aws-iam-data 0.0.535 → 0.0.537

package/dist/data/json/changelog.json

@@ -1,4 +1,37 @@
 [
+    {
+        "dateOfChange": "2026-03-12",
+        "addedServices": [],
+        "removedServices": [],
+        "addedActions": {
+            "Amazon DataZone": [
+                "datazone:GetNotebookExport",
+                "datazone:StartNotebookExport",
+                "datazone:StartNotebookImport"
+            ]
+        },
+        "removedActions": {}
+    },
+    {
+        "dateOfChange": "2026-03-10",
+        "addedServices": [],
+        "removedServices": [],
+        "addedActions": {
+            "Amazon Cognito User Pools": [
+                "cognito-idp:AddUserPoolClientSecret",
+                "cognito-idp:DeleteUserPoolClientSecret",
+                "cognito-idp:ListUserPoolClientSecrets"
+            ],
+            "Amazon OpenSearch Service": [
+                "es:RollbackElasticsearchServiceSoftwareUpdate",
+                "es:RollbackServiceSoftwareUpdate"
+            ],
+            "AWS Resource Access Manager (RAM)": [
+                "ram:ListSourceAssociations"
+            ]
+        },
+        "removedActions": {}
+    },
     {
         "dateOfChange": "2026-03-07",
         "addedServices": [],

package/dist/data/json/iam.json

@@ -50886,7 +50886,7 @@
             {
                 "name": "meeting",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/chime/latest/APIReference/API_Meeting.html",
-                "arnPattern": "arn:${Partition}:chime::${AccountId}:meeting/${MeetingId}",
+                "arnPattern": "arn:${Partition}:chime:${Region}:${AccountId}:meeting/${MeetingId}",
                 "conditionKeys": [
                     "aws:ResourceTag/${TagKey}"
                 ]
@@ -84169,6 +84169,21 @@
                     }
                 ]
             },
+            {
+                "name": "AddUserPoolClientSecret",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AddUserPoolClientSecret.html",
+                "permissionOnly": false,
+                "description": "Grants permission to add a new secret to a confidential client",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "userpool",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "AdminAddUserToGroup",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminAddUserToGroup.html",
@@ -84929,6 +84944,21 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteUserPoolClientSecret",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteUserPoolClientSecret.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a secret from a list of secrets associated with a client",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "userpool",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DeleteUserPoolDomain",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteUserPoolDomain.html",
@@ -85469,6 +85499,21 @@
                     }
                 ]
             },
+            {
+                "name": "ListUserPoolClientSecrets",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListUserPoolClientSecrets.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list all secrets associated with a client",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "userpool",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListUserPoolClients",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListUserPoolClients.html",
@@ -116942,6 +116987,21 @@
                     }
                 ]
             },
+            {
+                "name": "GetNotebookExport",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetNotebookExport.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get notebook exports",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetProject",
                 "apiReferenceUrl": "${APIReferenceDocPage}API_GetProject.html",
@@ -118142,6 +118202,36 @@
                     }
                 ]
             },
+            {
+                "name": "StartNotebookExport",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_StartNotebookExport.html",
+                "permissionOnly": false,
+                "description": "Grants permission to export notebooks",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "StartNotebookImport",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_StartNotebookImport.html",
+                "permissionOnly": false,
+                "description": "Grants permission to import notebooks",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "StopMetadataGenerationRun",
                 "apiReferenceUrl": "${APIReferenceDocPage}API_StopMetadataGenerationRun.html",
@@ -303266,6 +303356,36 @@
                     }
                 ]
             },
+            {
+                "name": "RollbackElasticsearchServiceSoftwareUpdate",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_RollbackServiceSoftwareUpdate.html",
+                "permissionOnly": false,
+                "description": "Grants permission to rollback a service software update of an elasticsearch domain to its previous version",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "domain",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RollbackServiceSoftwareUpdate",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_RollbackServiceSoftwareUpdate.html",
+                "permissionOnly": false,
+                "description": "Grants permission to rollback a service software update of an opensearch domain to its previous version",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "domain",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "StartDomainMaintenance",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_StartDomainMaintenance.html",
@@ -346532,7 +346652,8 @@
                             "ram:AllowsExternalPrincipals",
                             "ram:Principal",
                             "ram:RequestedResourceType",
-                            "ram:ResourceArn"
+                            "ram:ResourceArn",
+                            "ram:RetainSharingOnAccountLeaveOrganization"
                         ],
                         "dependentActions": []
                     }
@@ -346629,7 +346750,8 @@
                             "ram:ResourceArn",
                             "ram:RequestedAllowsExternalPrincipals",
                             "ram:Principal",
-                            "ram:AllowsExternalPrincipals"
+                            "ram:AllowsExternalPrincipals",
+                            "ram:RetainSharingOnAccountLeaveOrganization"
                         ],
                         "dependentActions": []
                     }
@@ -346704,7 +346826,8 @@
                             "aws:ResourceTag/${TagKey}",
                             "ram:ResourceTag/${TagKey}",
                             "ram:ResourceShareName",
-                            "ram:AllowsExternalPrincipals"
+                            "ram:AllowsExternalPrincipals",
+                            "ram:RetainSharingOnAccountLeaveOrganization"
                         ],
                         "dependentActions": []
                     }
@@ -346733,7 +346856,8 @@
                             "ram:AllowsExternalPrincipals",
                             "ram:Principal",
                             "ram:RequestedResourceType",
-                            "ram:ResourceArn"
+                            "ram:ResourceArn",
+                            "ram:RetainSharingOnAccountLeaveOrganization"
                         ],
                         "dependentActions": []
                     }
@@ -347009,7 +347133,8 @@
                         "conditionKeys": [
                             "aws:ResourceTag/${TagKey}",
                             "ram:ResourceShareName",
-                            "ram:AllowsExternalPrincipals"
+                            "ram:AllowsExternalPrincipals",
+                            "ram:RetainSharingOnAccountLeaveOrganization"
                         ],
                         "dependentActions": []
                     }
@@ -347045,6 +347170,21 @@
                     }
                 ]
             },
+            {
+                "name": "ListSourceAssociations",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/ram/latest/APIReference/API_ListSourceAssociations.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list source associations for resource shares",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "PromotePermissionCreatedFromPolicy",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/ram/latest/APIReference/API_PromotePermissionCreatedFromPolicy.html",
@@ -347242,7 +347382,8 @@
                             "ram:ResourceTag/${TagKey}",
                             "ram:ResourceShareName",
                             "ram:AllowsExternalPrincipals",
-                            "ram:RequestedAllowsExternalPrincipals"
+                            "ram:RequestedAllowsExternalPrincipals",
+                            "ram:RetainSharingOnAccountLeaveOrganization"
                         ],
                         "dependentActions": []
                     }
@@ -347361,6 +347502,12 @@
                 "description": "Filters access by the tags associated with the resource",
                 "type": "String"
             },
+            {
+                "name": "ram:RetainSharingOnAccountLeaveOrganization",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/ram/latest/userguide/iam-policies.html#iam-policies-condition",
+                "description": "Filters access by RetainSharingOnAccountLeaveOrganization value within ResourceShareConfiguration that is set on resource share",
+                "type": "Bool"
+            },
             {
                 "name": "ram:ShareOwnerAccountId",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/ram/latest/userguide/iam-policies.html#iam-policies-condition",

package/dist/data/json/metadata.json

@@ -6444,9 +6444,10 @@
             "name": "Amazon Cognito User Pools",
             "servicePrefix": "cognito-idp",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html",
-            "actionsCount": 118,
+            "actionsCount": 121,
             "actions": [
                 "AddCustomAttributes",
+                "AddUserPoolClientSecret",
                 "AdminAddUserToGroup",
                 "AdminConfirmSignUp",
                 "AdminCreateUser",
@@ -6497,6 +6498,7 @@
                 "DeleteUserAttributes",
                 "DeleteUserPool",
                 "DeleteUserPoolClient",
+                "DeleteUserPoolClientSecret",
                 "DeleteUserPoolDomain",
                 "DescribeIdentityProvider",
                 "DescribeManagedLoginBranding",
@@ -6533,6 +6535,7 @@
                 "ListTagsForResource",
                 "ListTerms",
                 "ListUserImportJobs",
+                "ListUserPoolClientSecrets",
                 "ListUserPoolClients",
                 "ListUserPools",
                 "ListUsers",
@@ -8472,7 +8475,7 @@
             "name": "Amazon DataZone",
             "servicePrefix": "datazone",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazondatazone.html",
-            "actionsCount": 226,
+            "actionsCount": 229,
             "actions": [
                 "AcceptPredictions",
                 "AcceptSubscriptionRequest",
@@ -8589,6 +8592,7 @@
                 "GetMetadataGenerationRun",
                 "GetNotebook",
                 "GetNotebookCompute",
+                "GetNotebookExport",
                 "GetProject",
                 "GetProjectProfile",
                 "GetRule",
@@ -8669,6 +8673,8 @@
                 "StartDataSourceRun",
                 "StartMetadataGenerationRun",
                 "StartNotebookCompute",
+                "StartNotebookExport",
+                "StartNotebookImport",
                 "StopMetadataGenerationRun",
                 "StopNotebookCompute",
                 "TagResource",
@@ -21323,7 +21329,7 @@
             "name": "Amazon OpenSearch Service",
             "servicePrefix": "es",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonopensearchservice.html",
-            "actionsCount": 114,
+            "actionsCount": 116,
             "actions": [
                 "AcceptInboundConnection",
                 "AcceptInboundCrossClusterSearchConnection",
@@ -21424,6 +21430,8 @@
                 "RejectInboundCrossClusterSearchConnection",
                 "RemoveTags",
                 "RevokeVpcEndpointAccess",
+                "RollbackElasticsearchServiceSoftwareUpdate",
+                "RollbackServiceSoftwareUpdate",
                 "StartDomainMaintenance",
                 "StartElasticsearchServiceSoftwareUpdate",
                 "StartServiceSoftwareUpdate",
@@ -24523,7 +24531,7 @@
             "name": "AWS Resource Access Manager (RAM)",
             "servicePrefix": "ram",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsresourceaccessmanagerram.html",
-            "actionsCount": 34,
+            "actionsCount": 35,
             "actions": [
                 "AcceptResourceShareInvitation",
                 "AssociateResourceShare",
@@ -24551,6 +24559,7 @@
                 "ListResourceSharePermissions",
                 "ListResourceTypes",
                 "ListResources",
+                "ListSourceAssociations",
                 "PromotePermissionCreatedFromPolicy",
                 "PromoteResourceShareCreatedFromPolicy",
                 "RejectResourceShareInvitation",
@@ -24567,7 +24576,7 @@
                 "permission",
                 "customer-managed-permission"
             ],
-            "conditionKeysCount": 13,
+            "conditionKeysCount": 14,
             "conditionKeys": [
                 "aws:RequestTag/${TagKey}",
                 "aws:ResourceTag/${TagKey}",
@@ -24581,6 +24590,7 @@
                 "ram:ResourceArn",
                 "ram:ResourceShareName",
                 "ram:ResourceTag/${TagKey}",
+                "ram:RetainSharingOnAccountLeaveOrganization",
                 "ram:ShareOwnerAccountId"
             ]
         },

package/dist/data/json/reports.json

@@ -2,15 +2,15 @@
     "Actions by type": [
         {
             "key": "Write Actions",
-            "value": 11271
+            "value": 11277
         },
         {
             "key": "Read Actions",
-            "value": 5453
+            "value": 5454
         },
         {
             "key": "List Actions",
-            "value": 3410
+            "value": 3412
         },
         {
             "key": "Permissions Actions",
@@ -161,12 +161,12 @@
             "value": 97
         },
         {
-            "key": "directory - arn:${Partition}:ds:${Region}:${Account}:directory/${DirectoryId}",
-            "value": 93
+            "key": "userpool - arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/${UserPoolId}",
+            "value": 95
         },
         {
-            "key": "userpool - arn:${Partition}:cognito-idp:${Region}:${Account}:userpool/${UserPoolId}",
-            "value": 92
+            "key": "directory - arn:${Partition}:ds:${Region}:${Account}:directory/${DirectoryId}",
+            "value": 93
         },
         {
             "key": "bot - arn:${Partition}:lex:${Region}:${Account}:bot/${BotId}",
@@ -262,7 +262,7 @@
         },
         {
             "key": "Amazon DataZone",
-            "value": 226
+            "value": 229
         },
         {
             "key": "AWS Identity and Access Management (IAM)",
@@ -414,7 +414,7 @@
         },
         {
             "key": "Total number of distinct condition keys",
-            "value": 1367
+            "value": 1368
         }
     ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aws-iam-data",
-  "version": "0.0.535",
+  "version": "0.0.537",
   "description": "Provides AWS IAM data gathered from the official AWS IAM docs as a convenient npm package that can be used in other OSS projects.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",