aws-iam-data 0.0.591 → 0.0.593

package/dist/data/json/changelog.json

@@ -1,4 +1,41 @@
 [
+    {
+        "dateOfChange": "2026-06-10",
+        "addedServices": [],
+        "removedServices": [],
+        "addedActions": {
+            "Amazon Bedrock": [
+                "bedrock:GetAccountDataRetention",
+                "bedrock:PutAccountDataRetention"
+            ],
+            "Amazon Bedrock Powered by AWS Mantle": [
+                "bedrock-mantle:GetAccountDataRetention",
+                "bedrock-mantle:PutAccountDataRetention"
+            ]
+        },
+        "removedActions": {}
+    },
+    {
+        "dateOfChange": "2026-06-09",
+        "addedServices": [],
+        "removedServices": [],
+        "addedActions": {
+            "Amazon EC2": [
+                "ec2:AcceptTransitGatewayClientVpnAttachment",
+                "ec2:CreateCapacityReservationCancellationQuote",
+                "ec2:DeleteTransitGatewayClientVpnAttachment",
+                "ec2:DescribeCapacityReservationCancellationQuotes",
+                "ec2:DescribeIpamPoolAllocations",
+                "ec2:GetCapacityManagerMonitoredTagKeys",
+                "ec2:GetManagedResourceVisibility",
+                "ec2:ModifyIpamPoolAllocation",
+                "ec2:ModifyManagedResourceVisibility",
+                "ec2:RejectTransitGatewayClientVpnAttachment",
+                "ec2:UpdateCapacityManagerMonitoredTagKeys"
+            ]
+        },
+        "removedActions": {}
+    },
     {
         "dateOfChange": "2026-06-06",
         "addedServices": [],

package/dist/data/json/iam.json

@@ -33623,6 +33623,21 @@
                     }
                 ]
             },
+            {
+                "name": "GetAccountDataRetention",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetAccountDataRetention.html",
+                "permissionOnly": false,
+                "description": "Returns the account-wide data retention mode for Amazon Bedrock",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetAgent",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetAgent.html",
@@ -35866,6 +35881,23 @@
                     }
                 ]
             },
+            {
+                "name": "PutAccountDataRetention",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_PutAccountDataRetention.html",
+                "permissionOnly": false,
+                "description": "Sets the account-wide data retention mode for Amazon Bedrock",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "bedrock:DataRetentionMode"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "PutEnforcedGuardrailConfiguration",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_PutEnforcedGuardrailConfiguration.html",
@@ -37306,6 +37338,12 @@
                 "description": "Filters access by the Short-term or Long-term bearer tokens",
                 "type": "String"
             },
+            {
+                "name": "bedrock:DataRetentionMode",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html#amazonbedrock-policy-keys",
+                "description": "Filters access by the specified Data Retention Mode",
+                "type": "String"
+            },
             {
                 "name": "bedrock:GuardrailIdentifier",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html#amazonbedrock-policy-keys",
@@ -42116,7 +42154,8 @@
                         "required": false,
                         "conditionKeys": [
                             "aws:RequestTag/${TagKey}",
-                            "aws:TagKeys"
+                            "aws:TagKeys",
+                            "bedrock-mantle:DataRetentionMode"
                         ],
                         "dependentActions": []
                     }
@@ -42285,6 +42324,21 @@
                     }
                 ]
             },
+            {
+                "name": "GetAccountDataRetention",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/#welcome",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve the account-wide data retention setting",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetCustomizedModel",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/#welcome",
@@ -42564,6 +42618,23 @@
                     }
                 ]
             },
+            {
+                "name": "PutAccountDataRetention",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/#welcome",
+                "permissionOnly": false,
+                "description": "Grants permission to set the account-wide data retention setting",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "bedrock-mantle:DataRetentionMode"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "TagResource",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/#welcome",
@@ -42661,6 +42732,14 @@
                             "aws:ResourceTag/${TagKey}"
                         ],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "bedrock-mantle:DataRetentionMode"
+                        ],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -42756,6 +42835,12 @@
                 "description": "Filters access by the ARN of the customized model being associated or referenced in cross-resource operations",
                 "type": "String"
             },
+            {
+                "name": "bedrock-mantle:DataRetentionMode",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockmantle.html#amazonbedrockmantle-policy-keys",
+                "description": "Filters access by the data retention mode being set on a project or account",
+                "type": "String"
+            },
             {
                 "name": "bedrock-mantle:Files",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockmantle.html#amazonbedrockmantle-policy-keys",
@@ -136508,6 +136593,33 @@
                     }
                 ]
             },
+            {
+                "name": "AcceptTransitGatewayClientVpnAttachment",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_AcceptTransitGatewayClientVpnAttachment.html",
+                "permissionOnly": false,
+                "description": "Grants permission to accept a transit gateway attachment request for a Client VPN endpoint",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "transit-gateway-attachment",
+                        "required": true,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}",
+                            "ec2:ResourceTag/${TagKey}",
+                            "ec2:transitGatewayAttachmentId"
+                        ],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "ec2:Region"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "AcceptTransitGatewayMulticastDomainAssociations",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_AcceptTransitGatewayMulticastDomainAssociations.html",
@@ -136777,6 +136889,17 @@
                             "aws:ResourceTag/${TagKey}",
                             "ec2:ResourceTag/${TagKey}"
                         ],
+                        "dependentActions": [
+                            "ec2:CreateTags"
+                        ]
+                    },
+                    {
+                        "resourceType": "ipam-pool-allocation",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
                         "dependentActions": []
                     },
                     {
@@ -137067,7 +137190,7 @@
                     },
                     {
                         "resourceType": "subnet",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [
                             "aws:ResourceTag/${TagKey}",
                             "ec2:AvailabilityZoneId",
@@ -138247,6 +138370,15 @@
                         ],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "capacity-reservation-cancellation-quote",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}",
+                            "ec2:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "",
                         "required": false,
@@ -138768,6 +138900,34 @@
                     }
                 ]
             },
+            {
+                "name": "CreateCapacityReservationCancellationQuote",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateCapacityReservationCancellationQuote.html",
+                "permissionOnly": false,
+                "description": "Grants permission to generate a cancellation quote for a future-dated Capacity Reservation",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "capacity-reservation-cancellation-quote",
+                        "required": true,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": [
+                            "ec2:CreateTags"
+                        ]
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "ec2:Region"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "CreateCapacityReservationFleet",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateCapacityReservationFleet.html",
@@ -138872,6 +139032,16 @@
                         ],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "transit-gateway",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}",
+                            "ec2:ResourceTag/${TagKey}",
+                            "ec2:transitGatewayId"
+                        ],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "vpc",
                         "required": false,
@@ -138916,7 +139086,7 @@
                     },
                     {
                         "resourceType": "subnet",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [
                             "aws:ResourceTag/${TagKey}",
                             "ec2:AvailabilityZoneId",
@@ -141721,6 +141891,17 @@
                         ],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "capacity-reservation-cancellation-quote",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:ResourceTag/${TagKey}",
+                            "aws:TagKeys",
+                            "ec2:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "capacity-reservation-fleet",
                         "required": false,
@@ -142075,6 +142256,17 @@
                         ],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "ipam-pool-allocation",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:ResourceTag/${TagKey}",
+                            "aws:TagKeys",
+                            "ec2:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "ipam-prefix-list-resolver",
                         "required": false,
@@ -146138,6 +146330,17 @@
                         ],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "capacity-reservation-cancellation-quote",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:ResourceTag/${TagKey}",
+                            "aws:TagKeys",
+                            "ec2:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "capacity-reservation-fleet",
                         "required": false,
@@ -146446,6 +146649,17 @@
                         ],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "ipam-pool-allocation",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:ResourceTag/${TagKey}",
+                            "aws:TagKeys",
+                            "ec2:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "ipam-prefix-list-resolver",
                         "required": false,
@@ -147378,6 +147592,33 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteTransitGatewayClientVpnAttachment",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DeleteTransitGatewayClientVpnAttachment.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a transit gateway attachment for a Client VPN endpoint",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "transit-gateway-attachment",
+                        "required": true,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}",
+                            "ec2:ResourceTag/${TagKey}",
+                            "ec2:transitGatewayAttachmentId"
+                        ],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "ec2:Region"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DeleteTransitGatewayConnect",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DeleteTransitGatewayConnect.html",
@@ -148681,6 +148922,23 @@
                     }
                 ]
             },
+            {
+                "name": "DescribeCapacityReservationCancellationQuotes",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeCapacityReservationCancellationQuotes.html",
+                "permissionOnly": false,
+                "description": "Grants permission to describe one or more Capacity Reservation cancellation quotes",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "ec2:Region"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DescribeCapacityReservationFleets",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeCapacityReservationFleets.html",
@@ -149774,6 +150032,23 @@
                     }
                 ]
             },
+            {
+                "name": "DescribeIpamPoolAllocations",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeIpamPoolAllocations.html",
+                "permissionOnly": false,
+                "description": "Grants permission to describe IPAM pool allocations",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "ec2:Region"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DescribeIpamPools",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeIpamPools.html",
@@ -154370,6 +154645,23 @@
                     }
                 ]
             },
+            {
+                "name": "GetCapacityManagerMonitoredTagKeys",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetCapacityManagerMonitoredTagKeys.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve the tag keys that are currently being monitored by EC2 Capacity Manager",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "ec2:Region"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetCapacityReservationUsage",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetCapacityReservationUsage.html",
@@ -155267,6 +155559,23 @@
                     }
                 ]
             },
+            {
+                "name": "GetManagedResourceVisibility",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetManagedResourceVisibility.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve the managed resource visibility configuration for the account",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "ec2:Region"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetNetworkInsightsAccessScopeAnalysisFindings",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetNetworkInsightsAccessScopeAnalysisFindings.html",
@@ -156580,6 +156889,16 @@
                         ],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "transit-gateway",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}",
+                            "ec2:ResourceTag/${TagKey}",
+                            "ec2:transitGatewayId"
+                        ],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "vpc",
                         "required": false,
@@ -157482,6 +157801,34 @@
                     }
                 ]
             },
+            {
+                "name": "ModifyIpamPoolAllocation",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyIpamPoolAllocation.html",
+                "permissionOnly": false,
+                "description": "Grants permission to modify the description of an IPAM pool allocation",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "ipam-pool-allocation",
+                        "required": true,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}",
+                            "ec2:Attribute",
+                            "ec2:Attribute/${AttributeName}",
+                            "ec2:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "ec2:Region"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ModifyIpamPrefixListResolver",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyIpamPrefixListResolver.html",
@@ -157748,6 +158095,23 @@
                     }
                 ]
             },
+            {
+                "name": "ModifyManagedResourceVisibility",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyManagedResourceVisibility.html",
+                "permissionOnly": false,
+                "description": "Grants permission to modify the managed resource visibility configuration for the account",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "ec2:Region"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ModifyNetworkInterfaceAttribute",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyNetworkInterfaceAttribute.html",
@@ -159984,6 +160348,33 @@
                     }
                 ]
             },
+            {
+                "name": "RejectTransitGatewayClientVpnAttachment",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RejectTransitGatewayClientVpnAttachment.html",
+                "permissionOnly": false,
+                "description": "Grants permission to reject a transit gateway attachment request for a Client VPN endpoint",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "transit-gateway-attachment",
+                        "required": true,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}",
+                            "ec2:ResourceTag/${TagKey}",
+                            "ec2:transitGatewayAttachmentId"
+                        ],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "ec2:Region"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "RejectTransitGatewayMulticastDomainAssociations",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RejectTransitGatewayMulticastDomainAssociations.html",
@@ -162136,6 +162527,23 @@
                     }
                 ]
             },
+            {
+                "name": "UpdateCapacityManagerMonitoredTagKeys",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_UpdateCapacityManagerMonitoredTagKeys.html",
+                "permissionOnly": false,
+                "description": "Grants permission to activate or deactivate tag keys for monitoring by EC2 Capacity Manager",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "ec2:Region"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "UpdateCapacityManagerOrganizationsAccess",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_UpdateCapacityManagerOrganizationsAccess.html",
@@ -162315,6 +162723,20 @@
                     "ec2:ResourceTag/${TagKey}"
                 ]
             },
+            {
+                "name": "capacity-reservation-cancellation-quote",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format",
+                "arnPattern": "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-cancellation-quote/${CapacityReservationCancellationQuoteId}",
+                "conditionKeys": [
+                    "aws:RequestTag/${TagKey}",
+                    "aws:ResourceTag/${TagKey}",
+                    "aws:TagKeys",
+                    "ec2:Attribute",
+                    "ec2:Attribute/${AttributeName}",
+                    "ec2:Region",
+                    "ec2:ResourceTag/${TagKey}"
+                ]
+            },
             {
                 "name": "capacity-reservation-fleet",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format",
@@ -162741,6 +163163,20 @@
                     "ec2:ResourceTag/${TagKey}"
                 ]
             },
+            {
+                "name": "ipam-pool-allocation",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format",
+                "arnPattern": "arn:${Partition}:ec2:${Region}:${Account}:ipam-pool-allocation/${IpamPoolAllocationId}",
+                "conditionKeys": [
+                    "aws:RequestTag/${TagKey}",
+                    "aws:ResourceTag/${TagKey}",
+                    "aws:TagKeys",
+                    "ec2:Attribute",
+                    "ec2:Attribute/${AttributeName}",
+                    "ec2:Region",
+                    "ec2:ResourceTag/${TagKey}"
+                ]
+            },
             {
                 "name": "ipam-pool",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format",
@@ -198470,7 +198906,13 @@
                 "resourceTypes": [
                     {
                         "resourceType": "event-bus",
-                        "required": true,
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "event-busv2",
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -198480,7 +198922,9 @@
                         "conditionKeys": [
                             "events:detail-type",
                             "events:source",
-                            "events:eventBusInvocation"
+                            "events:eventBusInvocation",
+                            "events:SystemMetadata/EventGroupId",
+                            "events:ResourceArn"
                         ],
                         "dependentActions": []
                     }
@@ -214640,6 +215084,24 @@
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "catalog",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "database",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "table",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -216304,6 +216766,24 @@
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "catalog",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "database",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "table",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -217680,6 +218160,24 @@
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "catalog",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "database",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "table",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -239235,6 +239733,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "Connector",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "Filter",
                         "required": false,
@@ -239278,6 +239782,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "Connector",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "Filter",
                         "required": false,
@@ -239502,6 +240012,14 @@
                 "conditionKeys": [
                     "aws:ResourceTag/${TagKey}"
                 ]
+            },
+            {
+                "name": "Connector",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html",
+                "arnPattern": "arn:${Partition}:inspector2:${Region}:${Account}:connector/${ConnectorId}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             }
         ],
         "conditionKeys": [
@@ -392170,7 +392688,7 @@
                 "apiReferenceUrl": "https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_BatchGetSecretValue.html",
                 "permissionOnly": false,
                 "description": "Grants permission to retrieve and decrypt a list of secrets",
-                "accessLevel": "List",
+                "accessLevel": "Read",
                 "resourceTypes": [
                     {
                         "resourceType": "",

package/dist/data/json/metadata.json

@@ -2477,7 +2477,7 @@
             "name": "Amazon Bedrock",
             "servicePrefix": "bedrock",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html",
-            "actionsCount": 245,
+            "actionsCount": 247,
             "actions": [
                 "AllowVendedLogDeliveryForResource",
                 "ApplyGuardrail",
@@ -2562,6 +2562,7 @@
                 "EndSession",
                 "ExportAutomatedReasoningPolicyVersion",
                 "GenerateQuery",
+                "GetAccountDataRetention",
                 "GetAgent",
                 "GetAgentActionGroup",
                 "GetAgentAlias",
@@ -2680,6 +2681,7 @@
                 "OptimizePrompt",
                 "PrepareAgent",
                 "PrepareFlow",
+                "PutAccountDataRetention",
                 "PutEnforcedGuardrailConfiguration",
                 "PutFoundationModelEntitlement",
                 "PutInvocationStep",
@@ -2766,12 +2768,13 @@
                 "session",
                 "custom-model-deployment"
             ],
-            "conditionKeysCount": 10,
+            "conditionKeysCount": 11,
             "conditionKeys": [
                 "aws:RequestTag/${TagKey}",
                 "aws:ResourceTag/${TagKey}",
                 "aws:TagKeys",
                 "bedrock:BearerTokenType",
+                "bedrock:DataRetentionMode",
                 "bedrock:GuardrailIdentifier",
                 "bedrock:InferenceProfileArn",
                 "bedrock:InlineAgentName",
@@ -3057,7 +3060,7 @@
             "name": "Amazon Bedrock Powered by AWS Mantle",
             "servicePrefix": "bedrock-mantle",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockpoweredbyawsmantle.html",
-            "actionsCount": 35,
+            "actionsCount": 37,
             "actions": [
                 "ArchiveProject",
                 "AssociateCustomizedModel",
@@ -3075,6 +3078,7 @@
                 "DeleteInference",
                 "DeleteReservation",
                 "DisassociateCustomizedModel",
+                "GetAccountDataRetention",
                 "GetCustomizedModel",
                 "GetFile",
                 "GetFineTuningJob",
@@ -3090,6 +3094,7 @@
                 "ListProjects",
                 "ListReservations",
                 "ListTagsForResource",
+                "PutAccountDataRetention",
                 "TagResource",
                 "UntagResource",
                 "UpdateProject",
@@ -3101,13 +3106,14 @@
                 "customized-model",
                 "reservation"
             ],
-            "conditionKeysCount": 11,
+            "conditionKeysCount": 12,
             "conditionKeys": [
                 "aws:RequestTag/${TagKey}",
                 "aws:ResourceTag/${TagKey}",
                 "aws:TagKeys",
                 "bedrock-mantle:BearerTokenType",
                 "bedrock-mantle:CustomizedModelArn",
+                "bedrock-mantle:DataRetentionMode",
                 "bedrock-mantle:Files",
                 "bedrock-mantle:FineTuningJob",
                 "bedrock-mantle:Model",
@@ -9933,11 +9939,12 @@
             "name": "Amazon EC2",
             "servicePrefix": "ec2",
             "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonec2.html",
-            "actionsCount": 780,
+            "actionsCount": 791,
             "actions": [
                 "AcceptAddressTransfer",
                 "AcceptCapacityReservationBillingOwnership",
                 "AcceptReservedInstancesExchangeQuote",
+                "AcceptTransitGatewayClientVpnAttachment",
                 "AcceptTransitGatewayMulticastDomainAssociations",
                 "AcceptTransitGatewayPeeringAttachment",
                 "AcceptTransitGatewayVpcAttachment",
@@ -10002,6 +10009,7 @@
                 "CreateCapacityManagerDataExport",
                 "CreateCapacityReservation",
                 "CreateCapacityReservationBySplitting",
+                "CreateCapacityReservationCancellationQuote",
                 "CreateCapacityReservationFleet",
                 "CreateCarrierGateway",
                 "CreateClientVpnEndpoint",
@@ -10174,6 +10182,7 @@
                 "DeleteTrafficMirrorSession",
                 "DeleteTrafficMirrorTarget",
                 "DeleteTransitGateway",
+                "DeleteTransitGatewayClientVpnAttachment",
                 "DeleteTransitGatewayConnect",
                 "DeleteTransitGatewayConnectPeer",
                 "DeleteTransitGatewayMeteringPolicy",
@@ -10226,6 +10235,7 @@
                 "DescribeCapacityBlocks",
                 "DescribeCapacityManagerDataExports",
                 "DescribeCapacityReservationBillingRequests",
+                "DescribeCapacityReservationCancellationQuotes",
                 "DescribeCapacityReservationFleets",
                 "DescribeCapacityReservationTopology",
                 "DescribeCapacityReservations",
@@ -10283,6 +10293,7 @@
                 "DescribeIpamByoasn",
                 "DescribeIpamExternalResourceVerificationTokens",
                 "DescribeIpamPolicies",
+                "DescribeIpamPoolAllocations",
                 "DescribeIpamPools",
                 "DescribeIpamPrefixListResolverTargets",
                 "DescribeIpamPrefixListResolvers",
@@ -10481,6 +10492,7 @@
                 "GetCapacityManagerAttributes",
                 "GetCapacityManagerMetricData",
                 "GetCapacityManagerMetricDimensions",
+                "GetCapacityManagerMonitoredTagKeys",
                 "GetCapacityReservationUsage",
                 "GetCoipPoolUsage",
                 "GetConsoleOutput",
@@ -10514,6 +10526,7 @@
                 "GetLaunchTemplateData",
                 "GetManagedPrefixListAssociations",
                 "GetManagedPrefixListEntries",
+                "GetManagedResourceVisibility",
                 "GetNetworkInsightsAccessScopeAnalysisFindings",
                 "GetNetworkInsightsAccessScopeContent",
                 "GetPasswordData",
@@ -10584,6 +10597,7 @@
                 "ModifyIpam",
                 "ModifyIpamPolicyAllocationRules",
                 "ModifyIpamPool",
+                "ModifyIpamPoolAllocation",
                 "ModifyIpamPrefixListResolver",
                 "ModifyIpamPrefixListResolverTarget",
                 "ModifyIpamResourceCidr",
@@ -10592,6 +10606,7 @@
                 "ModifyLaunchTemplate",
                 "ModifyLocalGatewayRoute",
                 "ModifyManagedPrefixList",
+                "ModifyManagedResourceVisibility",
                 "ModifyNetworkInterfaceAttribute",
                 "ModifyOdbNetworkPeering",
                 "ModifyPrivateDnsNameOptions",
@@ -10655,6 +10670,7 @@
                 "RegisterTransitGatewayMulticastGroupMembers",
                 "RegisterTransitGatewayMulticastGroupSources",
                 "RejectCapacityReservationBillingOwnership",
+                "RejectTransitGatewayClientVpnAttachment",
                 "RejectTransitGatewayMulticastDomainAssociations",
                 "RejectTransitGatewayPeeringAttachment",
                 "RejectTransitGatewayVpcAttachment",
@@ -10710,17 +10726,19 @@
                 "UnassignPrivateNatGatewayAddress",
                 "UnlockSnapshot",
                 "UnmonitorInstances",
+                "UpdateCapacityManagerMonitoredTagKeys",
                 "UpdateCapacityManagerOrganizationsAccess",
                 "UpdateInterruptibleCapacityReservationAllocation",
                 "UpdateSecurityGroupRuleDescriptionsEgress",
                 "UpdateSecurityGroupRuleDescriptionsIngress",
                 "WithdrawByoipCidr"
             ],
-            "resourceTypesCount": 110,
+            "resourceTypesCount": 112,
             "resourceTypes": [
                 "elastic-ip",
                 "capacity-block",
                 "capacity-manager-data-export",
+                "capacity-reservation-cancellation-quote",
                 "capacity-reservation-fleet",
                 "capacity-reservation",
                 "carrier-gateway",
@@ -10749,6 +10767,7 @@
                 "ipam-external-resource-verification-token",
                 "ipam",
                 "ipam-policy",
+                "ipam-pool-allocation",
                 "ipam-pool",
                 "ipam-prefix-list-resolver",
                 "ipam-prefix-list-resolver-target",
@@ -16269,13 +16288,14 @@
                 "UpdateOrgEc2DeepInspectionConfiguration",
                 "UpdateOrganizationConfiguration"
             ],
-            "resourceTypesCount": 5,
+            "resourceTypesCount": 6,
             "resourceTypes": [
                 "Filter",
                 "Finding",
                 "CIS Scan Configuration",
                 "Code Security Scan Configuration",
-                "Code Security Integration"
+                "Code Security Integration",
+                "Connector"
             ],
             "conditionKeysCount": 3,
             "conditionKeys": [

package/dist/data/json/reports.json

@@ -2,15 +2,15 @@
     "Actions by type": [
         {
             "key": "Write Actions",
-            "value": 11625
+            "value": 11634
         },
         {
             "key": "Read Actions",
-            "value": 5622
+            "value": 5625
         },
         {
             "key": "List Actions",
-            "value": 3541
+            "value": 3544
         },
         {
             "key": "Permissions Actions",
@@ -230,7 +230,7 @@
     "Services with most actions": [
         {
             "key": "Amazon EC2",
-            "value": 780
+            "value": 791
         },
         {
             "key": "Amazon SageMaker",
@@ -258,7 +258,7 @@
         },
         {
             "key": "Amazon Bedrock",
-            "value": 245
+            "value": 247
         },
         {
             "key": "Amazon DataZone",
@@ -410,11 +410,11 @@
         },
         {
             "key": "Total number of distinct resource ARNS",
-            "value": 2120
+            "value": 2123
         },
         {
             "key": "Total number of distinct condition keys",
-            "value": 1424
+            "value": 1428
         }
     ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aws-iam-data",
-  "version": "0.0.591",
+  "version": "0.0.593",
   "description": "Provides AWS IAM data gathered from the official AWS IAM docs as a convenient npm package that can be used in other OSS projects.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",