aws-iam-data 0.0.12 → 0.0.14

package/data/changelog.json

@@ -1,4 +1,81 @@
 [
+  {
+    "dateOfChange": "2023-06-02",
+    "addedServices": [],
+    "removedServices": [],
+    "addedActions": {
+      "Amazon AppFlow": [
+        "appflow:CancelFlowExecutions",
+        "appflow:UseConnectorProfile"
+      ],
+      "Amazon WorkSpaces Web": [
+        "workspaces-web:AssociateIpAccessSettings",
+        "workspaces-web:CreateIpAccessSettings",
+        "workspaces-web:DeleteIpAccessSettings",
+        "workspaces-web:DisassociateIpAccessSettings",
+        "workspaces-web:GetIpAccessSettings",
+        "workspaces-web:ListIpAccessSettings",
+        "workspaces-web:UpdateIpAccessSettings"
+      ]
+    },
+    "removedActions": {
+      "Amazon AppFlow": [
+        "appflow:\n"
+      ]
+    }
+  },
+  {
+    "dateOfChange": "2023-06-01",
+    "addedServices": [],
+    "removedServices": [],
+    "addedActions": {
+      "Amazon Security Lake": [
+        "securitylake:CreateDataLake",
+        "securitylake:CreateDataLakeExceptionSubscription",
+        "securitylake:CreateDataLakeOrganizationConfiguration",
+        "securitylake:CreateSubscriberNotification",
+        "securitylake:DeleteDataLake",
+        "securitylake:DeleteDataLakeExceptionSubscription",
+        "securitylake:DeleteDataLakeOrganizationConfiguration",
+        "securitylake:DeleteSubscriberNotification",
+        "securitylake:DeregisterDataLakeDelegatedAdministrator",
+        "securitylake:GetDataLakeExceptionSubscription",
+        "securitylake:GetDataLakeOrganizationConfiguration",
+        "securitylake:GetDataLakeSources",
+        "securitylake:ListDataLakeExceptions",
+        "securitylake:ListDataLakes",
+        "securitylake:RegisterDataLakeDelegatedAdministrator",
+        "securitylake:UpdateDataLake",
+        "securitylake:UpdateDataLakeExceptionSubscription",
+        "securitylake:UpdateSubscriberNotification"
+      ]
+    },
+    "removedActions": {
+      "Amazon Security Lake": [
+        "securitylake:CreateDatalake",
+        "securitylake:CreateDatalakeAutoEnable",
+        "securitylake:CreateDatalakeDelegatedAdmin",
+        "securitylake:CreateDatalakeExceptionsSubscription",
+        "securitylake:CreateSubscriptionNotificationConfiguration",
+        "securitylake:DeleteDatalake",
+        "securitylake:DeleteDatalakeAutoEnable",
+        "securitylake:DeleteDatalakeDelegatedAdmin",
+        "securitylake:DeleteDatalakeExceptionsSubscription",
+        "securitylake:DeleteSubscriptionNotificationConfiguration",
+        "securitylake:GetDatalake",
+        "securitylake:GetDatalakeAutoEnable",
+        "securitylake:GetDatalakeExceptionsExpiry",
+        "securitylake:GetDatalakeExceptionsSubscription",
+        "securitylake:GetDatalakeStatus",
+        "securitylake:GetSubscriptionNotificationConfiguration",
+        "securitylake:ListDatalakeExceptions",
+        "securitylake:UpdateDatalake",
+        "securitylake:UpdateDatalakeExceptionsExpiry",
+        "securitylake:UpdateDatalakeExceptionsSubscription",
+        "securitylake:UpdateSubscriptionNotificationConfiguration"
+      ]
+    }
+  },
   {
     "dateOfChange": "2023-05-31",
     "addedServices": [],
@@ -21,7 +98,35 @@
     "removedActions": {}
   },
   {
-    "dateOfChange": "2023-05-30",
+    "dateOfChange": "2023-05-31",
+    "addedServices": [],
+    "removedServices": [],
+    "addedActions": {},
+    "removedActions": {}
+  },
+  {
+    "dateOfChange": "2023-05-31",
+    "addedServices": [],
+    "removedServices": [],
+    "addedActions": {},
+    "removedActions": {}
+  },
+  {
+    "dateOfChange": "2023-05-31",
+    "addedServices": [],
+    "removedServices": [],
+    "addedActions": {},
+    "removedActions": {}
+  },
+  {
+    "dateOfChange": "2023-05-31",
+    "addedServices": [],
+    "removedServices": [],
+    "addedActions": {},
+    "removedActions": {}
+  },
+  {
+    "dateOfChange": "2023-05-31",
     "addedServices": [],
     "removedServices": [],
     "addedActions": {},

package/data/iam.json

@@ -10584,6 +10584,21 @@
     "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonappflow.html",
     "servicePrefix": "appflow",
     "actions": [
+      {
+        "name": "CancelFlowExecutions",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/appflow/1.0/APIReference/API_CancelFlowExecutions.html",
+        "permissionOnly": false,
+        "description": "Grants permission to cancel in-progress executions of an Amazon AppFlow flow",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "flow",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "CreateConnectorProfile",
         "apiReferenceUrl": "https://docs.aws.amazon.com/appflow/1.0/APIReference/API_CreateConnectorProfile.html",
@@ -11046,7 +11061,8 @@
         ]
       },
       {
-        "name": "\n",
+        "name": "UseConnectorProfile",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/appflow/1.0/APIReference/API_UseConnectorProfile.html",
         "permissionOnly": true,
         "description": "Grants permission to use a connector profile while creating a flow in Amazon AppFlow",
         "accessLevel": "Write",
@@ -75002,7 +75018,7 @@
       {
         "name": "evaluation_job",
         "apiReferenceUrl": "https://docs.aws.amazon.com/deepracer/latest/developerguide/deepracer-get-started-test-in-simulator.html",
-        "arnPattern": "arn:${Partition}:deepracer:${Region}:${Account}: evaluation_job/${ResourceId}",
+        "arnPattern": "arn:${Partition}:deepracer:${Region}:${Account}:evaluation_job/${ResourceId}",
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}"
         ]
@@ -127527,12 +127543,6 @@
         "description": "Grants permission to create an event schema discoverer. Once created, your events will be automatically map into corresponding schema documents",
         "accessLevel": "Write",
         "resourceTypes": [
-          {
-            "resourceType": "discoverer",
-            "required": true,
-            "conditionKeys": [],
-            "dependentActions": []
-          },
           {
             "resourceType": "",
             "required": false,
@@ -128075,7 +128085,7 @@
     "resourceTypes": [
       {
         "name": "discoverer",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/eventbridge/latest/userguide/iam-identity-based-access-control-eventbridge.html",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-schema.html",
         "arnPattern": "arn:${Partition}:schemas:${Region}:${Account}:discoverer/${DiscovererId}",
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}"
@@ -128083,7 +128093,7 @@
       },
       {
         "name": "registry",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/eventbridge/latest/userguide/iam-identity-based-access-control-eventbridge.html",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-schema.html",
         "arnPattern": "arn:${Partition}:schemas:${Region}:${Account}:registry/${RegistryName}",
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}"
@@ -128091,7 +128101,7 @@
       },
       {
         "name": "schema",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/eventbridge/latest/userguide/iam-identity-based-access-control-eventbridge.html",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-schema.html",
         "arnPattern": "arn:${Partition}:schemas:${Region}:${Account}:schema/${RegistryName}/${SchemaName}",
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}"
@@ -164433,7 +164443,8 @@
             "required": false,
             "conditionKeys": [
               "aws:RequestTag/${TagKey}",
-              "aws:TagKeys"
+              "aws:TagKeys",
+              "iotfleetwise:DestinationArn"
             ],
             "dependentActions": []
           }
@@ -165386,6 +165397,12 @@
         "description": "Filters access by the presence of tag keys in the request",
         "type": "ArrayOfString"
       },
+      {
+        "name": "iotfleetwise:DestinationArn",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiotfleetwise.html",
+        "description": "Filters access by campaign destination ARN, eg. an S3 bucket ARN or a Timestream ARN",
+        "type": "String"
+      },
       {
         "name": "iotfleetwise:UpdateToDecoderManifestArn",
         "apiReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiotfleetwise.html",
@@ -264116,12 +264133,12 @@
         "name": "CreateAwsLogSource",
         "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateAwsLogSource.html",
         "permissionOnly": false,
-        "description": "Grants permission to enable any source type in any region for accounts that are either part of a trusted organization or standalone accounts",
+        "description": "Grants permission to enable any source type in any region for accounts that are either part of a trusted organization or standalone account",
         "accessLevel": "Write",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "data-lake",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": [
               "glue:CreateDatabase",
@@ -264139,12 +264156,12 @@
         "name": "CreateCustomLogSource",
         "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateCustomLogSource.html",
         "permissionOnly": false,
-        "description": "Grants permission to add a custom source name",
+        "description": "Grants permission to add a custom source",
         "accessLevel": "Write",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "data-lake",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": [
               "glue:CreateCrawler",
@@ -264167,15 +264184,15 @@
         ]
       },
       {
-        "name": "CreateDatalake",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateDatalake.html",
+        "name": "CreateDataLake",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateDataLake.html",
         "permissionOnly": false,
-        "description": "Grants permission to create a new Security Data Lake",
+        "description": "Grants permission to create a new security data lake",
         "accessLevel": "Write",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "data-lake",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": [
               "events:PutRule",
@@ -264192,6 +264209,7 @@
               "lambda:CreateEventSourceMapping",
               "lambda:CreateFunction",
               "organizations:DescribeOrganization",
+              "organizations:ListAccounts",
               "organizations:ListDelegatedServicesForAccount",
               "s3:CreateBucket",
               "s3:ListBucket",
@@ -264206,10 +264224,10 @@
         ]
       },
       {
-        "name": "CreateDatalakeAutoEnable",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateDatalakeAutoEnable.html",
+        "name": "CreateDataLakeExceptionSubscription",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateDataLakeExceptionSubscription.html",
         "permissionOnly": false,
-        "description": "Grants permission to add to the configuration for automatically enabling Amazon Security Lake access for new organization accounts",
+        "description": "Grants permission to get instant notifications about exceptions. Subscribes to the SNS topics for exception notifications",
         "accessLevel": "Write",
         "resourceTypes": [
           {
@@ -264221,37 +264239,15 @@
         ]
       },
       {
-        "name": "CreateDatalakeDelegatedAdmin",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateDatalakeDelegatedAdmin.html",
-        "permissionOnly": false,
-        "description": "Grants permission to designate the Amazon Security Lake administrator account for the organization",
-        "accessLevel": "Write",
-        "resourceTypes": [
-          {
-            "resourceType": "",
-            "required": false,
-            "conditionKeys": [],
-            "dependentActions": [
-              "iam:CreateServiceLinkedRole",
-              "organizations:DescribeOrganization",
-              "organizations:EnableAWSServiceAccess",
-              "organizations:ListDelegatedAdministrators",
-              "organizations:ListDelegatedServicesForAccount",
-              "organizations:RegisterDelegatedAdministrator"
-            ]
-          }
-        ]
-      },
-      {
-        "name": "CreateDatalakeExceptionsSubscription",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateDatalakeExceptionsSubscription.html",
+        "name": "CreateDataLakeOrganizationConfiguration",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateDataLakeOrganizationConfiguration.html",
         "permissionOnly": false,
-        "description": "Grants permission to get instant notifications about exceptions by subscribing to the SNS topics for exception notifications",
+        "description": "Grants permission to automatically enable Amazon Security Lake for new member accounts in your organization",
         "accessLevel": "Write",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "data-lake",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": []
           }
@@ -264261,7 +264257,7 @@
         "name": "CreateSubscriber",
         "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateSubscriber.html",
         "permissionOnly": false,
-        "description": "Grants permission to create a subscription permission for accounts that are already enabled",
+        "description": "Grants permission to create a subscriber",
         "accessLevel": "Write",
         "resourceTypes": [
           {
@@ -264286,15 +264282,15 @@
         ]
       },
       {
-        "name": "CreateSubscriptionNotificationConfiguration",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateSubscriptionNotificationConfiguration.html",
+        "name": "CreateSubscriberNotification",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateSubscriberNotification.html",
         "permissionOnly": false,
-        "description": "Grants permission to create a webhook invocation to notify a client when there is new data in the Data Lake",
+        "description": "Grants permission to create a webhook invocation to notify a client when there is new data in the data lake",
         "accessLevel": "Write",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "subscriber",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": [
               "events:CreateApiDestination",
@@ -264322,12 +264318,12 @@
         "name": "DeleteAwsLogSource",
         "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeleteAwsLogSource.html",
         "permissionOnly": false,
-        "description": "Grants permission to disable any source type in any region for accounts that are either part of a trusted organization or standalone accounts",
+        "description": "Grants permission to disable any source type in any region for accounts that are part of a trusted organization or standalone accounts",
         "accessLevel": "Write",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "data-lake",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": []
           }
@@ -264337,12 +264333,12 @@
         "name": "DeleteCustomLogSource",
         "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeleteCustomLogSource.html",
         "permissionOnly": false,
-        "description": "Grants permission to remove a custom source name",
+        "description": "Grants permission to remove a custom source",
         "accessLevel": "Write",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "data-lake",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": [
               "glue:StopCrawlerSchedule"
@@ -264351,15 +264347,15 @@
         ]
       },
       {
-        "name": "DeleteDatalake",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeleteDatalake.html",
+        "name": "DeleteDataLake",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeleteDataLake.html",
         "permissionOnly": false,
-        "description": "Grants permission to delete all Security Data Lakes",
+        "description": "Grants permission to delete security data lake",
         "accessLevel": "Write",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "data-lake",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": [
               "organizations:DescribeOrganization",
@@ -264370,10 +264366,10 @@
         ]
       },
       {
-        "name": "DeleteDatalakeAutoEnable",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeleteDatalakeAutoEnable.html",
+        "name": "DeleteDataLakeExceptionSubscription",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeleteDataLakeExceptionSubscription.html",
         "permissionOnly": false,
-        "description": "Grants permission to remove from the existing configuration the automatic enabling of Amazon Security Lake access for new organization accounts",
+        "description": "Grants permission to unsubscribe from SNS topics for exception notifications. Removes exception notifications for the SNS topic",
         "accessLevel": "Write",
         "resourceTypes": [
           {
@@ -264385,34 +264381,15 @@
         ]
       },
       {
-        "name": "DeleteDatalakeDelegatedAdmin",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeleteDatalakeDelegatedAdmin.html",
+        "name": "DeleteDataLakeOrganizationConfiguration",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeleteDataLakeOrganizationConfiguration.html",
         "permissionOnly": false,
-        "description": "Grants permission to remove the Delegated Administrator account and disable Amazon Security Lake as a service for this organization",
+        "description": "Grants permission to remove the automatic enablement of Amazon Security Lake access for new organization accounts",
         "accessLevel": "Write",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
-            "conditionKeys": [],
-            "dependentActions": [
-              "organizations:DeregisterDelegatedAdministrator",
-              "organizations:DescribeOrganization",
-              "organizations:ListDelegatedServicesForAccount"
-            ]
-          }
-        ]
-      },
-      {
-        "name": "DeleteDatalakeExceptionsSubscription",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeleteDatalakeExceptionsSubscription.html",
-        "permissionOnly": false,
-        "description": "Grants permission to unsubscribe from SNS topics for exception notifications. Also, removes the SNS exception notifications topic",
-        "accessLevel": "Write",
-        "resourceTypes": [
-          {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "data-lake",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": []
           }
@@ -264422,12 +264399,12 @@
         "name": "DeleteSubscriber",
         "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeleteSubscriber.html",
         "permissionOnly": false,
-        "description": "Grants permission to delete the specified subscription permissions for accounts that are already enabled",
+        "description": "Grants permission to delete the specified subscriber",
         "accessLevel": "Write",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "subscriber",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": [
               "events:DeleteApiDestination",
@@ -264450,15 +264427,15 @@
         ]
       },
       {
-        "name": "DeleteSubscriptionNotificationConfiguration",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeleteSubscriptionNotificationConfiguration.html",
+        "name": "DeleteSubscriberNotification",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeleteSubscriberNotification.html",
         "permissionOnly": false,
-        "description": "Grants permission to remove a webhook invocation to notify a client when there is new data in the Data Lake",
+        "description": "Grants permission to remove a webhook invocation to notify a client when there is new data in the data lake",
         "accessLevel": "Write",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "subscriber",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": [
               "events:DeleteApiDestination",
@@ -264480,42 +264457,29 @@
         ]
       },
       {
-        "name": "GetDatalake",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_GetDatalake.html",
+        "name": "DeregisterDataLakeDelegatedAdministrator",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_DeregisterDataLakeDelegatedAdministrator.html",
         "permissionOnly": false,
-        "description": "Grants permission to get information on the Security Data Lake",
-        "accessLevel": "Read",
-        "resourceTypes": [
-          {
-            "resourceType": "",
-            "required": false,
-            "conditionKeys": [],
-            "dependentActions": []
-          }
-        ]
-      },
-      {
-        "name": "GetDatalakeAutoEnable",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_GetDatalakeAutoEnable.html",
-        "permissionOnly": false,
-        "description": "Grants permission to get an organization’s configuration setting for the automatic enabling of Amazon Security Lake access for new organization accounts",
-        "accessLevel": "Read",
+        "description": "Grants permission to remove the Delegated Administrator account and disable Amazon Security Lake as a service for this organization",
+        "accessLevel": "Write",
         "resourceTypes": [
           {
             "resourceType": "",
             "required": false,
             "conditionKeys": [],
             "dependentActions": [
-              "organizations:DescribeOrganization"
+              "organizations:DeregisterDelegatedAdministrator",
+              "organizations:DescribeOrganization",
+              "organizations:ListDelegatedServicesForAccount"
             ]
           }
         ]
       },
       {
-        "name": "GetDatalakeExceptionsExpiry",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_GetDatalakeExceptionsExpiry.html",
+        "name": "GetDataLakeExceptionSubscription",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_GetDataLakeExceptionSubscription.html",
         "permissionOnly": false,
-        "description": "Grants permission to allow user to query what was set as the expiration period for the exception message",
+        "description": "Grants permission to query the protocol and endpoint that were provided when subscribing to SNS topics for exception notifications",
         "accessLevel": "Read",
         "resourceTypes": [
           {
@@ -264527,30 +264491,32 @@
         ]
       },
       {
-        "name": "GetDatalakeExceptionsSubscription",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_GetDatalakeExceptionsSubscription.html",
+        "name": "GetDataLakeOrganizationConfiguration",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_GetDataLakeOrganizationConfiguration.html",
         "permissionOnly": false,
-        "description": "Grants permission to query the protocol and endpoint that were supplied when subscribing to the SNS topics for exception notifications",
+        "description": "Grants permission to get an organization’s configuration setting for automatically enabling Amazon Security Lake access for new organization accounts",
         "accessLevel": "Read",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "data-lake",
+            "required": true,
             "conditionKeys": [],
-            "dependentActions": []
+            "dependentActions": [
+              "organizations:DescribeOrganization"
+            ]
           }
         ]
       },
       {
-        "name": "GetDatalakeStatus",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_GetDatalakeStatus.html",
+        "name": "GetDataLakeSources",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_GetDataLakeSources.html",
         "permissionOnly": false,
-        "description": "Grants permission to get a static snapshot of the Security Data Lake in the current region, including enabled accounts and log sources",
+        "description": "Grants permission to get a static snapshot of the security data lake in the current region. The snapshot includes enabled accounts and log sources",
         "accessLevel": "Read",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "data-lake",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": []
           }
@@ -264560,23 +264526,23 @@
         "name": "GetSubscriber",
         "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_GetSubscriber.html",
         "permissionOnly": false,
-        "description": "Grants permission to get subscription information for a subscription permission for accounts that are already enabled",
+        "description": "Grants permission to get information about subscriber that is already created",
         "accessLevel": "Read",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "subscriber",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": []
           }
         ]
       },
       {
-        "name": "GetSubscriptionNotificationConfiguration",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_GetSubscriptionNotificationConfiguration.html",
+        "name": "ListDataLakeExceptions",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_ListDataLakeExceptions.html",
         "permissionOnly": false,
-        "description": "Grants permission to get information for a webhook invocation to notify a client when there is new data in the Data Lake",
-        "accessLevel": "Read",
+        "description": "Grants permission to get the list of all non-retryable failures",
+        "accessLevel": "List",
         "resourceTypes": [
           {
             "resourceType": "",
@@ -264587,10 +264553,10 @@
         ]
       },
       {
-        "name": "ListDatalakeExceptions",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_ListDatalakeExceptions.html",
+        "name": "ListDataLakes",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_ListDataLakes.html",
         "permissionOnly": false,
-        "description": "Grants permission to get the list of all non-retry-able failures",
+        "description": "Grants permission to list information about the security data lakes",
         "accessLevel": "List",
         "resourceTypes": [
           {
@@ -264605,7 +264571,7 @@
         "name": "ListLogSources",
         "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_ListLogSources.html",
         "permissionOnly": false,
-        "description": "Grants permission to show the estate view of enabled accounts with the enabled sources in the enabled regions",
+        "description": "Grants permission to view the enabled accounts. You can view the enabled sources in the enabled regions",
         "accessLevel": "List",
         "resourceTypes": [
           {
@@ -264620,7 +264586,7 @@
         "name": "ListSubscribers",
         "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_ListSubscribers.html",
         "permissionOnly": false,
-        "description": "Grants permission to list all subscription permissions for accounts that are already enabled",
+        "description": "Grants permission to list all subscribers",
         "accessLevel": "List",
         "resourceTypes": [
           {
@@ -264632,16 +264598,38 @@
         ]
       },
       {
-        "name": "UpdateDatalake",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_UpdateDatalake.html",
+        "name": "RegisterDataLakeDelegatedAdministrator",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_RegisterDataLakeDelegatedAdministrator.html",
         "permissionOnly": false,
-        "description": "Grants permission to update a Security Data Lake",
+        "description": "Grants permission to designate an account as the Amazon Security Lake administrator account for the organization",
         "accessLevel": "Write",
         "resourceTypes": [
           {
             "resourceType": "",
             "required": false,
             "conditionKeys": [],
+            "dependentActions": [
+              "iam:CreateServiceLinkedRole",
+              "organizations:DescribeOrganization",
+              "organizations:EnableAWSServiceAccess",
+              "organizations:ListDelegatedAdministrators",
+              "organizations:ListDelegatedServicesForAccount",
+              "organizations:RegisterDelegatedAdministrator"
+            ]
+          }
+        ]
+      },
+      {
+        "name": "UpdateDataLake",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_UpdateDataLake.html",
+        "permissionOnly": false,
+        "description": "Grants permission to update a security data lake",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "data-lake",
+            "required": true,
+            "conditionKeys": [],
             "dependentActions": [
               "events:PutRule",
               "events:PutTargets",
@@ -264670,23 +264658,8 @@
         ]
       },
       {
-        "name": "UpdateDatalakeExceptionsExpiry",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_UpdateDatalakeExceptionsExpiry.html",
-        "permissionOnly": false,
-        "description": "Grants permission to control the time-to-live (TTL) for the exception message to remain in service cache",
-        "accessLevel": "Write",
-        "resourceTypes": [
-          {
-            "resourceType": "",
-            "required": false,
-            "conditionKeys": [],
-            "dependentActions": []
-          }
-        ]
-      },
-      {
-        "name": "UpdateDatalakeExceptionsSubscription",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_UpdateDatalakeExceptionsSubscription.html",
+        "name": "UpdateDataLakeExceptionSubscription",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_UpdateDataLakeExceptionSubscription.html",
         "permissionOnly": false,
         "description": "Grants permission to update subscriptions to the SNS topics for exception notifications",
         "accessLevel": "Write",
@@ -264703,12 +264676,12 @@
         "name": "UpdateSubscriber",
         "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_UpdateSubscriber.html",
         "permissionOnly": false,
-        "description": "Grants permission to update subscription information for a subscription permission for accounts that are already enabled",
+        "description": "Grants permission to update subscriber",
         "accessLevel": "Write",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "subscriber",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": [
               "events:CreateApiDestination",
@@ -264726,15 +264699,15 @@
         ]
       },
       {
-        "name": "UpdateSubscriptionNotificationConfiguration",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_UpdateSubscriptionNotificationConfiguration.html",
+        "name": "UpdateSubscriberNotification",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/security-lake/latest/APIReference/API_UpdateSubscriberNotification.html",
         "permissionOnly": false,
-        "description": "Grants permission to update a webhook invocation to notify a client when there is new data in the Data Lake",
+        "description": "Grants permission to update a webhook invocation to notify a client when there is new data in the data lake",
         "accessLevel": "Write",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "subscriber",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": [
               "events:CreateApiDestination",
@@ -264767,7 +264740,20 @@
         ]
       }
     ],
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "data-lake",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonSecurityLake/latest/data_lake.html",
+        "arnPattern": "arn:${Partition}:securitylake:${Region}:${Account}:data-lake/default",
+        "conditionKeys": []
+      },
+      {
+        "name": "subscriber",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonSecurityLake/latest/subscriber.html",
+        "arnPattern": "arn:${Partition}:securitylake:${Region}:${Account}:subscriber/${SubscriberId}",
+        "conditionKeys": []
+      }
+    ],
     "conditionKeys": []
   },
   {
@@ -303010,6 +302996,27 @@
           }
         ]
       },
+      {
+        "name": "AssociateIpAccessSettings",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_AssociateIpAccessSettings.html",
+        "permissionOnly": false,
+        "description": "Grants permission to associate ip access settings with web portals",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "ipAccessSettings",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
+          {
+            "resourceType": "portal",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "AssociateNetworkSettings",
         "apiReferenceUrl": "https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_AssociateNetworkSettings.html",
@@ -303134,6 +303141,12 @@
         "description": "Grants permission to create identity providers",
         "accessLevel": "Write",
         "resourceTypes": [
+          {
+            "resourceType": "identityProvider",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
           {
             "resourceType": "portal",
             "required": true,
@@ -303142,6 +303155,24 @@
           }
         ]
       },
+      {
+        "name": "CreateIpAccessSettings",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_CreateIpAccessSettings.html",
+        "permissionOnly": false,
+        "description": "Grants permission to create ip access settings",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [
+              "aws:TagKeys",
+              "aws:RequestTag/${TagKey}"
+            ],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "CreateNetworkSettings",
         "apiReferenceUrl": "https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_CreateNetworkSettings.html",
@@ -303263,8 +303294,29 @@
         "accessLevel": "Write",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "identityProvider",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
+          {
+            "resourceType": "portal",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "DeleteIpAccessSettings",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DeleteIpAccessSettings.html",
+        "permissionOnly": false,
+        "description": "Grants permission to delete ip access settings",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "ipAccessSettings",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": []
           }
@@ -303360,6 +303412,21 @@
           }
         ]
       },
+      {
+        "name": "DisassociateIpAccessSettings",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DisassociateIpAccessSettings.html",
+        "permissionOnly": false,
+        "description": "Grants permission to disassociate ip access logging from web portals",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "portal",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "DisassociateNetworkSettings",
         "apiReferenceUrl": "https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DisassociateNetworkSettings.html",
@@ -303443,8 +303510,23 @@
         "accessLevel": "Read",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "identityProvider",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "GetIpAccessSettings",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_GetIpAccessSettings.html",
+        "permissionOnly": false,
+        "description": "Grants permission to get details on ip access settings",
+        "accessLevel": "Read",
+        "resourceTypes": [
+          {
+            "resourceType": "ipAccessSettings",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": []
           }
@@ -303576,6 +303658,21 @@
         "permissionOnly": false,
         "description": "Grants permission to list identity providers",
         "accessLevel": "Read",
+        "resourceTypes": [
+          {
+            "resourceType": "identityProvider",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "ListIpAccessSettings",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_ListIpAccessSettings.html",
+        "permissionOnly": false,
+        "description": "Grants permission to list ip access settings",
+        "accessLevel": "Read",
         "resourceTypes": [
           {
             "resourceType": "",
@@ -303703,6 +303800,12 @@
             "conditionKeys": [],
             "dependentActions": []
           },
+          {
+            "resourceType": "ipAccessSettings",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
           {
             "resourceType": "networkSettings",
             "required": false,
@@ -303757,6 +303860,12 @@
             "conditionKeys": [],
             "dependentActions": []
           },
+          {
+            "resourceType": "ipAccessSettings",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
           {
             "resourceType": "networkSettings",
             "required": false,
@@ -303821,8 +303930,29 @@
         "accessLevel": "Write",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "identityProvider",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
+          {
+            "resourceType": "portal",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "UpdateIpAccessSettings",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_UpdateIpAccessSettings.html",
+        "permissionOnly": false,
+        "description": "Grants permission to update ip access settings",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "ipAccessSettings",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": []
           }
@@ -303923,6 +304053,12 @@
           "aws:ResourceTag/${TagKey}"
         ]
       },
+      {
+        "name": "identityProvider",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_CreateIdentityProvider.html",
+        "arnPattern": "arn:${Partition}:workspaces-web:${Region}:${Account}:identityProvider/${PortalId}/${IdentityProviderId}",
+        "conditionKeys": []
+      },
       {
         "name": "networkSettings",
         "apiReferenceUrl": "https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_CreateNetworkSettings.html",
@@ -303962,6 +304098,14 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}"
         ]
+      },
+      {
+        "name": "ipAccessSettings",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_CreateIpAccessSettings.html",
+        "arnPattern": "arn:${Partition}:workspaces-web:${Region}:${Account}:ipAccessSettings/${IpAccessSettingsId}",
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ]
       }
     ],
     "conditionKeys": [

package/data/metadata.json

@@ -857,8 +857,9 @@
       "name": "Amazon AppFlow",
       "servicePrefix": "appflow",
       "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonappflow.html",
-      "actionsCount": 29,
+      "actionsCount": 30,
       "actions": [
+        "CancelFlowExecutions",
         "CreateConnectorProfile",
         "CreateFlow",
         "DeleteConnectorProfile",
@@ -887,7 +888,7 @@
         "UpdateConnectorProfile",
         "UpdateConnectorRegistration",
         "UpdateFlow",
-        "\n"
+        "UseConnectorProfile"
       ],
       "resourceTypesCount": 3,
       "resourceTypes": [
@@ -11993,11 +11994,12 @@
         "signalcatalog",
         "vehicle"
       ],
-      "conditionKeysCount": 5,
+      "conditionKeysCount": 6,
       "conditionKeys": [
         "aws:RequestTag/${TagKey}",
         "aws:ResourceTag/${TagKey}",
         "aws:TagKeys",
+        "iotfleetwise:DestinationArn",
         "iotfleetwise:UpdateToDecoderManifestArn",
         "iotfleetwise:UpdateToModelManifestArn"
       ]
@@ -19500,42 +19502,42 @@
       "name": "Amazon Security Lake",
       "servicePrefix": "securitylake",
       "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsecuritylake.html",
-      "actionsCount": 31,
+      "actionsCount": 28,
       "actions": [
         "CreateAwsLogSource",
         "CreateCustomLogSource",
-        "CreateDatalake",
-        "CreateDatalakeAutoEnable",
-        "CreateDatalakeDelegatedAdmin",
-        "CreateDatalakeExceptionsSubscription",
+        "CreateDataLake",
+        "CreateDataLakeExceptionSubscription",
+        "CreateDataLakeOrganizationConfiguration",
         "CreateSubscriber",
-        "CreateSubscriptionNotificationConfiguration",
+        "CreateSubscriberNotification",
         "DeleteAwsLogSource",
         "DeleteCustomLogSource",
-        "DeleteDatalake",
-        "DeleteDatalakeAutoEnable",
-        "DeleteDatalakeDelegatedAdmin",
-        "DeleteDatalakeExceptionsSubscription",
+        "DeleteDataLake",
+        "DeleteDataLakeExceptionSubscription",
+        "DeleteDataLakeOrganizationConfiguration",
         "DeleteSubscriber",
-        "DeleteSubscriptionNotificationConfiguration",
-        "GetDatalake",
-        "GetDatalakeAutoEnable",
-        "GetDatalakeExceptionsExpiry",
-        "GetDatalakeExceptionsSubscription",
-        "GetDatalakeStatus",
+        "DeleteSubscriberNotification",
+        "DeregisterDataLakeDelegatedAdministrator",
+        "GetDataLakeExceptionSubscription",
+        "GetDataLakeOrganizationConfiguration",
+        "GetDataLakeSources",
         "GetSubscriber",
-        "GetSubscriptionNotificationConfiguration",
-        "ListDatalakeExceptions",
+        "ListDataLakeExceptions",
+        "ListDataLakes",
         "ListLogSources",
         "ListSubscribers",
-        "UpdateDatalake",
-        "UpdateDatalakeExceptionsExpiry",
-        "UpdateDatalakeExceptionsSubscription",
+        "RegisterDataLakeDelegatedAdministrator",
+        "UpdateDataLake",
+        "UpdateDataLakeExceptionSubscription",
         "UpdateSubscriber",
-        "UpdateSubscriptionNotificationConfiguration"
+        "UpdateSubscriberNotification"
+      ],
+      "resourceTypesCount": 2,
+      "resourceTypes": [
+        "data-lake",
+        "subscriber"
       ],
-      "resourceTypesCount": 0,
-      "resourceTypes": [],
       "conditionKeysCount": 0,
       "conditionKeys": []
     },
@@ -22653,15 +22655,17 @@
       "name": "Amazon WorkSpaces Web",
       "servicePrefix": "workspaces-web",
       "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacesweb.html",
-      "actionsCount": 51,
+      "actionsCount": 58,
       "actions": [
         "AssociateBrowserSettings",
+        "AssociateIpAccessSettings",
         "AssociateNetworkSettings",
         "AssociateTrustStore",
         "AssociateUserAccessLoggingSettings",
         "AssociateUserSettings",
         "CreateBrowserSettings",
         "CreateIdentityProvider",
+        "CreateIpAccessSettings",
         "CreateNetworkSettings",
         "CreatePortal",
         "CreateTrustStore",
@@ -22669,18 +22673,21 @@
         "CreateUserSettings",
         "DeleteBrowserSettings",
         "DeleteIdentityProvider",
+        "DeleteIpAccessSettings",
         "DeleteNetworkSettings",
         "DeletePortal",
         "DeleteTrustStore",
         "DeleteUserAccessLoggingSettings",
         "DeleteUserSettings",
         "DisassociateBrowserSettings",
+        "DisassociateIpAccessSettings",
         "DisassociateNetworkSettings",
         "DisassociateTrustStore",
         "DisassociateUserAccessLoggingSettings",
         "DisassociateUserSettings",
         "GetBrowserSettings",
         "GetIdentityProvider",
+        "GetIpAccessSettings",
         "GetNetworkSettings",
         "GetPortal",
         "GetPortalServiceProviderMetadata",
@@ -22690,6 +22697,7 @@
         "GetUserSettings",
         "ListBrowserSettings",
         "ListIdentityProviders",
+        "ListIpAccessSettings",
         "ListNetworkSettings",
         "ListPortals",
         "ListTagsForResource",
@@ -22701,20 +22709,23 @@
         "UntagResource",
         "UpdateBrowserSettings",
         "UpdateIdentityProvider",
+        "UpdateIpAccessSettings",
         "UpdateNetworkSettings",
         "UpdatePortal",
         "UpdateTrustStore",
         "UpdateUserAccessLoggingSettings",
         "UpdateUserSettings"
       ],
-      "resourceTypesCount": 6,
+      "resourceTypesCount": 8,
       "resourceTypes": [
         "browserSettings",
+        "identityProvider",
         "networkSettings",
         "portal",
         "trustStore",
         "userSettings",
-        "userAccessLoggingSettings"
+        "userAccessLoggingSettings",
+        "ipAccessSettings"
       ],
       "conditionKeysCount": 3,
       "conditionKeys": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aws-iam-data",
-  "version": "0.0.12",
+  "version": "0.0.14",
   "description": "Provides AWS IAM data gathered from the official AWS IAM docs as a convenient npm package that can be used in other OSS projects.",
   "main": "./src/index.js",
   "types": "./src/awsIamData.d.ts",