aws-iam-data 0.0.370 → 0.0.372

package/dist/data/json/changelog.json

@@ -1,4 +1,26 @@
 [
+    {
+        "dateOfChange": "2025-05-01",
+        "addedServices": [],
+        "removedServices": [],
+        "addedActions": {
+            "Amazon Kinesis Data Streams": [
+                "kinesis:ListTagsForResource",
+                "kinesis:TagResource",
+                "kinesis:UntagResource"
+            ],
+            "AWS Systems Manager": [
+                "ssm:GetAccessToken",
+                "ssm:StartAccessRequest"
+            ],
+            "AWS Systems Manager GUI Connect": [
+                "ssm-guiconnect:DeleteConnectionRecordingPreferences",
+                "ssm-guiconnect:GetConnectionRecordingPreferences",
+                "ssm-guiconnect:UpdateConnectionRecordingPreferences"
+            ]
+        },
+        "removedActions": {}
+    },
     {
         "dateOfChange": "2025-04-30",
         "addedServices": [],

package/dist/data/json/iam.json

@@ -102853,6 +102853,18 @@
                         "resourceType": "worker",
                         "required": true,
                         "conditionKeys": [],
+                        "dependentActions": [
+                            "deadline:ListTagsForResource",
+                            "deadline:TagResource"
+                        ]
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
                         "dependentActions": []
                     }
                 ]
@@ -104085,6 +104097,20 @@
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "worker",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "deadline:CalledAction"
+                        ],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -104271,12 +104297,19 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "worker",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
                             "aws:RequestTag/${TagKey}",
-                            "aws:TagKeys"
+                            "aws:TagKeys",
+                            "deadline:CalledAction"
                         ],
                         "dependentActions": []
                     }
@@ -104313,6 +104346,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "worker",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "",
                         "required": false,
@@ -104685,6 +104724,7 @@
                 "apiReferenceUrl": "https://docs.aws.amazon.com/deadline-cloud/latest/userguide/security-iam.html",
                 "arnPattern": "arn:${Partition}:deadline:${Region}:${Account}:farm/${FarmId}/fleet/${FleetId}/worker/${WorkerId}",
                 "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}",
                     "deadline:FarmMembershipLevels",
                     "deadline:FleetMembershipLevels"
                 ]
@@ -104715,6 +104755,12 @@
                 "description": "Filters access by the associated membership level of the principal provided in the request",
                 "type": "String"
             },
+            {
+                "name": "deadline:CalledAction",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/deadline-cloud/latest/userguide/security-iam-service-with-iam.html",
+                "description": "Filters access by the allowed action in the request",
+                "type": "String"
+            },
             {
                 "name": "deadline:FarmMembershipLevels",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/deadline-cloud/latest/userguide/security-iam-service-with-iam.html",
@@ -232942,7 +232988,7 @@
                 "name": "AddTagsToStream",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/kinesis/latest/APIReference/API_AddTagsToStream.html",
                 "permissionOnly": false,
-                "description": "Grants permission to add or update tags for the specified Amazon Kinesis stream. Each stream can have up to 10 tags",
+                "description": "Grants permission to add or update tags for the specified Amazon Kinesis stream. Each stream can have up to 50 tags",
                 "accessLevel": "Tagging",
                 "resourceTypes": [
                     {
@@ -233003,7 +233049,9 @@
                     {
                         "resourceType": "consumer",
                         "required": true,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
@@ -233043,7 +233091,9 @@
                     {
                         "resourceType": "consumer",
                         "required": true,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     }
                 ]
@@ -233090,7 +233140,9 @@
                     {
                         "resourceType": "consumer",
                         "required": true,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     }
                 ]
@@ -233169,7 +233221,9 @@
                     {
                         "resourceType": "consumer",
                         "required": true,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
@@ -233265,6 +233319,31 @@
                     }
                 ]
             },
+            {
+                "name": "ListTagsForResource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/kinesis/latest/APIReference/API_ListTagsForResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list the tags for the specified Amazon Kinesis resource",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "consumer",
+                        "required": true,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "stream",
+                        "required": true,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListTagsForStream",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/kinesis/latest/APIReference/API_ListTagsForStream.html",
@@ -233343,7 +233422,9 @@
                     {
                         "resourceType": "consumer",
                         "required": true,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
@@ -233367,6 +233448,8 @@
                         "resourceType": "stream",
                         "required": true,
                         "conditionKeys": [
+                            "aws:TagKeys",
+                            "aws:RequestTag/${TagKey}",
                             "aws:ResourceTag/${TagKey}"
                         ],
                         "dependentActions": []
@@ -233464,7 +233547,65 @@
                     {
                         "resourceType": "consumer",
                         "required": true,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "TagResource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/kinesis/latest/APIReference/API_TagResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to add or update tags for the specified Amazon Kinesis resource. Each resource can have up to 50 tags",
+                "accessLevel": "Tagging",
+                "resourceTypes": [
+                    {
+                        "resourceType": "consumer",
+                        "required": true,
+                        "conditionKeys": [
+                            "aws:TagKeys",
+                            "aws:RequestTag/${TagKey}",
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "stream",
+                        "required": true,
+                        "conditionKeys": [
+                            "aws:TagKeys",
+                            "aws:RequestTag/${TagKey}",
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UntagResource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/kinesis/latest/APIReference/API_UntagResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to remove tags from the specified Kinesis data resource. Removed tags are deleted and cannot be recovered after this operation successfully completes",
+                "accessLevel": "Tagging",
+                "resourceTypes": [
+                    {
+                        "resourceType": "consumer",
+                        "required": true,
+                        "conditionKeys": [
+                            "aws:TagKeys",
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "stream",
+                        "required": true,
+                        "conditionKeys": [
+                            "aws:TagKeys",
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     }
                 ]
@@ -319989,9 +320130,15 @@
                 "description": "Grants permission to get information about a specified Resolver rule, such as the domain name that the rule forwards DNS queries for and the IP address that queries are forwarded to",
                 "accessLevel": "Read",
                 "resourceTypes": [
+                    {
+                        "resourceType": "autodefined-rule",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "resolver-rule",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     }
@@ -320004,9 +320151,15 @@
                 "description": "Grants permission to get information about an association between a specified Resolver rule and a VPC",
                 "accessLevel": "Read",
                 "resourceTypes": [
+                    {
+                        "resourceType": "autodefined-rule",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "resolver-rule",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     }
@@ -320693,6 +320846,14 @@
                     "aws:ResourceTag/${TagKey}"
                 ]
             },
+            {
+                "name": "autodefined-rule",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/access-control-overview.html#access-control-resources",
+                "arnPattern": "arn:${Partition}:route53resolver:${Region}:${Account}:autodefined-rule/${ResourceId}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
+            },
             {
                 "name": "resolver-endpoint",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/access-control-overview.html#access-control-resources",
@@ -344827,6 +344988,12 @@
                 "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns",
                 "arnPattern": "arn:${Partition}:sts::${Account}:self",
                 "conditionKeys": []
+            },
+            {
+                "name": "context-provider",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns",
+                "arnPattern": "arn:${Partition}:iam::aws:contextProvider/${ContextProviderName}",
+                "conditionKeys": []
             }
         ],
         "conditionKeys": [
@@ -364718,6 +364885,12 @@
                 "description": "Grants permission to delete a Systems Manager resource policy",
                 "accessLevel": "Permissions management",
                 "resourceTypes": [
+                    {
+                        "resourceType": "document",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "opsitemgroup",
                         "required": false,
@@ -365468,6 +365641,21 @@
                     }
                 ]
             },
+            {
+                "name": "GetAccessToken",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetAccessToken.html",
+                "permissionOnly": false,
+                "description": "Grants permission to return a credentials set to be used with just-in-time node access",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "opsitem",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetAutomationExecution",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_AutomationExecution.html",
@@ -365935,6 +366123,12 @@
                 "description": "Grants permission to retrieve lists of Systems Manager resource policies",
                 "accessLevel": "List",
                 "resourceTypes": [
+                    {
+                        "resourceType": "document",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "opsitemgroup",
                         "required": false,
@@ -366499,6 +366693,12 @@
                 "description": "Grants permission to create or update a Systems Manager resource policy",
                 "accessLevel": "Permissions management",
                 "resourceTypes": [
+                    {
+                        "resourceType": "document",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "opsitemgroup",
                         "required": false,
@@ -366779,6 +366979,36 @@
                     }
                 ]
             },
+            {
+                "name": "StartAccessRequest",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartAccessRequest.html",
+                "permissionOnly": false,
+                "description": "Grants permission to start the workflow for just-in-time node access sessions",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "instance",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "managed-instance",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "StartAssociationsOnce",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_StartAssociationsOnce.html",
@@ -366914,7 +367144,8 @@
                         "required": false,
                         "conditionKeys": [
                             "ssm:resourceTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "aws:ResourceTag/${TagKey}",
+                            "ssm:AccessRequestId"
                         ],
                         "dependentActions": []
                     }
@@ -367400,6 +367631,12 @@
                 "description": "Filters access by the ARN of the instance from which the request originated",
                 "type": "ARN"
             },
+            {
+                "name": "ssm:AccessRequestId",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions",
+                "description": "Filters access by verifying that a user has access to the access request ID specified in the request",
+                "type": "String"
+            },
             {
                 "name": "ssm:AutoApprove",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/change-manager-auto-approval-access.html",
@@ -367951,6 +368188,21 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteConnectionRecordingPreferences",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DeleteConnectionRecordingPreferences.html",
+                "permissionOnly": false,
+                "description": "Grants permission to remove GUI Connect connection recording preferences",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetConnection",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/fleet-manager-remote-desktop-connections.html",
@@ -367966,6 +368218,21 @@
                     }
                 ]
             },
+            {
+                "name": "GetConnectionRecordingPreferences",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_GetConnectionRecordingPreferences.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get GUI Connect connection recording preferences",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListConnections",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/fleet-manager-remote-desktop-connections.html",
@@ -367995,6 +368262,21 @@
                         "dependentActions": []
                     }
                 ]
+            },
+            {
+                "name": "UpdateConnectionRecordingPreferences",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateConnectionRecordingPreferences.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update GUI Connect connection recording preferences",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
             }
         ],
         "resourceTypes": [],

package/dist/data/json/metadata.json

@@ -7811,12 +7811,13 @@
                 "queue",
                 "worker"
             ],
-            "conditionKeysCount": 11,
+            "conditionKeysCount": 12,
             "conditionKeys": [
                 "aws:RequestTag/${TagKey}",
                 "aws:ResourceTag/${TagKey}",
                 "aws:TagKeys",
                 "deadline:AssociatedMembershipLevel",
+                "deadline:CalledAction",
                 "deadline:FarmMembershipLevels",
                 "deadline:FleetMembershipLevels",
                 "deadline:JobMembershipLevels",
@@ -16310,7 +16311,7 @@
             "name": "Amazon Kinesis Data Streams",
             "servicePrefix": "kinesis",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonkinesisdatastreams.html",
-            "actionsCount": 32,
+            "actionsCount": 35,
             "actions": [
                 "AddTagsToStream",
                 "CreateStream",
@@ -16331,6 +16332,7 @@
                 "ListShards",
                 "ListStreamConsumers",
                 "ListStreams",
+                "ListTagsForResource",
                 "ListTagsForStream",
                 "MergeShards",
                 "PutRecord",
@@ -16342,6 +16344,8 @@
                 "StartStreamEncryption",
                 "StopStreamEncryption",
                 "SubscribeToShard",
+                "TagResource",
+                "UntagResource",
                 "UpdateShardCount",
                 "UpdateStreamMode"
             ],
@@ -23177,11 +23181,12 @@
                 "UpdateResolverEndpoint",
                 "UpdateResolverRule"
             ],
-            "resourceTypesCount": 10,
+            "resourceTypesCount": 11,
             "resourceTypes": [
                 "resolver-dnssec-config",
                 "resolver-query-log-config",
                 "resolver-rule",
+                "autodefined-rule",
                 "resolver-endpoint",
                 "firewall-rule-group",
                 "firewall-rule-group-association",
@@ -24705,12 +24710,13 @@
                 "SetSourceIdentity",
                 "TagSession"
             ],
-            "resourceTypesCount": 4,
+            "resourceTypesCount": 5,
             "resourceTypes": [
                 "role",
                 "user",
                 "root-user",
-                "self-session"
+                "self-session",
+                "context-provider"
             ],
             "conditionKeysCount": 55,
             "conditionKeys": [
@@ -26260,7 +26266,7 @@
             "name": "AWS Systems Manager",
             "servicePrefix": "ssm",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html",
-            "actionsCount": 154,
+            "actionsCount": 156,
             "actions": [
                 "AddTagsToResource",
                 "AssociateOpsItemRelatedItem",
@@ -26327,6 +26333,7 @@
                 "DescribeSessions",
                 "DisassociateOpsItemRelatedItem",
                 "ExecuteAPI",
+                "GetAccessToken",
                 "GetAutomationExecution",
                 "GetCalendar",
                 "GetCalendarState",
@@ -26392,6 +26399,7 @@
                 "ResumeSession",
                 "SendAutomationSignal",
                 "SendCommand",
+                "StartAccessRequest",
                 "StartAssociationsOnce",
                 "StartAutomationExecution",
                 "StartChangeRequestExecution",
@@ -26419,12 +26427,13 @@
             ],
             "resourceTypesCount": 0,
             "resourceTypes": [],
-            "conditionKeysCount": 16,
+            "conditionKeysCount": 17,
             "conditionKeys": [
                 "aws:RequestTag/${TagKey}",
                 "aws:ResourceTag/${TagKey}",
                 "aws:TagKeys",
                 "ec2:SourceInstanceARN",
+                "ssm:AccessRequestId",
                 "ssm:AutoApprove",
                 "ssm:DocumentCategories",
                 "ssm:DocumentType",
@@ -26487,12 +26496,15 @@
             "name": "AWS Systems Manager GUI Connect",
             "servicePrefix": "ssm-guiconnect",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanagerguiconnect.html",
-            "actionsCount": 4,
+            "actionsCount": 7,
             "actions": [
                 "CancelConnection",
+                "DeleteConnectionRecordingPreferences",
                 "GetConnection",
+                "GetConnectionRecordingPreferences",
                 "ListConnections",
-                "StartConnection"
+                "StartConnection",
+                "UpdateConnectionRecordingPreferences"
             ],
             "resourceTypesCount": 0,
             "resourceTypes": [],

package/dist/data/json/reports.json

@@ -2,11 +2,11 @@
     "Actions by type": [
         {
             "key": "Write Actions",
-            "value": 10264
+            "value": 10269
         },
         {
             "key": "Read Actions",
-            "value": 4978
+            "value": 4981
         },
         {
             "key": "List Actions",
@@ -410,11 +410,11 @@
         },
         {
             "key": "Total number of distinct resource ARNS",
-            "value": 1904
+            "value": 1906
         },
         {
             "key": "Total number of distinct condition keys",
-            "value": 1072
+            "value": 1074
         }
     ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aws-iam-data",
-  "version": "0.0.370",
+  "version": "0.0.372",
   "description": "Provides AWS IAM data gathered from the official AWS IAM docs as a convenient npm package that can be used in other OSS projects.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",