@cloud-copilot/iam-data 0.9.202507161 → 0.9.202507181

package/data/actions/emr-containers.json

@@ -16,7 +16,7 @@
   },
   "createcertificate": {
     "name": "CreateCertificate",
-    "description": "Grants permission to create a certificate",
+    "description": "Grants permission to call the CreateCertificate method to accept the CertificateSigningRequest, and return the signed certificate",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -278,6 +278,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "securityConfiguration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "virtualCluster",
         "required": false,
@@ -339,6 +345,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "securityConfiguration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "virtualCluster",
         "required": false,
@@ -375,6 +387,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "securityConfiguration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "virtualCluster",
         "required": false,

package/data/actions/s3.json

@@ -249,7 +249,7 @@
   },
   "createbucketmetadatatableconfiguration": {
     "name": "CreateBucketMetadataTableConfiguration",
-    "description": "Grants permission to create a new S3 Metadata configuration for a specified bucket",
+    "description": "Grants permission to create a new S3 Metadata configuration for a specified general purpose bucket",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -257,9 +257,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": [
+          "kms:DescribeKey",
           "s3tables:CreateNamespace",
           "s3tables:CreateTable",
+          "s3tables:CreateTableBucket",
           "s3tables:GetTable",
+          "s3tables:PutTableEncryption",
           "s3tables:PutTablePolicy"
         ]
       }
@@ -554,7 +557,7 @@
   },
   "deletebucketmetadatatableconfiguration": {
     "name": "DeleteBucketMetadataTableConfiguration",
-    "description": "Grants permission to delete the S3 Metadata configuration for a specified bucket",
+    "description": "Grants permission to delete the S3 Metadata configuration for a specified general purpose bucket",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -1338,7 +1341,7 @@
   },
   "getbucketmetadatatableconfiguration": {
     "name": "GetBucketMetadataTableConfiguration",
-    "description": "Grants permission to return the S3 Metadata configuration for a specified bucket",
+    "description": "Grants permission to return the S3 Metadata configuration for a specified general purpose bucket",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -3799,6 +3802,58 @@
     ],
     "dependentActions": []
   },
+  "updatebucketmetadatainventorytableconfiguration": {
+    "name": "UpdateBucketMetadataInventoryTableConfiguration",
+    "description": "Grants permission to update the inventory table configuration on an existing S3 Metadata configuration for a specified general purpose bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "kms:DescribeKey",
+          "s3tables:CreateNamespace",
+          "s3tables:CreateTable",
+          "s3tables:CreateTableBucket",
+          "s3tables:GetTable",
+          "s3tables:PutTableEncryption",
+          "s3tables:PutTablePolicy"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "s3:authType",
+      "s3:ResourceAccount",
+      "s3:signatureAge",
+      "s3:signatureversion",
+      "s3:TlsVersion",
+      "s3:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
+  "updatebucketmetadatajournaltableconfiguration": {
+    "name": "UpdateBucketMetadataJournalTableConfiguration",
+    "description": "Grants permission to update the journal table configuration on an existing S3 Metadata configuration for a specified general purpose bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3:authType",
+      "s3:ResourceAccount",
+      "s3:signatureAge",
+      "s3:signatureversion",
+      "s3:TlsVersion",
+      "s3:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "updatejobpriority": {
     "name": "UpdateJobPriority",
     "description": "Grants permission to update the priority of an existing job",

package/data/actions/securitylake.json

@@ -130,6 +130,7 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": [

package/data/conditionKeys/bedrock-agentcore.json

@@ -0,0 +1,22 @@
+{
+  "bedrock-agentcore:actorid": {
+    "key": "bedrock-agentcore:actorId",
+    "description": "Filters access by Actor Id",
+    "type": "String"
+  },
+  "bedrock-agentcore:namespace": {
+    "key": "bedrock-agentcore:namespace",
+    "description": "Filters access by namespace",
+    "type": "String"
+  },
+  "bedrock-agentcore:sessionid": {
+    "key": "bedrock-agentcore:sessionId",
+    "description": "Filters access by Session Id",
+    "type": "String"
+  },
+  "bedrock-agentcore:strategyid": {
+    "key": "bedrock-agentcore:strategyId",
+    "description": "Filters access by Memory Strategy Id",
+    "type": "String"
+  }
+}

package/data/resourceTypes/bedrock-agentcore.json

@@ -0,0 +1,46 @@
+{
+  "memory": {
+    "key": "memory",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/${MemoryId}"
+  },
+  "gateway": {
+    "key": "gateway",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/${GatewayId}"
+  },
+  "workload-identity": {
+    "key": "workload-identity",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}/workload-identity/${WorkloadIdentityName}"
+  },
+  "oauth2credentialprovider": {
+    "key": "oauth2credentialprovider",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/oauth2credentialprovider/${Name}"
+  },
+  "apikeycredentialprovider": {
+    "key": "apikeycredentialprovider",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/apikeycredentialprovider/${Name}"
+  },
+  "runtime": {
+    "key": "runtime",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}"
+  },
+  "runtime-endpoint": {
+    "key": "runtime-endpoint",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}/runtime-endpoint/${Name}"
+  },
+  "code-interpreter-custom": {
+    "key": "code-interpreter-custom",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/${CodeInterpreterId}"
+  },
+  "code-interpreter": {
+    "key": "code-interpreter",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:aws:code-interpreter/${CodeInterpreterId}"
+  },
+  "browser-custom": {
+    "key": "browser-custom",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/${BrowserId}"
+  },
+  "browser": {
+    "key": "browser",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:aws:browser/${BrowserId}"
+  }
+}

package/data/resourceTypes/emr-containers.json

@@ -33,9 +33,5 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
-  },
-  "certificate": {
-    "key": "certificate",
-    "arn": "arn:${Partition}:emr-containers:${Region}:${Account}:/certificates/${CertificateId}"
   }
 }

package/data/resourceTypes/redshift.json

@@ -55,10 +55,7 @@
   },
   "namespace": {
     "key": "namespace",
-    "arn": "arn:${Partition}:redshift:${Region}:${Account}:namespace:${ClusterNamespace}",
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ]
+    "arn": "arn:${Partition}:redshift:${Region}:${Account}:namespace:${ClusterNamespace}"
   },
   "parametergroup": {
     "key": "parametergroup",

package/data/serviceNames.json

@@ -50,6 +50,7 @@
   "bcm-data-exports": "AWS Billing And Cost Management Data Exports",
   "bcm-pricing-calculator": "AWS Billing And Cost Management Pricing Calculator",
   "bedrock": "Amazon Bedrock",
+  "bedrock-agentcore": "Amazon Bedrock Agentcore",
   "billing": "AWS Billing",
   "billingconductor": "AWS Billing Conductor",
   "braket": "Amazon Braket",
@@ -383,7 +384,6 @@
   "support-console": "AWS Support Console",
   "supportapp": "AWS Support App in Slack",
   "supportplans": "AWS Support Plans",
-  "supportrecommendations": "AWS Support Recommendations",
   "sustainability": "AWS Sustainability",
   "swf": "Amazon Simple Workflow Service",
   "synthetics": "Amazon CloudWatch Synthetics",

package/data/services.json

@@ -50,6 +50,7 @@
   "bcm-data-exports",
   "bcm-pricing-calculator",
   "bedrock",
+  "bedrock-agentcore",
   "billing",
   "billingconductor",
   "braket",
@@ -383,7 +384,6 @@
   "support-console",
   "supportapp",
   "supportplans",
-  "supportrecommendations",
   "sustainability",
   "swf",
   "synthetics",

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202507161",
+  "version": "0.9.202507181",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2025-07-16T05:01:34.567Z",
+  "updatedAt": "2025-07-18T05:02:29.708Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",

package/data/actions/supportrecommendations.json

@@ -1,20 +0,0 @@
-{
-  "getsupporttroubleshootingresponse": {
-    "name": "GetSupportTroubleshootingResponse",
-    "isPermissionOnly": true,
-    "description": "Grants permission to the GetSupportTroubleshootingResponse API which lists troubleshooting responses for users' issues",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "startsupporttroubleshooting": {
-    "name": "StartSupportTroubleshooting",
-    "isPermissionOnly": true,
-    "description": "Grants permission to the StartSupportTroubleshooting API which starts troubleshooting for users' issues",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  }
-}

package/data/conditionKeys/supportrecommendations.json

@@ -1 +0,0 @@
-{}

package/data/resourceTypes/supportrecommendations.json

@@ -1 +0,0 @@
-{}