aws-iam-data 0.0.401 → 0.0.402

package/dist/data/json/changelog.json

@@ -1,4 +1,57 @@
 [
+    {
+        "dateOfChange": "2025-06-19",
+        "addedServices": [
+            "Multi-party approval"
+        ],
+        "removedServices": [],
+        "addedActions": {
+            "AWS Backup": [
+                "backup:AssociateBackupVaultMpaApprovalTeam",
+                "backup:CreateRestoreAccessBackupVault",
+                "backup:DisassociateBackupVaultMpaApprovalTeam",
+                "backup:ListRestoreAccessBackupVaults",
+                "backup:RevokeRestoreAccessBackupVault"
+            ],
+            "AWS Certificate Manager": [
+                "acm:RevokeCertificate"
+            ],
+            "Amazon Lex V2": [
+                "lex:CreateResourcePolicyStatement",
+                "lex:DeleteResourcePolicyStatement"
+            ],
+            "AWS Support": [
+                "support:UpdateInteraction"
+            ],
+            "Multi-party approval": [
+                "mpa:CancelSession",
+                "mpa:CreateApprovalTeam",
+                "mpa:CreateIdentitySource",
+                "mpa:DeleteIdentitySource",
+                "mpa:DeleteInactiveApprovalTeamVersion",
+                "mpa:DeleteResourcePolicy",
+                "mpa:GetApprovalTeam",
+                "mpa:GetIdentitySource",
+                "mpa:GetPolicyVersion",
+                "mpa:GetResourcePolicy",
+                "mpa:GetSession",
+                "mpa:ListApprovalTeams",
+                "mpa:ListIdentitySources",
+                "mpa:ListPolicies",
+                "mpa:ListPolicyVersions",
+                "mpa:ListResourcePolicies",
+                "mpa:ListSessions",
+                "mpa:ListTagsForResource",
+                "mpa:PutResourcePolicy",
+                "mpa:StartActiveApprovalTeamDeletion",
+                "mpa:StartSession",
+                "mpa:TagResource",
+                "mpa:UntagResource",
+                "mpa:UpdateApprovalTeam"
+            ]
+        },
+        "removedActions": {}
+    },
     {
         "dateOfChange": "2025-06-18",
         "addedServices": [],

package/dist/data/json/iam.json

@@ -25377,6 +25377,29 @@
         "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbackup.html",
         "servicePrefix": "backup",
         "actions": [
+            {
+                "name": "AssociateBackupVaultMpaApprovalTeam",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_AssociateBackupVaultMpaApprovalTeam.html",
+                "permissionOnly": false,
+                "description": "Grants permission to associate an MPA approval team with a backup vault",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "backupVault",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "backup:MpaApprovalTeamArn"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "CancelLegalHold",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_CancelLegalHold.html",
@@ -25603,6 +25626,30 @@
                     }
                 ]
             },
+            {
+                "name": "CreateRestoreAccessBackupVault",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_CreateRestoreAccessBackupVault.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a restore access backup vault",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "backupVault",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "CreateRestoreTestingPlan",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_CreateRestoreTestingPlan.html",
@@ -25989,6 +26036,21 @@
                     }
                 ]
             },
+            {
+                "name": "DisassociateBackupVaultMpaApprovalTeam",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_DisassociateBackupVaultMpaApprovalTeam.html",
+                "permissionOnly": false,
+                "description": "Grants permission to disassociate an MPA approval team from a backup vault",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "backupVault",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DisassociateRecoveryPoint",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_DisassociateRecoveryPoint.html",
@@ -26559,6 +26621,21 @@
                     }
                 ]
             },
+            {
+                "name": "ListRestoreAccessBackupVaults",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_ListRestoreAccessBackupVaults.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list a restore access backup vaults associated with a backup vault",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "backupVault",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListRestoreJobSummaries",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_ListRestoreJobSummaries.html",
@@ -26770,6 +26847,21 @@
                     }
                 ]
             },
+            {
+                "name": "RevokeRestoreAccessBackupVault",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_RevokeRestoreAccessBackupVault.html",
+                "permissionOnly": false,
+                "description": "Grants permission to revoke a restore access backup vault",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "backupVault",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "SearchRecoveryPoint",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/API_SearchRecoveryPoint.html",
@@ -27231,7 +27323,7 @@
             {
                 "name": "backup:CopyTargets",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/access-control.html#amazon-backup-keys",
-                "description": "Filters access by the ARN of an backup vault",
+                "description": "Filters access by the ARN of a backup vault",
                 "type": "ArrayOfARN"
             },
             {
@@ -27257,6 +27349,12 @@
                 "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/access-control.html#amazon-backup-keys",
                 "description": "Filters access by the value of the MinRetentionDays parameter",
                 "type": "Numeric"
+            },
+            {
+                "name": "backup:MpaApprovalTeamArn",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/aws-backup/latest/devguide/access-control.html#amazon-backup-keys",
+                "description": "Filters access by the MPA Approval Team ARN of a backup vault",
+                "type": "ARN"
             }
         ]
     },
@@ -36602,7 +36700,7 @@
                 "name": "ExportCertificate",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/acm/latest/APIReference/API_ExportCertificate.html",
                 "permissionOnly": false,
-                "description": "Grants permission to export a private certificate issued by a private certificate authority (CA) for use anywhere",
+                "description": "Grants permission to export an exportable certificate for use anywhere",
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
@@ -36610,6 +36708,14 @@
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "acm:DomainNames"
+                        ],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -36768,7 +36874,8 @@
                             "acm:CertificateTransparencyLogging",
                             "acm:ValidationMethod",
                             "acm:KeyAlgorithm",
-                            "acm:CertificateAuthority"
+                            "acm:CertificateAuthority",
+                            "acm:Export"
                         ],
                         "dependentActions": []
                     }
@@ -36789,6 +36896,29 @@
                     }
                 ]
             },
+            {
+                "name": "RevokeCertificate",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/acm/latest/APIReference/API_RevokeCertificate.html",
+                "permissionOnly": false,
+                "description": "Grants permission to revoke an exportable certificate",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "certificate",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "acm:DomainNames"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "UpdateCertificateOptions",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/acm/latest/APIReference/API_UpdateCertificateOptions.html",
@@ -36834,6 +36964,12 @@
                 "description": "Filters access by domainNames in the request. This key can be used to restrict which domains can be in certificate requests",
                 "type": "ArrayOfString"
             },
+            {
+                "name": "acm:Export",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/acm/latest/userguide/security-iam.html",
+                "description": "Filters access by the export option in the request. Can be used to restrict creation of certificates that can be exported",
+                "type": "String"
+            },
             {
                 "name": "acm:KeyAlgorithm",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/acm/latest/userguide/security-iam.html",
@@ -241412,6 +241548,27 @@
                     }
                 ]
             },
+            {
+                "name": "CreateResourcePolicyStatement",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/lexv2/latest/APIReference/API_CreateResourcePolicyStatement.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a new resource policy statement for a Lex resource",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "bot",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "bot alias",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "CreateSlot",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/lexv2/latest/APIReference/API_CreateSlot.html",
@@ -241688,6 +241845,27 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteResourcePolicyStatement",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/lexv2/latest/APIReference/API_DeleteResourcePolicyStatement.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete an existing resource policy statement for a Lex resource",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "bot",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "bot alias",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DeleteSession",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/lexv2/latest/APIReference/API_runtime_DeleteSession.html",
@@ -266232,6 +266410,536 @@
             }
         ]
     },
+    {
+        "name": "Multi-party approval",
+        "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_multi-partyapproval.html",
+        "servicePrefix": "mpa",
+        "actions": [
+            {
+                "name": "CancelSession",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_CancelSession.html",
+                "permissionOnly": false,
+                "description": "Grants permission to cancel an approval session",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "session",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}",
+                            "mpa:RequestedOperation",
+                            "mpa:ProtectedResourceAccount"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateApprovalTeam",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_CreateApprovalTeam.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create an approval team",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "approval-team",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:ResourceTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateIdentitySource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_CreateIdentitySource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create an identity source",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "identity-source",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:ResourceTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteIdentitySource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_DeleteIdentitySource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete an identity source",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "identity-source",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteInactiveApprovalTeamVersion",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_DeleteInactiveApprovalTeamVersion.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete an inactive approval team",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "approval-team",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteResourcePolicy",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_DeleteResourcePolicy.html",
+                "permissionOnly": true,
+                "description": "Grants permission to delete a resource policy",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetApprovalTeam",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_GetApprovalTeam.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve details for an approval team",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "approval-team",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetIdentitySource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_GetIdentitySource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve details for an identity source",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "identity-source",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetPolicyVersion",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_GetPolicyVersion.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve details for a policy",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetResourcePolicy",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_GetResourcePolicy.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve details for a specific resource",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetSession",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_GetSession.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve details for an approval session",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "session",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}",
+                            "mpa:RequestedOperation",
+                            "mpa:ProtectedResourceAccount"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListApprovalTeams",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_ListApprovalTeams.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list approval teams",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListIdentitySources",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_ListIdentitySources.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list identity sources",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListPolicies",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_ListPolicies.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list policies",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListPolicyVersions",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_ListPolicyVersions.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list the versions for policies",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListResourcePolicies",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_ListResourcePolicies.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list policies for a resource",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListSessions",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_ListSessions.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list approval sessions",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListTagsForResource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_ListTagsForResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list tags for a resource",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "PutResourcePolicy",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_PutResourcePolicy.html",
+                "permissionOnly": true,
+                "description": "Grants permission to create or update policies for a resource",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "StartActiveApprovalTeamDeletion",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_StartActiveApprovalTeamDeletion.html",
+                "permissionOnly": false,
+                "description": "Grants permission to start the deletion process for an active approval team",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "approval-team",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "StartSession",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_StartSessionInternal.html",
+                "permissionOnly": true,
+                "description": "Grants permission to start an approval session",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "session",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}",
+                            "mpa:RequestedOperation",
+                            "mpa:ProtectedResourceAccount"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "TagResource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_TagResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to tag a resource",
+                "accessLevel": "Tagging",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:ResourceTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UntagResource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_UntagResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to untag a resource",
+                "accessLevel": "Tagging",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateApprovalTeam",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/APIReference/API_UpdateApprovalTeam.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update approval team",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "approval-team",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            }
+        ],
+        "resourceTypes": [
+            {
+                "name": "approval-team",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/userguide/mpa-concepts.html",
+                "arnPattern": "arn:${Partition}:mpa:${Region}:${Account}:approval-team/${Arn}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
+            },
+            {
+                "name": "identity-source",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/userguide/mpa-concepts.html",
+                "arnPattern": "arn:${Partition}:mpa:${Region}:${Account}:identity-source/${IdentitySourceArn}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
+            },
+            {
+                "name": "session",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/userguide/mpa-concepts.html",
+                "arnPattern": "arn:${Partition}:mpa:${Region}:${Account}:session/${SessionArn}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
+            }
+        ],
+        "conditionKeys": [
+            {
+                "name": "aws:RequestTag/${TagKey}",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag",
+                "description": "Filters access by a tag key and value pair that is allowed in the request",
+                "type": "String"
+            },
+            {
+                "name": "aws:ResourceTag/${TagKey}",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag",
+                "description": "Filters access by a tag key and value pair of a resource",
+                "type": "String"
+            },
+            {
+                "name": "aws:TagKeys",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys",
+                "description": "Filters access by a list of tag keys that are allowed in the request",
+                "type": "ArrayOfString"
+            },
+            {
+                "name": "mpa:ProtectedResourceAccount",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/userguide/mpa-concepts.html",
+                "description": "Filters access by the account that owns the resource that is the target of the operation that requires approval",
+                "type": "String"
+            },
+            {
+                "name": "mpa:RequestedOperation",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/mpa/latest/userguide/mpa-concepts.html",
+                "description": "Filters access by a requested operation that requires team approval before it can be executed",
+                "type": "String"
+            }
+        ]
+    },
     {
         "name": "Amazon Neptune",
         "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonneptune.html",
@@ -367365,6 +368073,21 @@
                         "dependentActions": []
                     }
                 ]
+            },
+            {
+                "name": "UpdateInteraction",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/awssupport/latest/APIReference/API_UpdateInteraction.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a specific interaction to receive personalized troubleshooting assistance for account and technical issues",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
             }
         ],
         "resourceTypes": [],

package/dist/data/json/metadata.json

@@ -1,5 +1,5 @@
 {
-    "serviceCount": 441,
+    "serviceCount": 442,
     "services": [
         {
             "name": "AWS Account Management",
@@ -1982,8 +1982,9 @@
             "name": "AWS Backup",
             "servicePrefix": "backup",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbackup.html",
-            "actionsCount": 101,
+            "actionsCount": 106,
             "actions": [
+                "AssociateBackupVaultMpaApprovalTeam",
                 "CancelLegalHold",
                 "CopyFromBackupVault",
                 "CopyIntoBackupVault",
@@ -1994,6 +1995,7 @@
                 "CreateLegalHold",
                 "CreateLogicallyAirGappedBackupVault",
                 "CreateReportPlan",
+                "CreateRestoreAccessBackupVault",
                 "CreateRestoreTestingPlan",
                 "CreateRestoreTestingSelection",
                 "DeleteBackupPlan",
@@ -2019,6 +2021,7 @@
                 "DescribeReportJob",
                 "DescribeReportPlan",
                 "DescribeRestoreJob",
+                "DisassociateBackupVaultMpaApprovalTeam",
                 "DisassociateRecoveryPoint",
                 "DisassociateRecoveryPointFromParent",
                 "ExportBackupPlanTemplate",
@@ -2057,6 +2060,7 @@
                 "ListRecoveryPointsByResource",
                 "ListReportJobs",
                 "ListReportPlans",
+                "ListRestoreAccessBackupVaults",
                 "ListRestoreJobSummaries",
                 "ListRestoreJobs",
                 "ListRestoreJobsByProtectedResource",
@@ -2068,6 +2072,7 @@
                 "PutBackupVaultNotifications",
                 "PutBackupVaultSharingPolicy",
                 "PutRestoreValidationResult",
+                "RevokeRestoreAccessBackupVault",
                 "SearchRecoveryPoint",
                 "StartBackupJob",
                 "StartCopyJob",
@@ -2096,7 +2101,7 @@
                 "legalHold",
                 "restoreTestingPlan"
             ],
-            "conditionKeysCount": 10,
+            "conditionKeysCount": 11,
             "conditionKeys": [
                 "aws:RequestTag/${TagKey}",
                 "aws:ResourceTag/${TagKey}",
@@ -2107,7 +2112,8 @@
                 "backup:FrameworkArns",
                 "backup:Index",
                 "backup:MaxRetentionDays",
-                "backup:MinRetentionDays"
+                "backup:MinRetentionDays",
+                "backup:MpaApprovalTeamArn"
             ]
         },
         {
@@ -2841,7 +2847,7 @@
             "name": "AWS Certificate Manager",
             "servicePrefix": "acm",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awscertificatemanager.html",
-            "actionsCount": 15,
+            "actionsCount": 16,
             "actions": [
                 "AddTagsToCertificate",
                 "DeleteCertificate",
@@ -2857,17 +2863,19 @@
                 "RenewCertificate",
                 "RequestCertificate",
                 "ResendValidationEmail",
+                "RevokeCertificate",
                 "UpdateCertificateOptions"
             ],
             "resourceTypesCount": 1,
             "resourceTypes": [
                 "certificate"
             ],
-            "conditionKeysCount": 8,
+            "conditionKeysCount": 9,
             "conditionKeys": [
                 "acm:CertificateAuthority",
                 "acm:CertificateTransparencyLogging",
                 "acm:DomainNames",
+                "acm:Export",
                 "acm:KeyAlgorithm",
                 "acm:ValidationMethod",
                 "aws:RequestTag/${TagKey}",
@@ -16961,7 +16969,7 @@
             "name": "Amazon Lex V2",
             "servicePrefix": "lex",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonlexv2.html",
-            "actionsCount": 112,
+            "actionsCount": 114,
             "actions": [
                 "BatchCreateCustomVocabularyItem",
                 "BatchDeleteCustomVocabularyItem",
@@ -16977,6 +16985,7 @@
                 "CreateExport",
                 "CreateIntent",
                 "CreateResourcePolicy",
+                "CreateResourcePolicyStatement",
                 "CreateSlot",
                 "CreateSlotType",
                 "CreateTestSet",
@@ -16993,6 +17002,7 @@
                 "DeleteImport",
                 "DeleteIntent",
                 "DeleteResourcePolicy",
+                "DeleteResourcePolicyStatement",
                 "DeleteSession",
                 "DeleteSlot",
                 "DeleteSlotType",
@@ -19120,6 +19130,52 @@
                 "aws:TagKeys"
             ]
         },
+        {
+            "name": "Multi-party approval",
+            "servicePrefix": "mpa",
+            "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_multi-partyapproval.html",
+            "actionsCount": 24,
+            "actions": [
+                "CancelSession",
+                "CreateApprovalTeam",
+                "CreateIdentitySource",
+                "DeleteIdentitySource",
+                "DeleteInactiveApprovalTeamVersion",
+                "DeleteResourcePolicy",
+                "GetApprovalTeam",
+                "GetIdentitySource",
+                "GetPolicyVersion",
+                "GetResourcePolicy",
+                "GetSession",
+                "ListApprovalTeams",
+                "ListIdentitySources",
+                "ListPolicies",
+                "ListPolicyVersions",
+                "ListResourcePolicies",
+                "ListSessions",
+                "ListTagsForResource",
+                "PutResourcePolicy",
+                "StartActiveApprovalTeamDeletion",
+                "StartSession",
+                "TagResource",
+                "UntagResource",
+                "UpdateApprovalTeam"
+            ],
+            "resourceTypesCount": 3,
+            "resourceTypes": [
+                "approval-team",
+                "identity-source",
+                "session"
+            ],
+            "conditionKeysCount": 5,
+            "conditionKeys": [
+                "aws:RequestTag/${TagKey}",
+                "aws:ResourceTag/${TagKey}",
+                "aws:TagKeys",
+                "mpa:ProtectedResourceAccount",
+                "mpa:RequestedOperation"
+            ]
+        },
         {
             "name": "Amazon Neptune",
             "servicePrefix": "neptune-db",
@@ -26385,7 +26441,7 @@
             "name": "AWS Support",
             "servicePrefix": "support",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupport.html",
-            "actionsCount": 29,
+            "actionsCount": 30,
             "actions": [
                 "AddAttachmentsToSet",
                 "AddCommunicationToCase",
@@ -26415,7 +26471,8 @@
                 "ResolveCase",
                 "SearchForCases",
                 "StartInteraction",
-                "UpdateCaseSeverity"
+                "UpdateCaseSeverity",
+                "UpdateInteraction"
             ],
             "resourceTypesCount": 0,
             "resourceTypes": [],

package/dist/data/json/reports.json

@@ -2,19 +2,19 @@
     "Actions by type": [
         {
             "key": "Write Actions",
-            "value": 10307
+            "value": 10325
         },
         {
             "key": "Read Actions",
-            "value": 5020
+            "value": 5025
         },
         {
             "key": "List Actions",
-            "value": 3060
+            "value": 3068
         },
         {
             "key": "Permissions Actions",
-            "value": 351
+            "value": 353
         }
     ],
     "Longest action names": [
@@ -166,7 +166,7 @@
         },
         {
             "key": "bot - arn:${Partition}:lex:${Region}:${Account}:bot/${BotId}",
-            "value": 81
+            "value": 83
         },
         {
             "key": "repository - arn:${Partition}:codecommit:${Region}:${Account}:${RepositoryName}",
@@ -398,7 +398,7 @@
     "Summary": [
         {
             "key": "Total number of services",
-            "value": 441
+            "value": 442
         },
         {
             "key": "Average number of actions per service",
@@ -410,11 +410,11 @@
         },
         {
             "key": "Total number of distinct resource ARNS",
-            "value": 1922
+            "value": 1925
         },
         {
             "key": "Total number of distinct condition keys",
-            "value": 1186
+            "value": 1190
         }
     ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aws-iam-data",
-  "version": "0.0.401",
+  "version": "0.0.402",
   "description": "Provides AWS IAM data gathered from the official AWS IAM docs as a convenient npm package that can be used in other OSS projects.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",