aws-iam-data 0.0.452 → 0.0.453

package/dist/data/json/changelog.json

@@ -1,4 +1,17 @@
 [
+    {
+        "dateOfChange": "2025-09-23",
+        "addedServices": [],
+        "removedServices": [],
+        "addedActions": {
+            "Amazon Bedrock Agentcore": [
+                "bedrock-agentcore:ListTagsForResource",
+                "bedrock-agentcore:TagResource",
+                "bedrock-agentcore:UntagResource"
+            ]
+        },
+        "removedActions": {}
+    },
     {
         "dateOfChange": "2025-09-19",
         "addedServices": [],

package/dist/data/json/iam.json

@@ -35135,7 +35135,10 @@
                     {
                         "resourceType": "",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
                         "dependentActions": [
                             "iam:PassRole"
                         ]
@@ -35149,10 +35152,19 @@
                 "description": "Grants permission to create a new agent runtime endpoint",
                 "accessLevel": "Write",
                 "resourceTypes": [
+                    {
+                        "resourceType": "runtime",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
                         "dependentActions": []
                     }
                 ]
@@ -35188,7 +35200,10 @@
                     {
                         "resourceType": "",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
                         "dependentActions": []
                     }
                 ]
@@ -35203,7 +35218,10 @@
                     {
                         "resourceType": "",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
                         "dependentActions": []
                     }
                 ]
@@ -36261,6 +36279,39 @@
                     }
                 ]
             },
+            {
+                "name": "ListTagsForResource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListTagsForResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list tags for a Bedrock-AgentCore resource",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "browser-custom",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "code-interpreter-custom",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "runtime",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "runtime-endpoint",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListWorkloadIdentities",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListWorkloadIdentities.html",
@@ -36420,6 +36471,89 @@
                     }
                 ]
             },
+            {
+                "name": "TagResource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_TagResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to Tag a Bedrock-AgentCore resource",
+                "accessLevel": "Tagging",
+                "resourceTypes": [
+                    {
+                        "resourceType": "browser-custom",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "code-interpreter-custom",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "runtime",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "runtime-endpoint",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:TagKeys",
+                            "aws:RequestTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UntagResource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UntagResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to Untag a Bedrock-AgentCore resource",
+                "accessLevel": "Tagging",
+                "resourceTypes": [
+                    {
+                        "resourceType": "browser-custom",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "code-interpreter-custom",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "runtime",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "runtime-endpoint",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "UpdateAgentRuntime",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
@@ -36627,19 +36761,25 @@
                 "name": "runtime",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/runtime.html",
                 "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}",
-                "conditionKeys": []
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             },
             {
                 "name": "runtime-endpoint",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/runtimeEndpoint.html",
                 "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}/runtime-endpoint/${Name}",
-                "conditionKeys": []
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             },
             {
                 "name": "code-interpreter-custom",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/codeInterpreter.html",
                 "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/${CodeInterpreterId}",
-                "conditionKeys": []
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             },
             {
                 "name": "code-interpreter",
@@ -36651,7 +36791,9 @@
                 "name": "browser-custom",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/browser.html",
                 "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/${BrowserId}",
-                "conditionKeys": []
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             },
             {
                 "name": "browser",
@@ -36673,6 +36815,24 @@
             }
         ],
         "conditionKeys": [
+            {
+                "name": "aws:RequestTag/${TagKey}",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available",
+                "description": "Filters access by creating requests based on the allowed set of values for each of the mandatory tags",
+                "type": "String"
+            },
+            {
+                "name": "aws:ResourceTag/${TagKey}",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available",
+                "description": "Filters access by having actions based on the tag value associated with the resource",
+                "type": "String"
+            },
+            {
+                "name": "aws:TagKeys",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available",
+                "description": "Filters access by creating requests based on the presence of mandatory tags in the request",
+                "type": "ArrayOfString"
+            },
             {
                 "name": "bedrock-agentcore:actorId",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-actorId",
@@ -343760,7 +343920,11 @@
                     {
                         "resourceType": "model-package",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "sagemaker:CurrentModelLifeCycleStageStatus",
+                            "sagemaker:CurrentModelLifeCycleStage",
+                            "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
@@ -343967,7 +344131,11 @@
                     {
                         "resourceType": "model-package",
                         "required": true,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "sagemaker:CurrentModelLifeCycleStageStatus",
+                            "sagemaker:CurrentModelLifeCycleStage",
+                            "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+                        ],
                         "dependentActions": []
                     }
                 ]
@@ -345279,7 +345447,11 @@
                     {
                         "resourceType": "model-package",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "sagemaker:CurrentModelLifeCycleStageStatus",
+                            "sagemaker:CurrentModelLifeCycleStage",
+                            "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+                        ],
                         "dependentActions": [
                             "sagemaker:AddTags"
                         ]
@@ -346650,7 +346822,11 @@
                     {
                         "resourceType": "model-package",
                         "required": true,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "sagemaker:CurrentModelLifeCycleStageStatus",
+                            "sagemaker:CurrentModelLifeCycleStage",
+                            "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+                        ],
                         "dependentActions": []
                     }
                 ]
@@ -347112,7 +347288,11 @@
                     {
                         "resourceType": "model-package",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "sagemaker:CurrentModelLifeCycleStageStatus",
+                            "sagemaker:CurrentModelLifeCycleStage",
+                            "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
@@ -348050,7 +348230,11 @@
                     {
                         "resourceType": "model-package",
                         "required": true,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "sagemaker:CurrentModelLifeCycleStageStatus",
+                            "sagemaker:CurrentModelLifeCycleStage",
+                            "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+                        ],
                         "dependentActions": []
                     }
                 ]
@@ -350166,7 +350350,11 @@
                     {
                         "resourceType": "model-package",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "sagemaker:CurrentModelLifeCycleStageStatus",
+                            "sagemaker:CurrentModelLifeCycleStage",
+                            "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
@@ -351573,7 +351761,11 @@
                     {
                         "resourceType": "model-package",
                         "required": true,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "sagemaker:CurrentModelLifeCycleStageStatus",
+                            "sagemaker:CurrentModelLifeCycleStage",
+                            "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
@@ -352155,7 +352347,10 @@
                 "name": "image-version",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/sagemaker/latest/dg/studio-byoi.html",
                 "arnPattern": "arn:${Partition}:sagemaker:${Region}:${Account}:image-version/${ImageName}/${Version}",
-                "conditionKeys": []
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}",
+                    "sagemaker:ResourceTag/${TagKey}"
+                ]
             },
             {
                 "name": "algorithm",
@@ -352235,6 +352430,9 @@
                 "arnPattern": "arn:${Partition}:sagemaker:${Region}:${Account}:model-package/${ModelPackageName}",
                 "conditionKeys": [
                     "aws:ResourceTag/${TagKey}",
+                    "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}",
+                    "sagemaker:CurrentModelLifeCycleStage",
+                    "sagemaker:CurrentModelLifeCycleStageStatus",
                     "sagemaker:ResourceTag/${TagKey}"
                 ]
             },
@@ -352564,6 +352762,24 @@
                 "description": "Filters access by the app network access type associated with the resource in the request",
                 "type": "String"
             },
+            {
+                "name": "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys",
+                "description": "Filters access by a current metadata key and value pair associated with the model-package resource",
+                "type": "String"
+            },
+            {
+                "name": "sagemaker:CurrentModelLifeCycleStage",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys",
+                "description": "Filters access by the current value of the Stage field in the model life cycle object associated with the model-package resource",
+                "type": "String"
+            },
+            {
+                "name": "sagemaker:CurrentModelLifeCycleStageStatus",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys",
+                "description": "Filters access by the current value of the StageStatus field in the model life cycle object associated with the model-package resource",
+                "type": "String"
+            },
             {
                 "name": "sagemaker:CustomerMetadataProperties/${MetadataKey}",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys",

package/dist/data/json/metadata.json

@@ -2654,7 +2654,7 @@
             "name": "Amazon Bedrock Agentcore",
             "servicePrefix": "bedrock-agentcore",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html",
-            "actionsCount": 81,
+            "actionsCount": 84,
             "actions": [
                 "AllowVendedLogDeliveryForResource",
                 "ConnectBrowserAutomationStream",
@@ -2720,6 +2720,7 @@
                 "ListMemoryRecords",
                 "ListOauth2CredentialProviders",
                 "ListSessions",
+                "ListTagsForResource",
                 "ListWorkloadIdentities",
                 "RetrieveMemoryRecords",
                 "SetTokenVaultCMK",
@@ -2728,6 +2729,8 @@
                 "StopBrowserSession",
                 "StopCodeInterpreterSession",
                 "SynchronizeGatewayTargets",
+                "TagResource",
+                "UntagResource",
                 "UpdateAgentRuntime",
                 "UpdateAgentRuntimeEndpoint",
                 "UpdateApiKeyCredentialProvider",
@@ -2754,8 +2757,11 @@
                 "workload-identity-directory",
                 "token-vault"
             ],
-            "conditionKeysCount": 4,
+            "conditionKeysCount": 7,
             "conditionKeys": [
+                "aws:RequestTag/${TagKey}",
+                "aws:ResourceTag/${TagKey}",
+                "aws:TagKeys",
                 "bedrock-agentcore:actorId",
                 "bedrock-agentcore:namespace",
                 "bedrock-agentcore:sessionId",
@@ -25021,13 +25027,16 @@
                 "cluster-scheduler-config",
                 "partner-app"
             ],
-            "conditionKeysCount": 54,
+            "conditionKeysCount": 57,
             "conditionKeys": [
                 "aws:RequestTag/${TagKey}",
                 "aws:ResourceTag/${TagKey}",
                 "aws:TagKeys",
                 "sagemaker:AcceleratorTypes",
                 "sagemaker:AppNetworkAccessType",
+                "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}",
+                "sagemaker:CurrentModelLifeCycleStage",
+                "sagemaker:CurrentModelLifeCycleStageStatus",
                 "sagemaker:CustomerMetadataProperties/${MetadataKey}",
                 "sagemaker:CustomerMetadataPropertiesToRemove",
                 "sagemaker:DirectGatedModelAccess",

package/dist/data/json/reports.json

@@ -2,7 +2,7 @@
     "Actions by type": [
         {
             "key": "Write Actions",
-            "value": 10596
+            "value": 10598
         },
         {
             "key": "Read Actions",
@@ -10,7 +10,7 @@
         },
         {
             "key": "List Actions",
-            "value": 3180
+            "value": 3181
         },
         {
             "key": "Permissions Actions",
@@ -414,7 +414,7 @@
         },
         {
             "key": "Total number of distinct condition keys",
-            "value": 1229
+            "value": 1232
         }
     ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aws-iam-data",
-  "version": "0.0.452",
+  "version": "0.0.453",
   "description": "Provides AWS IAM data gathered from the official AWS IAM docs as a convenient npm package that can be used in other OSS projects.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",