aws-iam-data 0.0.514 → 0.0.516

package/dist/data/json/changelog.json

@@ -1,4 +1,23 @@
 [
+    {
+        "dateOfChange": "2026-02-06",
+        "addedServices": [],
+        "removedServices": [],
+        "addedActions": {
+            "Amazon Bedrock Agentcore": [
+                "bedrock-agentcore:CreateBrowserProfile",
+                "bedrock-agentcore:DeleteBrowserProfile",
+                "bedrock-agentcore:GetBrowserProfile",
+                "bedrock-agentcore:ListBrowserProfiles",
+                "bedrock-agentcore:SaveBrowserSessionProfile"
+            ],
+            "AWS Glue": [
+                "glue:DeleteConnectionType",
+                "glue:RegisterConnectionType"
+            ]
+        },
+        "removedActions": {}
+    },
     {
         "dateOfChange": "2026-02-04",
         "addedServices": [],

package/dist/data/json/iam.json

@@ -36976,6 +36976,24 @@
                     }
                 ]
             },
+            {
+                "name": "CreateBrowserProfile",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateBrowserProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a new browser profile",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "CreateCodeInterpreter",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateCodeInterpreter.html",
@@ -37006,7 +37024,11 @@
                     {
                         "resourceType": "",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:ResourceTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
                         "dependentActions": []
                     }
                 ]
@@ -37082,7 +37104,8 @@
                         "required": false,
                         "conditionKeys": [
                             "aws:RequestTag/${TagKey}",
-                            "aws:TagKeys"
+                            "aws:TagKeys",
+                            "bedrock-agentcore:KmsKeyArn"
                         ],
                         "dependentActions": [
                             "iam:PassRole"
@@ -37130,7 +37153,11 @@
                     {
                         "resourceType": "",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:ResourceTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
                         "dependentActions": [
                             "iam:PassRole"
                         ]
@@ -37269,6 +37296,21 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteBrowserProfile",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteBrowserProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a browser profile",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "browser-profile",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DeleteCodeInterpreter",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteCodeInterpreter.html",
@@ -37611,6 +37653,21 @@
                     }
                 ]
             },
+            {
+                "name": "GetBrowserProfile",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetBrowserProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get details of a browser profile",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "browser-profile",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetBrowserSession",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetBrowserSession.html",
@@ -38273,6 +38330,21 @@
                     }
                 ]
             },
+            {
+                "name": "ListBrowserProfiles",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListBrowserProfiles.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list browser profiles",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListBrowserSessions",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListBrowserSessions.html",
@@ -38606,12 +38678,24 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "browser-profile",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "code-interpreter-custom",
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "evaluator",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "gateway",
                         "required": false,
@@ -38630,6 +38714,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "online-evaluation-config",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "runtime",
                         "required": false,
@@ -38785,6 +38875,33 @@
                     }
                 ]
             },
+            {
+                "name": "SaveBrowserSessionProfile",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_SaveBrowserSessionProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to save a browser session profile",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "browser",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "browser-custom",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "browser-profile",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "SetTokenVaultCMK",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_SetTokenVaultCMK.html",
@@ -38818,6 +38935,12 @@
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "browser-profile",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -38979,12 +39102,24 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "browser-profile",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "code-interpreter-custom",
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "evaluator",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "gateway",
                         "required": false,
@@ -39003,6 +39138,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "online-evaluation-config",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "runtime",
                         "required": false,
@@ -39063,12 +39204,24 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "browser-profile",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "code-interpreter-custom",
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "evaluator",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "gateway",
                         "required": false,
@@ -39087,6 +39240,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "online-evaluation-config",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "runtime",
                         "required": false,
@@ -39381,13 +39540,17 @@
                 "name": "evaluator",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/evaluator.html",
                 "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:evaluator/${EvaluatorId}",
-                "conditionKeys": []
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             },
             {
                 "name": "online-evaluation-config",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/onlineEvaluationConfig.html",
                 "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:online-evaluation-config/${OnlineEvaluationConfigId}",
-                "conditionKeys": []
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             },
             {
                 "name": "memory",
@@ -39473,6 +39636,14 @@
                 "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:aws:browser/${BrowserId}",
                 "conditionKeys": []
             },
+            {
+                "name": "browser-profile",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/browserProfile.html",
+                "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:aws:browser-profile/${BrowserProfileId}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
+            },
             {
                 "name": "workload-identity-directory",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/workloadIdentityDirectory.html",
@@ -39563,6 +39734,12 @@
                 "description": "Filters access by the subject claim (sub) in the JWT passed in the request",
                 "type": "String"
             },
+            {
+                "name": "bedrock-agentcore:KmsKeyArn",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-kmsKeyArn",
+                "description": "Filters access by KMS Key arn provided",
+                "type": "String"
+            },
             {
                 "name": "bedrock-agentcore:actorId",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-actorId",
@@ -127457,9 +127634,12 @@
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
-                        "resourceType": "table",
-                        "required": true,
-                        "conditionKeys": [],
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "dynamodb:FisActionId",
+                            "dynamodb:FisTargetArns"
+                        ],
                         "dependentActions": []
                     }
                 ]
@@ -203682,6 +203862,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "connectionType",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "",
                         "required": false,
@@ -204545,6 +204731,21 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteConnectionType",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/glue/latest/dg/glue-connections.html#connection-type-permissions-operations",
+                "permissionOnly": false,
+                "description": "Grants permission to delete connection type",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "connectionType",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DeleteCrawler",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-crawler-crawling.html#aws-glue-api-crawler-crawling-DeleteCrawler",
@@ -205149,11 +205350,11 @@
                 "name": "DescribeConnectionType",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/glue/latest/dg/glue-connections.html#connection-type-permissions-operations",
                 "permissionOnly": false,
-                "description": "Grants permission to describe connection type in glue studio",
+                "description": "Grants permission to describe connection type in glue",
                 "accessLevel": "Permissions management",
                 "resourceTypes": [
                     {
-                        "resourceType": "",
+                        "resourceType": "connectionType",
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
@@ -205178,6 +205379,12 @@
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "connectionType",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -205951,6 +206158,12 @@
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "connectionType",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -207297,7 +207510,7 @@
                 "name": "ListConnectionTypes",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/glue/latest/dg/glue-connections.html#connection-type-permissions-operations",
                 "permissionOnly": false,
-                "description": "Grants permission to list connection types in glue studio",
+                "description": "Grants permission to list connection types in glue",
                 "accessLevel": "Permissions management",
                 "resourceTypes": [
                     {
@@ -207446,6 +207659,12 @@
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "connectionType",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -207864,6 +208083,35 @@
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "connectionType",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RegisterConnectionType",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/glue/latest/dg/glue-connections.html#connection-type-permissions-operations",
+                "permissionOnly": false,
+                "description": "Grants permission to register connection type",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "connectionType",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -208655,7 +208903,13 @@
                 "accessLevel": "Permissions management",
                 "resourceTypes": [
                     {
-                        "resourceType": "",
+                        "resourceType": "connection",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "connectionType",
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
@@ -208958,6 +209212,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "connectionType",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "",
                         "required": false,
@@ -209645,6 +209905,14 @@
                 "conditionKeys": [
                     "aws:ResourceTag/${TagKey}"
                 ]
+            },
+            {
+                "name": "connectionType",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/glue/latest/dg/glue-specifying-resource-arns.html",
+                "arnPattern": "arn:${Partition}:glue:${Region}:${Account}:connectionType:${ConnectionTypeName}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             }
         ],
         "conditionKeys": [
@@ -381162,6 +381430,45 @@
                             "accounts.google.com:aud",
                             "accounts.google.com:oaud",
                             "accounts.google.com:sub",
+                            "accounts.google.com:organization_number",
+                            "token.actions.githubusercontent.com:actor",
+                            "token.actions.githubusercontent.com:actor_id",
+                            "token.actions.githubusercontent.com:enterprise_id",
+                            "token.actions.githubusercontent.com:environment",
+                            "token.actions.githubusercontent.com:job_workflow_ref",
+                            "token.actions.githubusercontent.com:ref",
+                            "token.actions.githubusercontent.com:repository",
+                            "token.actions.githubusercontent.com:repository_id",
+                            "token.actions.githubusercontent.com:workflow",
+                            "token.actions.githubusercontent.com/${SubPath}:actor",
+                            "token.actions.githubusercontent.com/${SubPath}:actor_id",
+                            "token.actions.githubusercontent.com/${SubPath}:enterprise_id",
+                            "token.actions.githubusercontent.com/${SubPath}:environment",
+                            "token.actions.githubusercontent.com/${SubPath}:job_workflow_ref",
+                            "token.actions.githubusercontent.com/${SubPath}:ref",
+                            "token.actions.githubusercontent.com/${SubPath}:repository",
+                            "token.actions.githubusercontent.com/${SubPath}:repository_id",
+                            "token.actions.githubusercontent.com/${SubPath}:workflow",
+                            "token.actions.${Domain}.ghe.com:actor",
+                            "token.actions.${Domain}.ghe.com:actor_id",
+                            "token.actions.${Domain}.ghe.com:enterprise_id",
+                            "token.actions.${Domain}.ghe.com:environment",
+                            "token.actions.${Domain}.ghe.com:job_workflow_ref",
+                            "token.actions.${Domain}.ghe.com:ref",
+                            "token.actions.${Domain}.ghe.com:repository",
+                            "token.actions.${Domain}.ghe.com:repository_id",
+                            "token.actions.${Domain}.ghe.com:workflow",
+                            "github.com/enterprises/${EnterpriseName}:actor",
+                            "github.com/enterprises/${EnterpriseName}:actor_id",
+                            "github.com/enterprises/${EnterpriseName}:enterprise_id",
+                            "github.com/enterprises/${EnterpriseName}:environment",
+                            "github.com/enterprises/${EnterpriseName}:job_workflow_ref",
+                            "github.com/enterprises/${EnterpriseName}:ref",
+                            "github.com/enterprises/${EnterpriseName}:repository",
+                            "github.com/enterprises/${EnterpriseName}:repository_id",
+                            "github.com/enterprises/${EnterpriseName}:workflow",
+                            "oidc.circleci.com/org/${OrgId}:project_id",
+                            "idcs-${OciUniqueIdentifier}.identity.oraclecloud.com:rpst_id",
                             "aws:TagKeys",
                             "aws:RequestTag/${TagKey}",
                             "sts:TransitiveTagKeys",
@@ -381503,6 +381810,12 @@
                 "description": "Filters access by the Google audience",
                 "type": "String"
             },
+            {
+                "name": "accounts.google.com:organization_number",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the organization number that the Google identity belongs to",
+                "type": "String"
+            },
             {
                 "name": "accounts.google.com:sub",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#ck_sub",
@@ -381545,6 +381858,60 @@
                 "description": "Filters access by the subject of the claim (the Amazon Cognito user ID)",
                 "type": "String"
             },
+            {
+                "name": "github.com/enterprises/${EnterpriseName}:actor",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the personal account that initiated the workflow run",
+                "type": "String"
+            },
+            {
+                "name": "github.com/enterprises/${EnterpriseName}:actor_id",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the ID of the personal account that initiated the workflow run",
+                "type": "String"
+            },
+            {
+                "name": "github.com/enterprises/${EnterpriseName}:enterprise_id",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the ID of the enterprise that contains the repository from where the workflow is running",
+                "type": "String"
+            },
+            {
+                "name": "github.com/enterprises/${EnterpriseName}:environment",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the name of the environment used by the job",
+                "type": "String"
+            },
+            {
+                "name": "github.com/enterprises/${EnterpriseName}:job_workflow_ref",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the reference path to the reusable workflow for jobs using a reusable workflow",
+                "type": "String"
+            },
+            {
+                "name": "github.com/enterprises/${EnterpriseName}:ref",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the git ref (branch or tag) that triggered the workflow run",
+                "type": "String"
+            },
+            {
+                "name": "github.com/enterprises/${EnterpriseName}:repository",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the repository from where the workflow is running",
+                "type": "String"
+            },
+            {
+                "name": "github.com/enterprises/${EnterpriseName}:repository_id",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the ID of the repository from where the workflow is running",
+                "type": "String"
+            },
+            {
+                "name": "github.com/enterprises/${EnterpriseName}:workflow",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the name of the workflow",
+                "type": "String"
+            },
             {
                 "name": "graph.facebook.com:app_id",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#ck_id",
@@ -381563,6 +381930,18 @@
                 "description": "Filters access by the tags that are attached to the role that is being assumed",
                 "type": "String"
             },
+            {
+                "name": "idcs-${OciUniqueIdentifier}.identity.oraclecloud.com:rpst_id",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the OCI resource principal session token ID",
+                "type": "String"
+            },
+            {
+                "name": "oidc.circleci.com/org/${OrgId}:project_id",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the CircleCI project ID",
+                "type": "String"
+            },
             {
                 "name": "saml:aud",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#ck_aud",
@@ -381821,6 +382200,168 @@
                 "description": "Filters access by the transitive tag keys that are passed in the request",
                 "type": "ArrayOfString"
             },
+            {
+                "name": "token.actions.${Domain}.ghe.com:actor",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the personal account that initiated the workflow run",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.${Domain}.ghe.com:actor_id",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the ID of the personal account that initiated the workflow run",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.${Domain}.ghe.com:enterprise_id",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the ID of the enterprise that contains the repository from where the workflow is running",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.${Domain}.ghe.com:environment",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the name of the environment used by the job",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.${Domain}.ghe.com:job_workflow_ref",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the reference path to the reusable workflow for jobs using a reusable workflow",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.${Domain}.ghe.com:ref",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the git ref (branch or tag) that triggered the workflow run",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.${Domain}.ghe.com:repository",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the repository from where the workflow is running",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.${Domain}.ghe.com:repository_id",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the ID of the repository from where the workflow is running",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.${Domain}.ghe.com:workflow",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the name of the workflow",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.githubusercontent.com/${SubPath}:actor",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the personal account that initiated the workflow run",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.githubusercontent.com/${SubPath}:actor_id",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the ID of the personal account that initiated the workflow run",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.githubusercontent.com/${SubPath}:enterprise_id",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the ID of the enterprise that contains the repository from where the workflow is running",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.githubusercontent.com/${SubPath}:environment",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the name of the environment used by the job",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.githubusercontent.com/${SubPath}:job_workflow_ref",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the reference path to the reusable workflow for jobs using a reusable workflow",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.githubusercontent.com/${SubPath}:ref",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the git ref (branch or tag) that triggered the workflow run",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.githubusercontent.com/${SubPath}:repository",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the repository from where the workflow is running",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.githubusercontent.com/${SubPath}:repository_id",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the ID of the repository from where the workflow is running",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.githubusercontent.com/${SubPath}:workflow",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the name of the workflow",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.githubusercontent.com:actor",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the personal account that initiated the workflow run",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.githubusercontent.com:actor_id",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the ID of the personal account that initiated the workflow run",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.githubusercontent.com:enterprise_id",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the ID of the enterprise that contains the repository from where the workflow is running",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.githubusercontent.com:environment",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the name of the environment used by the job",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.githubusercontent.com:job_workflow_ref",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the reference path to the reusable workflow for jobs using a reusable workflow",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.githubusercontent.com:ref",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the git ref (branch or tag) that triggered the workflow run",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.githubusercontent.com:repository",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the repository from where the workflow is running",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.githubusercontent.com:repository_id",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the ID of the repository from where the workflow is running",
+                "type": "String"
+            },
+            {
+                "name": "token.actions.githubusercontent.com:workflow",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#condition-keys-wif",
+                "description": "Filters access by the name of the workflow",
+                "type": "String"
+            },
             {
                 "name": "www.amazon.com:app_id",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#ck_id",

package/dist/data/json/metadata.json

@@ -2752,7 +2752,7 @@
             "name": "Amazon Bedrock Agentcore",
             "servicePrefix": "bedrock-agentcore",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html",
-            "actionsCount": 128,
+            "actionsCount": 133,
             "actions": [
                 "AllowVendedLogDeliveryForResource",
                 "AuthorizeAction",
@@ -2766,6 +2766,7 @@
                 "CreateAgentRuntimeEndpoint",
                 "CreateApiKeyCredentialProvider",
                 "CreateBrowser",
+                "CreateBrowserProfile",
                 "CreateCodeInterpreter",
                 "CreateEvaluator",
                 "CreateEvent",
@@ -2781,6 +2782,7 @@
                 "DeleteAgentRuntimeEndpoint",
                 "DeleteApiKeyCredentialProvider",
                 "DeleteBrowser",
+                "DeleteBrowserProfile",
                 "DeleteCodeInterpreter",
                 "DeleteEvaluator",
                 "DeleteEvent",
@@ -2800,6 +2802,7 @@
                 "GetAgentRuntimeEndpoint",
                 "GetApiKeyCredentialProvider",
                 "GetBrowser",
+                "GetBrowserProfile",
                 "GetBrowserSession",
                 "GetCodeInterpreter",
                 "GetCodeInterpreterSession",
@@ -2833,6 +2836,7 @@
                 "ListAgentRuntimeVersions",
                 "ListAgentRuntimes",
                 "ListApiKeyCredentialProviders",
+                "ListBrowserProfiles",
                 "ListBrowserSessions",
                 "ListBrowsers",
                 "ListCodeInterpreterSessions",
@@ -2858,6 +2862,7 @@
                 "PartiallyAuthorizeActions",
                 "PutResourcePolicy",
                 "RetrieveMemoryRecords",
+                "SaveBrowserSessionProfile",
                 "SetTokenVaultCMK",
                 "StartBrowserSession",
                 "StartCodeInterpreterSession",
@@ -2883,7 +2888,7 @@
                 "UpdatePolicyEngine",
                 "UpdateWorkloadIdentity"
             ],
-            "resourceTypesCount": 18,
+            "resourceTypesCount": 19,
             "resourceTypes": [
                 "evaluator",
                 "online-evaluation-config",
@@ -2898,13 +2903,14 @@
                 "code-interpreter",
                 "browser-custom",
                 "browser",
+                "browser-profile",
                 "workload-identity-directory",
                 "token-vault",
                 "policy-engine",
                 "policy",
                 "policy-generation"
             ],
-            "conditionKeysCount": 16,
+            "conditionKeysCount": 17,
             "conditionKeys": [
                 "aws:RequestTag/${TagKey}",
                 "aws:ResourceTag/${TagKey}",
@@ -2915,6 +2921,7 @@
                 "bedrock-agentcore:InboundJwtClaim/iss",
                 "bedrock-agentcore:InboundJwtClaim/scope",
                 "bedrock-agentcore:InboundJwtClaim/sub",
+                "bedrock-agentcore:KmsKeyArn",
                 "bedrock-agentcore:actorId",
                 "bedrock-agentcore:namespace",
                 "bedrock-agentcore:securityGroups",
@@ -13875,7 +13882,7 @@
             "name": "AWS Glue",
             "servicePrefix": "glue",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsglue.html",
-            "actionsCount": 297,
+            "actionsCount": 299,
             "actions": [
                 "AuthorizeInboundIntegration",
                 "BatchCreatePartition",
@@ -13937,6 +13944,7 @@
                 "DeleteColumnStatisticsForTable",
                 "DeleteColumnStatisticsTaskSettings",
                 "DeleteConnection",
+                "DeleteConnectionType",
                 "DeleteCrawler",
                 "DeleteCustomEntityType",
                 "DeleteDataQualityRuleset",
@@ -14103,6 +14111,7 @@
                 "PutWorkflowRunProperties",
                 "QuerySchemaVersionMetadata",
                 "RefreshOAuth2Tokens",
+                "RegisterConnectionType",
                 "RegisterSchemaVersion",
                 "RemoveSchemaVersionMetadata",
                 "RenameTable",
@@ -14175,7 +14184,7 @@
                 "UseGlueStudio",
                 "UseMLTransforms"
             ],
-            "resourceTypesCount": 22,
+            "resourceTypesCount": 23,
             "resourceTypes": [
                 "rootcatalog",
                 "catalog",
@@ -14198,7 +14207,8 @@
                 "dataQualityRuleset",
                 "customEntityType",
                 "completion",
-                "integration"
+                "integration",
+                "connectionType"
             ],
             "conditionKeysCount": 11,
             "conditionKeys": [
@@ -26930,10 +26940,11 @@
                 "context-provider",
                 "federated-user"
             ],
-            "conditionKeysCount": 57,
+            "conditionKeysCount": 96,
             "conditionKeys": [
                 "accounts.google.com:aud",
                 "accounts.google.com:oaud",
+                "accounts.google.com:organization_number",
                 "accounts.google.com:sub",
                 "aws:RequestTag/${TagKey}",
                 "aws:ResourceTag/${TagKey}",
@@ -26941,9 +26952,20 @@
                 "cognito-identity.amazonaws.com:amr",
                 "cognito-identity.amazonaws.com:aud",
                 "cognito-identity.amazonaws.com:sub",
+                "github.com/enterprises/${EnterpriseName}:actor",
+                "github.com/enterprises/${EnterpriseName}:actor_id",
+                "github.com/enterprises/${EnterpriseName}:enterprise_id",
+                "github.com/enterprises/${EnterpriseName}:environment",
+                "github.com/enterprises/${EnterpriseName}:job_workflow_ref",
+                "github.com/enterprises/${EnterpriseName}:ref",
+                "github.com/enterprises/${EnterpriseName}:repository",
+                "github.com/enterprises/${EnterpriseName}:repository_id",
+                "github.com/enterprises/${EnterpriseName}:workflow",
                 "graph.facebook.com:app_id",
                 "graph.facebook.com:id",
                 "iam:ResourceTag/${TagKey}",
+                "idcs-${OciUniqueIdentifier}.identity.oraclecloud.com:rpst_id",
+                "oidc.circleci.com/org/${OrgId}:project_id",
                 "saml:aud",
                 "saml:cn",
                 "saml:commonName",
@@ -26987,6 +27009,33 @@
                 "sts:SourceIdentity",
                 "sts:TaskPolicyArn",
                 "sts:TransitiveTagKeys",
+                "token.actions.${Domain}.ghe.com:actor",
+                "token.actions.${Domain}.ghe.com:actor_id",
+                "token.actions.${Domain}.ghe.com:enterprise_id",
+                "token.actions.${Domain}.ghe.com:environment",
+                "token.actions.${Domain}.ghe.com:job_workflow_ref",
+                "token.actions.${Domain}.ghe.com:ref",
+                "token.actions.${Domain}.ghe.com:repository",
+                "token.actions.${Domain}.ghe.com:repository_id",
+                "token.actions.${Domain}.ghe.com:workflow",
+                "token.actions.githubusercontent.com/${SubPath}:actor",
+                "token.actions.githubusercontent.com/${SubPath}:actor_id",
+                "token.actions.githubusercontent.com/${SubPath}:enterprise_id",
+                "token.actions.githubusercontent.com/${SubPath}:environment",
+                "token.actions.githubusercontent.com/${SubPath}:job_workflow_ref",
+                "token.actions.githubusercontent.com/${SubPath}:ref",
+                "token.actions.githubusercontent.com/${SubPath}:repository",
+                "token.actions.githubusercontent.com/${SubPath}:repository_id",
+                "token.actions.githubusercontent.com/${SubPath}:workflow",
+                "token.actions.githubusercontent.com:actor",
+                "token.actions.githubusercontent.com:actor_id",
+                "token.actions.githubusercontent.com:enterprise_id",
+                "token.actions.githubusercontent.com:environment",
+                "token.actions.githubusercontent.com:job_workflow_ref",
+                "token.actions.githubusercontent.com:ref",
+                "token.actions.githubusercontent.com:repository",
+                "token.actions.githubusercontent.com:repository_id",
+                "token.actions.githubusercontent.com:workflow",
                 "www.amazon.com:app_id",
                 "www.amazon.com:user_id"
             ]

package/dist/data/json/reports.json

@@ -2,15 +2,15 @@
     "Actions by type": [
         {
             "key": "Write Actions",
-            "value": 11188
+            "value": 11193
         },
         {
             "key": "Read Actions",
-            "value": 5412
+            "value": 5413
         },
         {
             "key": "List Actions",
-            "value": 3395
+            "value": 3396
         },
         {
             "key": "Permissions Actions",
@@ -77,28 +77,28 @@
             "value": 68
         },
         {
-            "key": "codebuild:secondarySources/${sourceIdentifier}.auth.resource",
-            "value": 60
+            "key": "token.actions.githubusercontent.com/${SubPath}:job_workflow_ref",
+            "value": 63
         },
         {
-            "key": "iot:CommandExecutionParameterBoolean/${CommandParameterName}",
+            "key": "codebuild:secondarySources/${sourceIdentifier}.auth.resource",
             "value": 60
         },
         {
-            "key": "payment-cryptography:CertificateAuthorityPublicKeyIdentifier",
+            "key": "idcs-${OciUniqueIdentifier}.identity.oraclecloud.com:rpst_id",
             "value": 60
         },
         {
-            "key": "codebuild:buildBatchConfig.restrictions.computeTypesAllowed",
-            "value": 59
+            "key": "iot:CommandExecutionParameterBoolean/${CommandParameterName}",
+            "value": 60
         },
         {
-            "key": "codebuild:environment.registryCredential.credentialProvider",
-            "value": 59
+            "key": "payment-cryptography:CertificateAuthorityPublicKeyIdentifier",
+            "value": 60
         },
         {
-            "key": "codebuild:secondaryArtifacts/${artifactIdentifier}.location",
-            "value": 59
+            "key": "token.actions.githubusercontent.com/${SubPath}:enterprise_id",
+            "value": 60
         }
     ],
     "Longest service prefixes": [
@@ -246,7 +246,7 @@
         },
         {
             "key": "AWS Glue",
-            "value": 297
+            "value": 299
         },
         {
             "key": "AWS IoT",
@@ -410,11 +410,11 @@
         },
         {
             "key": "Total number of distinct resource ARNS",
-            "value": 2056
+            "value": 2058
         },
         {
             "key": "Total number of distinct condition keys",
-            "value": 1361
+            "value": 1403
         }
     ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aws-iam-data",
-  "version": "0.0.514",
+  "version": "0.0.516",
   "description": "Provides AWS IAM data gathered from the official AWS IAM docs as a convenient npm package that can be used in other OSS projects.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",