aws-iam-data 0.0.220 → 0.0.221

package/dist/data/json/changelog.json

@@ -10,6 +10,42 @@
         },
         "removedActions": {}
     },
+    {
+        "dateOfChange": "2024-06-11",
+        "addedServices": [
+            "AWS Private CA Connector for SCEP"
+        ],
+        "removedServices": [],
+        "addedActions": {
+            "Amazon GuardDuty": [
+                "guardduty:CreateMalwareProtectionPlan",
+                "guardduty:DeleteMalwareProtectionPlan",
+                "guardduty:GetMalwareProtectionPlan",
+                "guardduty:ListMalwareProtectionPlans",
+                "guardduty:UpdateMalwareProtectionPlan"
+            ],
+            "AWS IAM Access Analyzer": [
+                "access-analyzer:CheckNoPublicAccess",
+                "access-analyzer:GenerateFindingRecommendation",
+                "access-analyzer:GetFindingRecommendation"
+            ],
+            "AWS Private CA Connector for SCEP": [
+                "pca-connector-scep:CreateChallenge",
+                "pca-connector-scep:CreateConnector",
+                "pca-connector-scep:DeleteChallenge",
+                "pca-connector-scep:DeleteConnector",
+                "pca-connector-scep:GetChallengeMetadata",
+                "pca-connector-scep:GetChallengePassword",
+                "pca-connector-scep:GetConnector",
+                "pca-connector-scep:ListChallengeMetadata",
+                "pca-connector-scep:ListConnectors",
+                "pca-connector-scep:ListTagsForResource",
+                "pca-connector-scep:TagResource",
+                "pca-connector-scep:UntagResource"
+            ]
+        },
+        "removedActions": {}
+    },
     {
         "dateOfChange": "2024-06-08",
         "addedServices": [],

package/dist/data/json/iam.json

@@ -48358,7 +48358,7 @@
         "actions": [
             {
                 "name": "BatchGetServiceLevelObjectiveBudgetReport",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_BatchGetServiceLevelObjectiveBudgetReport.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_BatchGetServiceLevelObjectiveBudgetReport.html",
                 "permissionOnly": false,
                 "description": "Grants permission to batch retrieve a service level objective budget report",
                 "accessLevel": "Read",
@@ -48373,7 +48373,7 @@
             },
             {
                 "name": "CreateServiceLevelObjective",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_CreateServiceLevelObjective.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_CreateServiceLevelObjective.html",
                 "permissionOnly": false,
                 "description": "Grants permission to create a service level objective",
                 "accessLevel": "Write",
@@ -48391,7 +48391,7 @@
             },
             {
                 "name": "DeleteServiceLevelObjective",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_DeleteServiceLevelObjective.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_DeleteServiceLevelObjective.html",
                 "permissionOnly": false,
                 "description": "Grants permission to delete a service level objective",
                 "accessLevel": "Write",
@@ -48406,7 +48406,7 @@
             },
             {
                 "name": "GetService",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_GetService.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_GetService.html",
                 "permissionOnly": false,
                 "description": "Grants permission to retrieve information about a service",
                 "accessLevel": "Read",
@@ -48421,7 +48421,7 @@
             },
             {
                 "name": "GetServiceLevelObjective",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_GetServiceLevelObjective.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_GetServiceLevelObjective.html",
                 "permissionOnly": false,
                 "description": "Grants permission to retrieve information about service level objective",
                 "accessLevel": "Read",
@@ -48436,7 +48436,7 @@
             },
             {
                 "name": "ListServiceDependencies",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_ListServiceDependencies.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListServiceDependencies.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list service dependencies",
                 "accessLevel": "Read",
@@ -48451,7 +48451,7 @@
             },
             {
                 "name": "ListServiceDependents",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_ListServiceDependents.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListServiceDependents.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list service dependents",
                 "accessLevel": "Read",
@@ -48466,7 +48466,7 @@
             },
             {
                 "name": "ListServiceLevelObjectives",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_ListServiceLevelObjectives.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListServiceLevelObjectives.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list service level objectives",
                 "accessLevel": "List",
@@ -48481,7 +48481,7 @@
             },
             {
                 "name": "ListServiceOperations",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_ListServiceOperations.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListServiceOperations.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list service operations",
                 "accessLevel": "Read",
@@ -48496,7 +48496,7 @@
             },
             {
                 "name": "ListServices",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_ListServices.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListServices.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list services",
                 "accessLevel": "List",
@@ -48511,7 +48511,7 @@
             },
             {
                 "name": "ListTagsForResource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_ListTagsForResource.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_ListTagsForResource.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list tags for an Amazon CloudWatch SLO",
                 "accessLevel": "Read",
@@ -48526,7 +48526,7 @@
             },
             {
                 "name": "StartDiscovery",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_StartDiscovery.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_StartDiscovery.html",
                 "permissionOnly": false,
                 "description": "Grants permission to enable CloudWatch discovery",
                 "accessLevel": "Write",
@@ -48541,7 +48541,7 @@
             },
             {
                 "name": "TagResource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_TagResource.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_TagResource.html",
                 "permissionOnly": false,
                 "description": "Grants permission to add tags to an Amazon CloudWatch SLO",
                 "accessLevel": "Tagging",
@@ -48565,7 +48565,7 @@
             },
             {
                 "name": "UntagResource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_UntagResource.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_UntagResource.html",
                 "permissionOnly": false,
                 "description": "Grants permission to untag to an Amazon CloudWatch SLO",
                 "accessLevel": "Tagging",
@@ -48588,7 +48588,7 @@
             },
             {
                 "name": "UpdateServiceLevelObjective",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/cloudwatchapplicationsignals/latest/APIReference/API_UpdateServiceLevelObjective.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/applicationsignals/latest/APIReference/API_UpdateServiceLevelObjective.html",
                 "permissionOnly": false,
                 "description": "Grants permission to update a service level objective",
                 "accessLevel": "Write",
@@ -129630,7 +129630,8 @@
                         "conditionKeys": [
                             "aws:RequestTag/${TagKey}",
                             "aws:TagKeys",
-                            "ecs:capacity-provider"
+                            "ecs:capacity-provider",
+                            "ecs:fargate-ephemeral-storage-kms-key"
                         ],
                         "dependentActions": []
                     }
@@ -130498,7 +130499,9 @@
                         "resourceType": "task-definition",
                         "required": true,
                         "conditionKeys": [],
-                        "dependentActions": []
+                        "dependentActions": [
+                            "iam:PassRole"
+                        ]
                     },
                     {
                         "resourceType": "",
@@ -130527,7 +130530,9 @@
                         "resourceType": "task-definition",
                         "required": true,
                         "conditionKeys": [],
-                        "dependentActions": []
+                        "dependentActions": [
+                            "iam:PassRole"
+                        ]
                     },
                     {
                         "resourceType": "",
@@ -130823,7 +130828,8 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "aws:ResourceTag/${TagKey}"
+                            "aws:ResourceTag/${TagKey}",
+                            "ecs:fargate-ephemeral-storage-kms-key"
                         ],
                         "dependentActions": []
                     }
@@ -131148,6 +131154,12 @@
                 "description": "Filters access by the enable field value in the Service Connect configuration",
                 "type": "String"
             },
+            {
+                "name": "ecs:fargate-ephemeral-storage-kms-key",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys",
+                "description": "Filters access by the AWS KMS key id provided in the request",
+                "type": "String"
+            },
             {
                 "name": "ecs:namespace",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonECS/latest/developerguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys",
@@ -169779,6 +169791,24 @@
                     }
                 ]
             },
+            {
+                "name": "CreateMalwareProtectionPlan",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMalwareProtectionPlan.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a new Malware Protection plan",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "CreateMembers",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html",
@@ -169920,6 +169950,21 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteMalwareProtectionPlan",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMalwareProtectionPlan.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a Malware Protection plan",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "malwareprotectionplan",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DeleteMembers",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html",
@@ -170205,6 +170250,21 @@
                     }
                 ]
             },
+            {
+                "name": "GetMalwareProtectionPlan",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetMalwareProtectionPlan.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve a Malware Protection plan details",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "malwareprotectionplan",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetMalwareScanSettings",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetMalwareScanSettings.html",
@@ -170430,6 +170490,21 @@
                     }
                 ]
             },
+            {
+                "name": "ListMalwareProtectionPlans",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListMalwareProtectionPlans.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve a list of Malware Protection plans",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListMembers",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListMembers.html",
@@ -170500,6 +170575,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "malwareprotectionplan",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "threatintelset",
                         "required": false,
@@ -170608,6 +170689,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "malwareprotectionplan",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "threatintelset",
                         "required": false,
@@ -170665,6 +170752,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "malwareprotectionplan",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "threatintelset",
                         "required": false,
@@ -170744,6 +170837,21 @@
                     }
                 ]
             },
+            {
+                "name": "UpdateMalwareProtectionPlan",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateMalwareProtectionPlan.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update the Malware Protection plan",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "malwareprotectionplan",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "UpdateMalwareScanSettings",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateMalwareScanSettings.html",
@@ -170864,6 +170972,14 @@
                 "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_managing_access.html#guardduty-resources",
                 "arnPattern": "arn:${Partition}:guardduty:${Region}:${Account}:detector/${DetectorId}/publishingDestination/${PublishingDestinationId}",
                 "conditionKeys": []
+            },
+            {
+                "name": "malwareprotectionplan",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_managing_access.html#guardduty-resources",
+                "arnPattern": "arn:${Partition}:guardduty:${Region}:${Account}:malware-protection-plan/${MalwareProtectionPlanId}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             }
         ],
         "conditionKeys": [
@@ -174499,6 +174615,21 @@
                     }
                 ]
             },
+            {
+                "name": "CheckNoPublicAccess",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/access-analyzer/latest/APIReference/API_CheckNoPublicAccess.html",
+                "permissionOnly": false,
+                "description": "Grants permission to check that public access is not allowed by a resource policy",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "CreateAccessPreview",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/access-analyzer/latest/APIReference/API_CreateAccessPreview.html",
@@ -174585,6 +174716,21 @@
                     }
                 ]
             },
+            {
+                "name": "GenerateFindingRecommendation",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/access-analyzer/latest/APIReference/API_GenerateFindingRecommendation.html",
+                "permissionOnly": false,
+                "description": "Grants permission to generate recommendation steps to resolve a finding",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "Analyzer",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetAccessPreview",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/access-analyzer/latest/APIReference/API_GetAccessPreview.html",
@@ -174669,6 +174815,21 @@
                     }
                 ]
             },
+            {
+                "name": "GetFindingRecommendation",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/access-analyzer/latest/APIReference/API_GetFindingRecommendation.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve recommendation steps to resolve a finding",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "Analyzer",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetFindingsStatistics",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#access-analyzer-permissions",
@@ -257898,6 +258059,271 @@
             }
         ]
     },
+    {
+        "name": "AWS Private CA Connector for SCEP",
+        "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsprivatecaconnectorforscep.html",
+        "servicePrefix": "pca-connector-scep",
+        "actions": [
+            {
+                "name": "CreateChallenge",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/C4SCEP_API/pca-connector-scep/latest/APIReference/API_CreateChallenge.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a Challenge for a Connector",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateConnector",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/C4SCEP_API/pca-connector-scep/latest/APIReference/API_CreateConnector.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a SCEP Connector in your account",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": [
+                            "acm-pca:DescribeCertificateAuthority",
+                            "acm-pca:GetCertificate",
+                            "acm-pca:GetCertificateAuthorityCertificate",
+                            "acm-pca:IssueCertificate"
+                        ]
+                    }
+                ]
+            },
+            {
+                "name": "DeleteChallenge",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/C4SCEP_API/pca-connector-scep/latest/APIReference/API_DeleteChallenge.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a Challenge for a Connector",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "Challenge",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteConnector",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/C4SCEP_API/pca-connector-scep/latest/APIReference/API_DeleteConnector.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a SCEP Connector in your account",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "Connector",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetChallengeMetadata",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/C4SCEP_API/pca-connector-scep/latest/APIReference/API_GetChallengeMetadata.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get a Challenge for a Connector",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "Challenge",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetChallengePassword",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/C4SCEP_API/pca-connector-scep/latest/APIReference/API_GetChallengePassword.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get a Challenge password for a Connector",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "Challenge",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetConnector",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/C4SCEP_API/pca-connector-scep/latest/APIReference/API_GetConnector.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get a SCEP Connector in your account",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "Connector",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListChallengeMetadata",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/C4SCEP_API/pca-connector-scep/latest/APIReference/API_ListChallengeMetadata.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list Challenges for a Connector",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListConnectors",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/C4SCEP_API/pca-connector-scep/latest/APIReference/API_ListConnectors.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list the SCEP Connectors in your account",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListTagsForResource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/C4SCEP_API/pca-connector-scep/latest/APIReference/API_ListTagsForResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list the tags for a pca-connector-scep resource in your account",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "TagResource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/C4SCEP_API/pca-connector-scep/latest/APIReference/API_TagResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to tag a pca-connector-scep resource in your account",
+                "accessLevel": "Tagging",
+                "resourceTypes": [
+                    {
+                        "resourceType": "Challenge",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "Connector",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UntagResource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/C4SCEP_API/pca-connector-scep/latest/APIReference/API_UntagResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to untag a pca-connector-scep resource in your account",
+                "accessLevel": "Tagging",
+                "resourceTypes": [
+                    {
+                        "resourceType": "Challenge",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "Connector",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            }
+        ],
+        "resourceTypes": [
+            {
+                "name": "Challenge",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/C4SCEP_API/pca-connector-scep/latest/APIReference/API_Challenge.html",
+                "arnPattern": "arn:${Partition}:pca-connector-scep:${Region}:${Account}:connector/${ConnectorId}/challenge/${ChallengeId}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
+            },
+            {
+                "name": "Connector",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/C4SCEP_API/pca-connector-scep/latest/APIReference/API_Connector.html",
+                "arnPattern": "arn:${Partition}:pca-connector-scep:${Region}:${Account}:connector/${ConnectorId}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
+            }
+        ],
+        "conditionKeys": [
+            {
+                "name": "aws:RequestTag/${TagKey}",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/privateca/latest/userguide/connector-for-scep.htmlreference_policies_iam-condition-keys.html#condition-keys-requesttag",
+                "description": "Filters access by the tags that are passed in the request",
+                "type": "String"
+            },
+            {
+                "name": "aws:ResourceTag/${TagKey}",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/privateca/latest/userguide/connector-for-scep.htmlreference_policies_iam-condition-keys.html#condition-keys-resourcetag",
+                "description": "Filters access by the tags associated with the resource",
+                "type": "String"
+            },
+            {
+                "name": "aws:TagKeys",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/privateca/latest/userguide/connector-for-scep.htmlreference_policies_iam-condition-keys.html#condition-keys-tagkeys",
+                "description": "Filters access by the tag keys that are passed in the request",
+                "type": "ArrayOfString"
+            }
+        ]
+    },
     {
         "name": "AWS Private Certificate Authority",
         "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsprivatecertificateauthority.html",

package/dist/data/json/metadata.json

@@ -1,5 +1,5 @@
 {
-    "serviceCount": 415,
+    "serviceCount": 416,
     "services": [
         {
             "name": "AWS Account Management",
@@ -9117,7 +9117,7 @@
                 "capacity-provider",
                 "task-set"
             ],
-            "conditionKeysCount": 17,
+            "conditionKeysCount": 18,
             "conditionKeys": [
                 "aws:RequestTag/${TagKey}",
                 "aws:ResourceTag/${TagKey}",
@@ -9132,6 +9132,7 @@
                 "ecs:enable-ebs-volumes",
                 "ecs:enable-execute-command",
                 "ecs:enable-service-connect",
+                "ecs:fargate-ephemeral-storage-kms-key",
                 "ecs:namespace",
                 "ecs:service",
                 "ecs:task",
@@ -11947,7 +11948,7 @@
             "name": "Amazon GuardDuty",
             "servicePrefix": "guardduty",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonguardduty.html",
-            "actionsCount": 70,
+            "actionsCount": 75,
             "actions": [
                 "AcceptAdministratorInvitation",
                 "AcceptInvitation",
@@ -11955,6 +11956,7 @@
                 "CreateDetector",
                 "CreateFilter",
                 "CreateIPSet",
+                "CreateMalwareProtectionPlan",
                 "CreateMembers",
                 "CreatePublishingDestination",
                 "CreateSampleFindings",
@@ -11964,6 +11966,7 @@
                 "DeleteFilter",
                 "DeleteIPSet",
                 "DeleteInvitations",
+                "DeleteMalwareProtectionPlan",
                 "DeleteMembers",
                 "DeletePublishingDestination",
                 "DeleteThreatIntelSet",
@@ -11983,6 +11986,7 @@
                 "GetFindingsStatistics",
                 "GetIPSet",
                 "GetInvitationsCount",
+                "GetMalwareProtectionPlan",
                 "GetMalwareScanSettings",
                 "GetMasterAccount",
                 "GetMemberDetectors",
@@ -11998,6 +12002,7 @@
                 "ListFindings",
                 "ListIPSets",
                 "ListInvitations",
+                "ListMalwareProtectionPlans",
                 "ListMembers",
                 "ListOrganizationAdminAccounts",
                 "ListPublishingDestinations",
@@ -12014,19 +12019,21 @@
                 "UpdateFilter",
                 "UpdateFindingsFeedback",
                 "UpdateIPSet",
+                "UpdateMalwareProtectionPlan",
                 "UpdateMalwareScanSettings",
                 "UpdateMemberDetectors",
                 "UpdateOrganizationConfiguration",
                 "UpdatePublishingDestination",
                 "UpdateThreatIntelSet"
             ],
-            "resourceTypesCount": 5,
+            "resourceTypesCount": 6,
             "resourceTypes": [
                 "detector",
                 "filter",
                 "ipset",
                 "threatintelset",
-                "publishingDestination"
+                "publishingDestination",
+                "malwareprotectionplan"
             ],
             "conditionKeysCount": 3,
             "conditionKeys": [
@@ -12352,22 +12359,25 @@
             "name": "AWS IAM Access Analyzer",
             "servicePrefix": "access-analyzer",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamaccessanalyzer.html",
-            "actionsCount": 31,
+            "actionsCount": 34,
             "actions": [
                 "ApplyArchiveRule",
                 "CancelPolicyGeneration",
                 "CheckAccessNotGranted",
                 "CheckNoNewAccess",
+                "CheckNoPublicAccess",
                 "CreateAccessPreview",
                 "CreateAnalyzer",
                 "CreateArchiveRule",
                 "DeleteAnalyzer",
                 "DeleteArchiveRule",
+                "GenerateFindingRecommendation",
                 "GetAccessPreview",
                 "GetAnalyzedResource",
                 "GetAnalyzer",
                 "GetArchiveRule",
                 "GetFinding",
+                "GetFindingRecommendation",
                 "GetFindingsStatistics",
                 "GetGeneratedPolicy",
                 "ListAccessPreviewFindings",
@@ -18988,6 +18998,37 @@
                 "aws:TagKeys"
             ]
         },
+        {
+            "name": "AWS Private CA Connector for SCEP",
+            "servicePrefix": "pca-connector-scep",
+            "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsprivatecaconnectorforscep.html",
+            "actionsCount": 12,
+            "actions": [
+                "CreateChallenge",
+                "CreateConnector",
+                "DeleteChallenge",
+                "DeleteConnector",
+                "GetChallengeMetadata",
+                "GetChallengePassword",
+                "GetConnector",
+                "ListChallengeMetadata",
+                "ListConnectors",
+                "ListTagsForResource",
+                "TagResource",
+                "UntagResource"
+            ],
+            "resourceTypesCount": 2,
+            "resourceTypes": [
+                "Challenge",
+                "Connector"
+            ],
+            "conditionKeysCount": 3,
+            "conditionKeys": [
+                "aws:RequestTag/${TagKey}",
+                "aws:ResourceTag/${TagKey}",
+                "aws:TagKeys"
+            ]
+        },
         {
             "name": "AWS Private Certificate Authority",
             "servicePrefix": "acm-pca",

package/dist/data/json/reports.json

@@ -1,20 +1,20 @@
 {
     "Actions by type": [
-        {
-            "key": "Write Actions",
-            "value": 9325
-        },
         {
             "key": "Read Actions",
-            "value": 4538
+            "value": 4545
         },
         {
             "key": "List Actions",
-            "value": 2741
+            "value": 2744
         },
         {
             "key": "Permissions Actions",
             "value": 289
+        },
+        {
+            "key": "Write Actions",
+            "value": 9335
         }
     ],
     "Longest action names": [
@@ -398,7 +398,7 @@
     "Summary": [
         {
             "key": "Total number of services",
-            "value": 415
+            "value": 416
         },
         {
             "key": "Average number of actions per service",
@@ -410,11 +410,11 @@
         },
         {
             "key": "Total number of distinct resource ARNS",
-            "value": 1727
+            "value": 1730
         },
         {
             "key": "Total number of distinct condition keys",
-            "value": 919
+            "value": 920
         }
     ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aws-iam-data",
-  "version": "0.0.220",
+  "version": "0.0.221",
   "description": "Provides AWS IAM data gathered from the official AWS IAM docs as a convenient npm package that can be used in other OSS projects.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -14,6 +14,7 @@
     "create-erd": "node_modules/.bin/mmdc -i erd.mmd -o docs/erd.png -w 1600",
     "create-tables": "scripts/create_tables.sh",
     "create-reports": "scripts/create_reports.sh",
+    "copy-database": "scripts/copy_database.sh",
     "export-data": "scripts/export_data.sh",
     "build": "rm -rf dist/ && mkdir -p src/data/json && cp data/json/*.json src/data/json && tsc --build src/ && rm -rf src/data"
   },