aws-iam-data 0.0.4 → 0.0.5

package/data/iam.json

@@ -6451,6 +6451,12 @@
         "description": "Grants permission to update a particular resource",
         "accessLevel": "Write",
         "resourceTypes": [
+          {
+            "resourceType": "Api",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
           {
             "resourceType": "Apis",
             "required": false,
@@ -33140,6 +33146,21 @@
           }
         ]
       },
+      {
+        "name": "GetMigrationExperiences",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/cloud9/latest/user-guide/security-iam.html#auth-and-access-control-ref-matrix",
+        "permissionOnly": true,
+        "description": "Grants permission to get the migration experience for a cloud9 user",
+        "accessLevel": "Read",
+        "resourceTypes": [
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "GetUserPublicKey",
         "apiReferenceUrl": "https://docs.aws.amazon.com/cloud9/latest/user-guide/security-iam.html#auth-and-access-control-ref-matrix",
@@ -33982,14 +34003,16 @@
         "name": "DescribeStacks",
         "apiReferenceUrl": "https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeStacks.html",
         "permissionOnly": false,
-        "description": "Grants permission to return the description for the specified stack",
+        "description": "Grants permission to return the description for the specified stack, and to all stacks when used in combination with the ListStacks action",
         "accessLevel": "List",
         "resourceTypes": [
           {
             "resourceType": "stack",
-            "required": true,
+            "required": false,
             "conditionKeys": [],
-            "dependentActions": []
+            "dependentActions": [
+              "cloudformation:ListStacks"
+            ]
           }
         ]
       },
@@ -34296,7 +34319,7 @@
         "name": "ListStacks",
         "apiReferenceUrl": "https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ListStacks.html",
         "permissionOnly": false,
-        "description": "Grants permission to return the summary information for stacks whose status matches the specified StackStatusFilter",
+        "description": "Grants permission to return the summary information for stacks whose status matches the specified StackStatusFilter. In combination with the DescribeStacks action, grants permission to list descriptions for stacks",
         "accessLevel": "List",
         "resourceTypes": [
           {
@@ -81153,14 +81176,6 @@
             "required": true,
             "conditionKeys": [],
             "dependentActions": []
-          },
-          {
-            "resourceType": "",
-            "required": false,
-            "conditionKeys": [
-              "aws:TagKeys"
-            ],
-            "dependentActions": []
           }
         ]
       },
@@ -81176,14 +81191,6 @@
             "required": true,
             "conditionKeys": [],
             "dependentActions": []
-          },
-          {
-            "resourceType": "",
-            "required": false,
-            "conditionKeys": [
-              "aws:TagKeys"
-            ],
-            "dependentActions": []
           }
         ]
       },
@@ -82927,6 +82934,32 @@
           }
         ]
       },
+      {
+        "name": "AssociateVerifiedAccessInstanceWebAcl",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verified-access/latest/ug/waf-integration.html",
+        "permissionOnly": true,
+        "description": "Grants permission to associate an AWS Web Application Firewall (WAF) web access control list (ACL) with a Verified Access instance",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "verified-access-instance",
+            "required": true,
+            "conditionKeys": [
+              "aws:ResourceTag/${TagKey}",
+              "ec2:ResourceTag/${TagKey}"
+            ],
+            "dependentActions": []
+          },
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [
+              "ec2:Region"
+            ],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "AssociateVpcCidrBlock",
         "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_AssociateVpcCidrBlock.html",
@@ -83958,6 +83991,14 @@
         "description": "Grants permission to create a pool of customer-owned IP (CoIP) addresses",
         "accessLevel": "Write",
         "resourceTypes": [
+          {
+            "resourceType": "coip-pool",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": [
+              "ec2:CreateTags"
+            ]
+          },
           {
             "resourceType": "local-gateway-route-table",
             "required": true,
@@ -83965,14 +84006,14 @@
               "aws:ResourceTag/${TagKey}",
               "ec2:ResourceTag/${TagKey}"
             ],
-            "dependentActions": [
-              "ec2:CreateTags"
-            ]
+            "dependentActions": []
           },
           {
             "resourceType": "",
             "required": false,
             "conditionKeys": [
+              "aws:RequestTag/${TagKey}",
+              "aws:TagKeys",
               "ec2:Region"
             ],
             "dependentActions": []
@@ -84202,8 +84243,6 @@
             "required": false,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:AssociatePublicIpAddress",
-              "ec2:AuthorizedService",
               "ec2:AvailabilityZone",
               "ec2:NetworkInterfaceID",
               "ec2:ResourceTag/${TagKey}",
@@ -85197,8 +85236,6 @@
             "required": false,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:AssociatePublicIpAddress",
-              "ec2:AuthorizedService",
               "ec2:AvailabilityZone",
               "ec2:NetworkInterfaceID",
               "ec2:ResourceTag/${TagKey}",
@@ -85225,6 +85262,15 @@
             ],
             "dependentActions": []
           },
+          {
+            "resourceType": "vpc-endpoint-service",
+            "required": false,
+            "conditionKeys": [
+              "aws:ResourceTag/${TagKey}",
+              "ec2:ResourceTag/${TagKey}"
+            ],
+            "dependentActions": []
+          },
           {
             "resourceType": "vpc-peering-connection",
             "required": false,
@@ -86304,8 +86350,6 @@
             "required": false,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:AssociatePublicIpAddress",
-              "ec2:AuthorizedService",
               "ec2:AuthorizedUser",
               "ec2:AvailabilityZone",
               "ec2:NetworkInterfaceID",
@@ -86394,7 +86438,6 @@
             "required": false,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:AvailabilityZone",
               "ec2:Encrypted",
               "ec2:Owner",
               "ec2:ParentVolume",
@@ -86539,8 +86582,6 @@
             "required": false,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:DomainCertificateArn",
-              "ec2:LoadBalancerArn",
               "ec2:ResourceTag/${TagKey}"
             ],
             "dependentActions": []
@@ -86632,8 +86673,7 @@
             "required": false,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:ResourceTag/${TagKey}",
-              "ec2:VpceServicePrivateDnsName"
+              "ec2:ResourceTag/${TagKey}"
             ],
             "dependentActions": []
           },
@@ -87298,10 +87338,7 @@
           {
             "resourceType": "verified-access-endpoint",
             "required": true,
-            "conditionKeys": [
-              "ec2:DomainCertificateArn",
-              "ec2:LoadBalancerArn"
-            ],
+            "conditionKeys": [],
             "dependentActions": [
               "ec2:CreateTags"
             ]
@@ -87320,8 +87357,6 @@
             "required": false,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:AssociatePublicIpAddress",
-              "ec2:AuthorizedService",
               "ec2:AuthorizedUser",
               "ec2:AvailabilityZone",
               "ec2:NetworkInterfaceID",
@@ -87630,6 +87665,15 @@
             ],
             "dependentActions": []
           },
+          {
+            "resourceType": "vpc-endpoint-service",
+            "required": false,
+            "conditionKeys": [
+              "aws:ResourceTag/${TagKey}",
+              "ec2:ResourceTag/${TagKey}"
+            ],
+            "dependentActions": []
+          },
           {
             "resourceType": "",
             "required": false,
@@ -88816,8 +88860,6 @@
             "required": false,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:AssociatePublicIpAddress",
-              "ec2:AuthorizedService",
               "ec2:AvailabilityZone",
               "ec2:NetworkInterfaceID",
               "ec2:ResourceTag/${TagKey}",
@@ -89055,7 +89097,6 @@
               "ec2:ResourceTag/${TagKey}",
               "ec2:SnapshotID",
               "ec2:SnapshotTime",
-              "ec2:SourceOutpostArn",
               "ec2:VolumeSize"
             ],
             "dependentActions": []
@@ -90297,8 +90338,6 @@
             "required": true,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:DomainCertificateArn",
-              "ec2:LoadBalancerArn",
               "ec2:ResourceTag/${TagKey}"
             ],
             "dependentActions": []
@@ -92648,7 +92687,6 @@
             "required": true,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:AvailabilityZone",
               "ec2:Encrypted",
               "ec2:OutpostArn",
               "ec2:Owner",
@@ -93182,6 +93220,23 @@
           }
         ]
       },
+      {
+        "name": "DescribeVerifiedAccessInstanceWebAclAssociations",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verified-access/latest/ug/waf-integration.html",
+        "permissionOnly": true,
+        "description": "Grants permission to describe the AWS Web Application Firewall (WAF) web access control list (ACL) associations for a Verified Access instance",
+        "accessLevel": "List",
+        "resourceTypes": [
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [
+              "ec2:Region"
+            ],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "DescribeVerifiedAccessInstances",
         "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVerifiedAccessInstances.html",
@@ -93421,6 +93476,15 @@
         "description": "Grants permission to describe the principals (service consumers) that are permitted to discover your VPC endpoint service",
         "accessLevel": "List",
         "resourceTypes": [
+          {
+            "resourceType": "vpc-endpoint-service",
+            "required": true,
+            "conditionKeys": [
+              "aws:ResourceTag/${TagKey}",
+              "ec2:ResourceTag/${TagKey}"
+            ],
+            "dependentActions": []
+          },
           {
             "resourceType": "",
             "required": false,
@@ -94362,8 +94426,6 @@
             "required": true,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:AssociatePublicIpAddress",
-              "ec2:AuthorizedService",
               "ec2:AuthorizedUser",
               "ec2:AvailabilityZone",
               "ec2:NetworkInterfaceID",
@@ -94624,6 +94686,32 @@
           }
         ]
       },
+      {
+        "name": "DisassociateVerifiedAccessInstanceWebAcl",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verified-access/latest/ug/waf-integration.html",
+        "permissionOnly": true,
+        "description": "Grants permission to disassociate an AWS Web Application Firewall (WAF) web access control list (ACL) from a Verified Access instance",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "verified-access-instance",
+            "required": true,
+            "conditionKeys": [
+              "aws:ResourceTag/${TagKey}",
+              "ec2:ResourceTag/${TagKey}"
+            ],
+            "dependentActions": []
+          },
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [
+              "ec2:Region"
+            ],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "DisassociateVpcCidrBlock",
         "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DisassociateVpcCidrBlock.html",
@@ -96148,8 +96236,6 @@
             "required": true,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:DomainCertificateArn",
-              "ec2:LoadBalancerArn",
               "ec2:ResourceTag/${TagKey}"
             ],
             "dependentActions": []
@@ -96190,6 +96276,32 @@
           }
         ]
       },
+      {
+        "name": "GetVerifiedAccessInstanceWebAcl",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verified-access/latest/ug/waf-integration.html",
+        "permissionOnly": true,
+        "description": "Grants permission to show the AWS Web Application Firewall (WAF) web access control list (ACL) for a Verified Access instance",
+        "accessLevel": "List",
+        "resourceTypes": [
+          {
+            "resourceType": "verified-access-instance",
+            "required": true,
+            "conditionKeys": [
+              "aws:ResourceTag/${TagKey}",
+              "ec2:ResourceTag/${TagKey}"
+            ],
+            "dependentActions": []
+          },
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [
+              "ec2:Region"
+            ],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "GetVpnConnectionDeviceSampleConfiguration",
         "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetVpnConnectionDeviceSampleConfiguration.html",
@@ -96239,6 +96351,58 @@
           }
         ]
       },
+      {
+        "name": "GetVpnTunnelReplacementStatus",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetVpnTunnelReplacementStatus.html",
+        "permissionOnly": false,
+        "description": "Grants permission to view available tunnel endpoint maintenance events",
+        "accessLevel": "List",
+        "resourceTypes": [
+          {
+            "resourceType": "vpn-connection",
+            "required": true,
+            "conditionKeys": [
+              "aws:ResourceTag/${TagKey}",
+              "ec2:ResourceTag/${TagKey}"
+            ],
+            "dependentActions": []
+          },
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [
+              "ec2:Region"
+            ],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "ImportByoipCidrToIpam",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/vpc/latest/ipam/tutorials-byoip-ipam-transfer-ipv4.html",
+        "permissionOnly": true,
+        "description": "Grants permission to transfer existing BYOIP IPv4 CIDRs to IPAM",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "ipam-pool",
+            "required": true,
+            "conditionKeys": [
+              "aws:ResourceTag/${TagKey}",
+              "ec2:ResourceTag/${TagKey}"
+            ],
+            "dependentActions": []
+          },
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [
+              "ec2:Region"
+            ],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "ImportClientVpnClientCertificateRevocationList",
         "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ImportClientVpnClientCertificateRevocationList.html",
@@ -96535,7 +96699,6 @@
             "required": false,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:AvailabilityZone",
               "ec2:Encrypted",
               "ec2:Owner",
               "ec2:ParentVolume",
@@ -96805,8 +96968,6 @@
             "required": false,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:AssociatePublicIpAddress",
-              "ec2:AuthorizedService",
               "ec2:AvailabilityZone",
               "ec2:NetworkInterfaceID",
               "ec2:ResourceTag/${TagKey}",
@@ -97552,8 +97713,6 @@
             "required": false,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:AssociatePublicIpAddress",
-              "ec2:AuthorizedService",
               "ec2:AuthorizedUser",
               "ec2:AvailabilityZone",
               "ec2:NetworkInterfaceID",
@@ -97853,7 +98012,6 @@
               "aws:ResourceTag/${TagKey}",
               "ec2:Attribute",
               "ec2:Attribute/${AttributeName}",
-              "ec2:AvailabilityZone",
               "ec2:Encrypted",
               "ec2:Owner",
               "ec2:ParentVolume",
@@ -98200,8 +98358,6 @@
             "required": true,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:DomainCertificateArn",
-              "ec2:LoadBalancerArn",
               "ec2:ResourceTag/${TagKey}"
             ],
             "dependentActions": []
@@ -98249,8 +98405,6 @@
             "required": true,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:DomainCertificateArn",
-              "ec2:LoadBalancerArn",
               "ec2:ResourceTag/${TagKey}"
             ],
             "dependentActions": []
@@ -99782,6 +99936,16 @@
             ],
             "dependentActions": []
           },
+          {
+            "resourceType": "internet-gateway",
+            "required": false,
+            "conditionKeys": [
+              "aws:ResourceTag/${TagKey}",
+              "ec2:InternetGatewayID",
+              "ec2:ResourceTag/${TagKey}"
+            ],
+            "dependentActions": []
+          },
           {
             "resourceType": "ipv4pool-ec2",
             "required": false,
@@ -99857,6 +100021,32 @@
           }
         ]
       },
+      {
+        "name": "ReplaceVpnTunnel",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ReplaceVpnTunnel.html",
+        "permissionOnly": false,
+        "description": "Grants permission to replace a VPN tunnel",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "vpn-connection",
+            "required": true,
+            "conditionKeys": [
+              "aws:ResourceTag/${TagKey}",
+              "ec2:ResourceTag/${TagKey}"
+            ],
+            "dependentActions": []
+          },
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [
+              "ec2:Region"
+            ],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "ReportInstanceStatus",
         "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ReportInstanceStatus.html",
@@ -100029,8 +100219,6 @@
             "required": false,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:AssociatePublicIpAddress",
-              "ec2:AuthorizedService",
               "ec2:AuthorizedUser",
               "ec2:AvailabilityZone",
               "ec2:NetworkInterfaceID",
@@ -100401,7 +100589,6 @@
             "required": true,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:AvailabilityZone",
               "ec2:Encrypted",
               "ec2:Owner",
               "ec2:ParentVolume",
@@ -100434,7 +100621,6 @@
             "required": true,
             "conditionKeys": [
               "aws:ResourceTag/${TagKey}",
-              "ec2:AvailabilityZone",
               "ec2:Encrypted",
               "ec2:Owner",
               "ec2:ParentVolume",
@@ -103219,12 +103405,6 @@
           "                                aws:TagKeys",
           "                            ",
           "                            ",
-          "                                ec2:DomainCertificateArn",
-          "                            ",
-          "                            ",
-          "                                ec2:LoadBalancerArn",
-          "                            ",
-          "                            ",
           "                                ec2:Region",
           "                            ",
           "                            ",
@@ -103821,12 +104001,6 @@
         "description": "Filters access by the domain of the Elastic IP address",
         "type": "String"
       },
-      {
-        "name": "ec2:DomainCertificateArn",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policy-structure.html#amazon-ec2-keys",
-        "description": "Filters access by the ARN of an Amazon Certificate Manager certificate",
-        "type": "ARN"
-      },
       {
         "name": "ec2:EbsOptimized",
         "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policy-structure.html#amazon-ec2-keys",
@@ -103971,12 +104145,6 @@
         "description": "Filters access by the ARN of a launch template",
         "type": "ARN"
       },
-      {
-        "name": "ec2:LoadBalancerArn",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policy-structure.html#amazon-ec2-keys",
-        "description": "Filters access by the ARN of an Elastic Load Balancer",
-        "type": "ARN"
-      },
       {
         "name": "ec2:MetadataHttpEndpoint",
         "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policy-structure.html#amazon-ec2-keys",
@@ -138450,8 +138618,8 @@
         "accessLevel": "Read",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "customEntityType",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": []
           }
@@ -138752,7 +138920,10 @@
           {
             "resourceType": "",
             "required": false,
-            "conditionKeys": [],
+            "conditionKeys": [
+              "aws:RequestTag/${TagKey}",
+              "aws:TagKeys"
+            ],
             "dependentActions": []
           }
         ]
@@ -139233,8 +139404,8 @@
         "accessLevel": "Write",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "customEntityType",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": []
           }
@@ -139854,8 +140025,8 @@
         "accessLevel": "Read",
         "resourceTypes": [
           {
-            "resourceType": "",
-            "required": false,
+            "resourceType": "customEntityType",
+            "required": true,
             "conditionKeys": [],
             "dependentActions": []
           }
@@ -140615,6 +140786,12 @@
             "conditionKeys": [],
             "dependentActions": []
           },
+          {
+            "resourceType": "customEntityType",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
           {
             "resourceType": "devendpoint",
             "required": false,
@@ -140885,7 +141062,10 @@
           {
             "resourceType": "",
             "required": false,
-            "conditionKeys": [],
+            "conditionKeys": [
+              "aws:RequestTag/${TagKey}",
+              "aws:TagKeys"
+            ],
             "dependentActions": []
           }
         ]
@@ -141665,6 +141845,12 @@
             "conditionKeys": [],
             "dependentActions": []
           },
+          {
+            "resourceType": "customEntityType",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
           {
             "resourceType": "dataQualityRuleset",
             "required": false,
@@ -141770,6 +141956,12 @@
             "conditionKeys": [],
             "dependentActions": []
           },
+          {
+            "resourceType": "customEntityType",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
           {
             "resourceType": "dataQualityRuleset",
             "required": false,
@@ -142395,6 +142587,14 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}"
         ]
+      },
+      {
+        "name": "customEntityType",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/glue/latest/dg/glue-specifying-resource-arns.html",
+        "arnPattern": "arn:${Partition}:glue:${Region}:${Account}:customEntityType/${CustomEntityTypeId}",
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ]
       }
     ],
     "conditionKeys": [
@@ -196694,7 +196894,7 @@
     "actions": [
       {
         "name": "CreateCliToken",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-actions-resources.html",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/API/API_CreateCliToken.html",
         "permissionOnly": false,
         "description": "Grants permission to create a short-lived token that allows a user to invoke Airflow CLI via an endpoint on the Apache Airflow Webserver",
         "accessLevel": "Write",
@@ -196709,7 +196909,7 @@
       },
       {
         "name": "CreateEnvironment",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-actions-resources.html",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/API/API_CreateEnvironment.html",
         "permissionOnly": false,
         "description": "Grants permission to create an Amazon MWAA environment",
         "accessLevel": "Write",
@@ -196734,7 +196934,7 @@
       },
       {
         "name": "CreateWebLoginToken",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-actions-resources.html",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/API/API_CreateWebLoginToken.html",
         "permissionOnly": false,
         "description": "Grants permission to create a short-lived token that allows a user to log into Apache Airflow web UI",
         "accessLevel": "Write",
@@ -196749,7 +196949,7 @@
       },
       {
         "name": "DeleteEnvironment",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-actions-resources.html",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/API/API_DeleteEnvironment.html",
         "permissionOnly": false,
         "description": "Grants permission to delete an Amazon MWAA environment",
         "accessLevel": "Write",
@@ -196772,7 +196972,7 @@
       },
       {
         "name": "GetEnvironment",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-actions-resources.html",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/API/API_GetEnvironment.html",
         "permissionOnly": false,
         "description": "Grants permission to view details about an Amazon MWAA environment",
         "accessLevel": "Read",
@@ -196795,7 +196995,7 @@
       },
       {
         "name": "ListEnvironments",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-actions-resources.html",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/API/API_ListEnvironments.html",
         "permissionOnly": false,
         "description": "Grants permission to list the Amazon MWAA environments in your account",
         "accessLevel": "List",
@@ -196810,7 +197010,7 @@
       },
       {
         "name": "ListTagsForResource",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-actions-resources.html",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/API/API_ListTagsForResource.html",
         "permissionOnly": false,
         "description": "Grants permission to lists tag for an Amazon MWAA environment",
         "accessLevel": "Read",
@@ -196833,7 +197033,7 @@
       },
       {
         "name": "PublishMetrics",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-actions-resources.html",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/API/API_PublishMetrics.html",
         "permissionOnly": false,
         "description": "Grants permission to publish metrics for an Amazon MWAA environment",
         "accessLevel": "Write",
@@ -196848,7 +197048,7 @@
       },
       {
         "name": "TagResource",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-actions-resources.html",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/API/API_TagResource.html",
         "permissionOnly": false,
         "description": "Grants permission to tag an Amazon MWAA environment",
         "accessLevel": "Tagging",
@@ -196873,7 +197073,7 @@
       },
       {
         "name": "UntagResource",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-actions-resources.html",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/API/API_UntagResource.html",
         "permissionOnly": false,
         "description": "Grants permission to untag an Amazon MWAA environment",
         "accessLevel": "Tagging",
@@ -196897,7 +197097,7 @@
       },
       {
         "name": "UpdateEnvironment",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-actions-resources.html",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/API/API_UpdateEnvironment.html",
         "permissionOnly": false,
         "description": "Grants permission to modify an Amazon MWAA environment",
         "accessLevel": "Write",
@@ -196922,13 +197122,13 @@
     "resourceTypes": [
       {
         "name": "environment",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-actions-resources.html#mwaa-resources",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/userguide/using-mwaa.html",
         "arnPattern": "arn:${Partition}:airflow:${Region}:${Account}:environment/${EnvironmentName}",
         "conditionKeys": []
       },
       {
         "name": "rbac-role",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-actions-resources.html#mwaa-resources",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/mwaa/latest/userguide/access-policies.html",
         "arnPattern": "arn:${Partition}:airflow:${Region}:${Account}:role/${EnvironmentName}/${RoleName}",
         "conditionKeys": []
       }
@@ -214937,7 +215137,7 @@
       {
         "name": "outpost",
         "apiReferenceUrl": "https://docs.aws.amazon.com/outposts/latest/userguide/work-with-outposts.html",
-        "arnPattern": "arn:${Partition}:outposts:${Region}:${Account}:outpost:${OutpostId}",
+        "arnPattern": "arn:${Partition}:outposts:${Region}:${Account}:outpost/${OutpostId}",
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}"
         ]
@@ -296011,6 +296211,12 @@
             "required": false,
             "conditionKeys": [],
             "dependentActions": []
+          },
+          {
+            "resourceType": "verified-access-instance",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
           }
         ]
       },
@@ -296347,6 +296553,12 @@
             "required": false,
             "conditionKeys": [],
             "dependentActions": []
+          },
+          {
+            "resourceType": "verified-access-instance",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
           }
         ]
       },
@@ -296614,6 +296826,12 @@
             "required": false,
             "conditionKeys": [],
             "dependentActions": []
+          },
+          {
+            "resourceType": "verified-access-instance",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
           }
         ]
       },
@@ -297187,6 +297405,12 @@
         "apiReferenceUrl": "https://docs.aws.amazon.com/waf/latest/APIReference/API_WebACL.html",
         "arnPattern": "arn:${Partition}:apprunner:${Region}:${Account}:service/${ServiceName}/${ServiceId}",
         "conditionKeys": []
+      },
+      {
+        "name": "verified-access-instance",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/waf/latest/APIReference/API_WebACL.html",
+        "arnPattern": "arn:${Partition}:ec2:${Region}:${Account}:verified-access-instance/${VerifiedAccessInstanceId}",
+        "conditionKeys": []
       }
     ],
     "conditionKeys": [

package/data/metadata.json

@@ -2592,7 +2592,7 @@
       "name": "AWS Cloud9",
       "servicePrefix": "cloud9",
       "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscloud9.html",
-      "actionsCount": 29,
+      "actionsCount": 30,
       "actions": [
         "ActivateEC2Remote",
         "CreateEnvironmentEC2",
@@ -2609,6 +2609,7 @@
         "GetEnvironmentConfig",
         "GetEnvironmentSettings",
         "GetMembershipSettings",
+        "GetMigrationExperiences",
         "GetUserPublicKey",
         "GetUserSettings",
         "ListEnvironments",
@@ -6452,7 +6453,7 @@
       "name": "Amazon EC2",
       "servicePrefix": "ec2",
       "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonec2.html",
-      "actionsCount": 599,
+      "actionsCount": 606,
       "actions": [
         "AcceptAddressTransfer",
         "AcceptReservedInstancesExchangeQuote",
@@ -6483,6 +6484,7 @@
         "AssociateTransitGatewayPolicyTable",
         "AssociateTransitGatewayRouteTable",
         "AssociateTrunkInterface",
+        "AssociateVerifiedAccessInstanceWebAcl",
         "AssociateVpcCidrBlock",
         "AttachClassicLinkVpc",
         "AttachInternetGateway",
@@ -6800,6 +6802,7 @@
         "DescribeVerifiedAccessEndpoints",
         "DescribeVerifiedAccessGroups",
         "DescribeVerifiedAccessInstanceLoggingConfigurations",
+        "DescribeVerifiedAccessInstanceWebAclAssociations",
         "DescribeVerifiedAccessInstances",
         "DescribeVerifiedAccessTrustProviders",
         "DescribeVolumeAttribute",
@@ -6850,6 +6853,7 @@
         "DisassociateTransitGatewayPolicyTable",
         "DisassociateTransitGatewayRouteTable",
         "DisassociateTrunkInterface",
+        "DisassociateVerifiedAccessInstanceWebAcl",
         "DisassociateVpcCidrBlock",
         "EnableAddressTransfer",
         "EnableAwsNetworkPerformanceMetricSubscription",
@@ -6910,8 +6914,11 @@
         "GetTransitGatewayRouteTablePropagations",
         "GetVerifiedAccessEndpointPolicy",
         "GetVerifiedAccessGroupPolicy",
+        "GetVerifiedAccessInstanceWebAcl",
         "GetVpnConnectionDeviceSampleConfiguration",
         "GetVpnConnectionDeviceTypes",
+        "GetVpnTunnelReplacementStatus",
+        "ImportByoipCidrToIpam",
         "ImportClientVpnClientCertificateRevocationList",
         "ImportImage",
         "ImportInstance",
@@ -7014,6 +7021,7 @@
         "ReplaceRoute",
         "ReplaceRouteTableAssociation",
         "ReplaceTransitGatewayRoute",
+        "ReplaceVpnTunnel",
         "ReportInstanceStatus",
         "RequestSpotFleet",
         "RequestSpotInstances",
@@ -7145,7 +7153,7 @@
         "vpn-connection",
         "vpn-gateway"
       ],
-      "conditionKeysCount": 111,
+      "conditionKeysCount": 109,
       "conditionKeys": [
         "aws:RequestTag/${TagKey}",
         "aws:ResourceTag/${TagKey}",
@@ -7171,7 +7179,6 @@
         "ec2:DhcpOptionsID",
         "ec2:DirectoryArn",
         "ec2:Domain",
-        "ec2:DomainCertificateArn",
         "ec2:EbsOptimized",
         "ec2:ElasticGpuType",
         "ec2:Encrypted",
@@ -7196,7 +7203,6 @@
         "ec2:KeyPairType",
         "ec2:KmsKeyId",
         "ec2:LaunchTemplate",
-        "ec2:LoadBalancerArn",
         "ec2:MetadataHttpEndpoint",
         "ec2:MetadataHttpPutResponseHopLimit",
         "ec2:MetadataHttpTokens",
@@ -10070,7 +10076,7 @@
         "UseGlueStudio",
         "UseMLTransforms"
       ],
-      "resourceTypesCount": 17,
+      "resourceTypesCount": 18,
       "resourceTypes": [
         "catalog",
         "database",
@@ -10088,7 +10094,8 @@
         "registry",
         "schema",
         "session",
-        "dataQualityRuleset"
+        "dataQualityRuleset",
+        "customEntityType"
       ],
       "conditionKeysCount": 8,
       "conditionKeys": [
@@ -22043,7 +22050,7 @@
         "UpdateRuleGroup",
         "UpdateWebACL"
       ],
-      "resourceTypesCount": 10,
+      "resourceTypesCount": 11,
       "resourceTypes": [
         "webacl",
         "ipset",
@@ -22054,7 +22061,8 @@
         "apigateway",
         "appsync",
         "userpool",
-        "apprunner"
+        "apprunner",
+        "verified-access-instance"
       ],
       "conditionKeysCount": 3,
       "conditionKeys": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aws-iam-data",
-  "version": "0.0.4",
+  "version": "0.0.5",
   "description": "Provides AWS IAM data gathered from the official AWS IAM docs as a convenient npm package that can be used in other OSS projects.",
   "main": "./src/index.js",
   "types": "./src/awsIamData.d.ts",