": "Grants permission to add or update inventory items on multiple specified managed instances",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "ssm:InventoryTypeName"
+    ],
     "dependentActions": []
   },
   "putparameter": {

package/data/conditionKeys/s3express.json

@@ -1,4 +1,19 @@
 {
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  },
   "s3express:accesspointnetworkorigin": {
     "key": "s3express:AccessPointNetworkOrigin",
     "description": "Filters access by the network origin (Internet or VPC)",
@@ -9,6 +24,11 @@
     "description": "Filters access by AWS Local Zone network border group(s) provided in this condition key",
     "type": "String"
   },
+  "s3express:buckettag/${tagkey}": {
+    "key": "s3express:BucketTag/${TagKey}",
+    "description": "Filters access by tag key-value pairs attached to the bucket",
+    "type": "String"
+  },
   "s3express:dataaccesspointaccount": {
     "key": "s3express:DataAccessPointAccount",
     "description": "Filters access by the AWS Account ID that owns the access point",
@@ -21,7 +41,7 @@
   },
   "s3express:locationname": {
     "key": "s3express:LocationName",
-    "description": "Filters access by a specific Availability Zone ID",
+    "description": "Filters access by a specific Availability Zone or Local Zone ID",
     "type": "String"
   },
   "s3express:permissions": {

package/data/conditionKeys/ssm.json

@@ -39,6 +39,11 @@
     "description": "Filters access by verifying that a user has permission to access a document belonging to a specific document type. Only available in \"aws\", \"aws-cn\", and \"aws-us-gov\" partitions",
     "type": "String"
   },
+  "ssm:inventorytypename": {
+    "key": "ssm:InventoryTypeName",
+    "description": "Filters access by verifying that a user also has access to the InventoryType specified in the request",
+    "type": "ArrayOfString"
+  },
   "ssm:overwrite": {
     "key": "ssm:Overwrite",
     "description": "Filters access by controling whether Systems Manager parameters can be overwritten",

package/data/resourceTypes/artifact.json

@@ -1,8 +1,4 @@
 {
-  "report-package": {
-    "key": "report-package",
-    "arn": "arn:${Partition}:artifact:::report-package/*"
-  },
   "customer-agreement": {
     "key": "customer-agreement",
     "arn": "arn:${Partition}:artifact::${Account}:customer-agreement/*"
@@ -13,6 +9,10 @@
   },
   "report": {
     "key": "report",
-    "arn": "arn:${Partition}:artifact:${Region}::report/${ReportId}:${Version}"
+    "arn": "arn:${Partition}:artifact:${Region}::report/${ReportId}:${Version}",
+    "conditionKeys": [
+      "artifact:ReportCategory",
+      "artifact:ReportSeries"
+    ]
   }
 }

package/data/resourceTypes/qbusiness.json

@@ -62,5 +62,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "chat-response-configuration": {
+    "key": "chat-response-configuration",
+    "arn": "arn:${Partition}:qbusiness:${Region}:${Account}:application/${ApplicationId}/chat-response-configuration/${ChatResponseConfigurationId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/s3express.json

@@ -1,7 +1,11 @@
 {
   "bucket": {
     "key": "bucket",
-    "arn": "arn:${Partition}:s3express:${Region}:${Account}:bucket/${BucketName}"
+    "arn": "arn:${Partition}:s3express:${Region}:${Account}:bucket/${BucketName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "s3express:BucketTag/${TagKey}"
+    ]
   },
   "accesspoint": {
     "key": "accesspoint",

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202507021",
+  "version": "0.9.202507041",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2025-07-02T04:54:47.508Z",
+  "updatedAt": "2025-07-04T04:56:26.926Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",