iamdata 0.1.202505111__py3-none-any.whl → 0.1.202512121__py3-none-any.whl

iamdata/data/conditionKeys/xray.json

@@ -13,5 +13,20 @@
     "key": "aws:TagKeys",
     "description": "Filters access by the tag keys that are passed in the request",
     "type": "ArrayOfString"
+  },
+  "logs:loggeneratingresourcearns": {
+    "key": "logs:LogGeneratingResourceArns",
+    "description": "Filters access by LogGeneratingResourceArn in the request",
+    "type": "ArrayOfARN"
+  },
+  "xray:resourcepolicyname": {
+    "key": "xray:ResourcePolicyName",
+    "description": "Filters access by PolicyName in the request",
+    "type": "String"
+  },
+  "xray:tracesegmentdestination": {
+    "key": "xray:TraceSegmentDestination",
+    "description": "Filters access by TraceSegmentDestination type in the request",
+    "type": "String"
   }
 }

iamdata/data/conditionPatterns.json

@@ -0,0 +1,146 @@
+{
+  "account": {
+    "account:AccountResourceOrgTags/.+?": "account:AccountResourceOrgTags/${TagKey}"
+  },
+  "codebuild": {
+    "codebuild:environment.environmentVariables/.+?.value": "codebuild:environment.environmentVariables/${name}.value",
+    "codebuild:fileSystemLocations/.+?.location": "codebuild:fileSystemLocations/${identifier}.location",
+    "codebuild:fileSystemLocations/.+?.type": "codebuild:fileSystemLocations/${identifier}.type",
+    "codebuild:secondaryArtifacts/.+?.bucketOwnerAccess": "codebuild:secondaryArtifacts/${artifactIdentifier}.bucketOwnerAccess",
+    "codebuild:secondaryArtifacts/.+?.encryptionDisabled": "codebuild:secondaryArtifacts/${artifactIdentifier}.encryptionDisabled",
+    "codebuild:secondaryArtifacts/.+?.location": "codebuild:secondaryArtifacts/${artifactIdentifier}.location",
+    "codebuild:secondarySources/.+?.auth.resource": "codebuild:secondarySources/${sourceIdentifier}.auth.resource",
+    "codebuild:secondarySources/.+?.auth.type": "codebuild:secondarySources/${sourceIdentifier}.auth.type",
+    "codebuild:secondarySources/.+?.buildStatusConfig.context": "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.context",
+    "codebuild:secondarySources/.+?.buildStatusConfig.targetUrl": "codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.targetUrl",
+    "codebuild:secondarySources/.+?.buildspec": "codebuild:secondarySources/${sourceIdentifier}.buildspec",
+    "codebuild:secondarySources/.+?.insecureSsl": "codebuild:secondarySources/${sourceIdentifier}.insecureSsl",
+    "codebuild:secondarySources/.+?.location": "codebuild:secondarySources/${sourceIdentifier}.location"
+  },
+  "iam": {
+    "iam:ResourceTag/.+?": "iam:ResourceTag/${TagKey}"
+  },
+  "datapipeline": {
+    "datapipeline:Tag/.+?": "datapipeline:Tag/${TagKey}"
+  },
+  "dms": {
+    "dms:assessment-run-tag/.+?": "dms:assessment-run-tag/${TagKey}",
+    "dms:cert-tag/.+?": "dms:cert-tag/${TagKey}",
+    "dms:data-migration-tag/.+?": "dms:data-migration-tag/${TagKey}",
+    "dms:data-provider-tag/.+?": "dms:data-provider-tag/${TagKey}",
+    "dms:endpoint-tag/.+?": "dms:endpoint-tag/${TagKey}",
+    "dms:es-tag/.+?": "dms:es-tag/${TagKey}",
+    "dms:individual-assessment-tag/.+?": "dms:individual-assessment-tag/${TagKey}",
+    "dms:instance-profile-tag/.+?": "dms:instance-profile-tag/${TagKey}",
+    "dms:migration-project-tag/.+?": "dms:migration-project-tag/${TagKey}",
+    "dms:rep-tag/.+?": "dms:rep-tag/${TagKey}",
+    "dms:replication-config-tag/.+?": "dms:replication-config-tag/${TagKey}",
+    "dms:req-tag/.+?": "dms:req-tag/${TagKey}",
+    "dms:subgrp-tag/.+?": "dms:subgrp-tag/${TagKey}",
+    "dms:task-tag/.+?": "dms:task-tag/${TagKey}"
+  },
+  "elasticloadbalancing": {
+    "elasticloadbalancing:ResourceTag/.+?": "elasticloadbalancing:ResourceTag/${TagKey}"
+  },
+  "iotanalytics": {
+    "iotanalytics:ResourceTag/.+?": "iotanalytics:ResourceTag/${TagKey}"
+  },
+  "iot": {
+    "iot:CommandExecutionParameterBoolean/.+?": "iot:CommandExecutionParameterBoolean/${CommandParameterName}",
+    "iot:CommandExecutionParameterNumber/.+?": "iot:CommandExecutionParameterNumber/${CommandParameterName}",
+    "iot:CommandExecutionParameterString/.+?": "iot:CommandExecutionParameterString/${CommandParameterName}"
+  },
+  "kms": {
+    "kms:EncryptionContext:.+?": "kms:EncryptionContext:${EncryptionContextKey}"
+  },
+  "license-manager": {
+    "license-manager:ResourceTag/.+?": "license-manager:ResourceTag/${TagKey}"
+  },
+  "ram": {
+    "ram:ResourceTag/.+?": "ram:ResourceTag/${TagKey}"
+  },
+  "securityhub": {
+    "securityhub:ASFFSyntaxPath/.+?": "securityhub:ASFFSyntaxPath/${ASFFSyntaxPath}",
+    "securityhub:OCSFSyntaxPath/.+?": "securityhub:OCSFSyntaxPath/${OCSFSyntaxPath}"
+  },
+  "sts": {
+    "sts:RequestContext/.+?": "sts:RequestContext/${ContextKey}"
+  },
+  "ssm": {
+    "ssm:resourceTag/.+?": "ssm:resourceTag/${TagKey}"
+  },
+  "connect": {
+    "connect:PrimaryAttribute/.+?": "connect:PrimaryAttribute/${PrimaryAttribute}",
+    "connect:SearchTag/.+?": "connect:SearchTag/${TagKey}"
+  },
+  "autoscaling": {
+    "autoscaling:ResourceTag/.+?": "autoscaling:ResourceTag/${TagKey}"
+  },
+  "imagebuilder": {
+    "imagebuilder:CreatedResourceTag/.+?": "imagebuilder:CreatedResourceTag/${TagKey}"
+  },
+  "ec2": {
+    "ec2:ResourceTag/.+?": "ec2:ResourceTag/${TagKey}",
+    "ec2:Attribute/.+?": "ec2:Attribute/${AttributeName}"
+  },
+  "ecr-public": {
+    "ecr-public:ResourceTag/.+?": "ecr-public:ResourceTag/${TagKey}"
+  },
+  "ecr": {
+    "ecr:ResourceTag/.+?": "ecr:ResourceTag/${TagKey}"
+  },
+  "ecs": {
+    "ecs:ResourceTag/.+?": "ecs:ResourceTag/${TagKey}"
+  },
+  "eks": {
+    "eks:loggingType/.+?": "eks:loggingType/${type}"
+  },
+  "elasticmapreduce": {
+    "elasticmapreduce:RequestTag/.+?": "elasticmapreduce:RequestTag/${TagKey}",
+    "elasticmapreduce:ResourceTag/.+?": "elasticmapreduce:ResourceTag/${TagKey}"
+  },
+  "rds": {
+    "rds:cluster-pg-tag/.+?": "rds:cluster-pg-tag/${TagKey}",
+    "rds:cluster-snapshot-tag/.+?": "rds:cluster-snapshot-tag/${TagKey}",
+    "rds:cluster-tag/.+?": "rds:cluster-tag/${TagKey}",
+    "rds:db-tag/.+?": "rds:db-tag/${TagKey}",
+    "rds:es-tag/.+?": "rds:es-tag/${TagKey}",
+    "rds:og-tag/.+?": "rds:og-tag/${TagKey}",
+    "rds:pg-tag/.+?": "rds:pg-tag/${TagKey}",
+    "rds:req-tag/.+?": "rds:req-tag/${TagKey}",
+    "rds:ri-tag/.+?": "rds:ri-tag/${TagKey}",
+    "rds:secgrp-tag/.+?": "rds:secgrp-tag/${TagKey}",
+    "rds:snapshot-tag/.+?": "rds:snapshot-tag/${TagKey}",
+    "rds:subgrp-tag/.+?": "rds:subgrp-tag/${TagKey}"
+  },
+  "s3express": {
+    "s3express:AccessPointTag/.+?": "s3express:AccessPointTag/${TagKey}",
+    "s3express:BucketTag/.+?": "s3express:BucketTag/${TagKey}"
+  },
+  "s3tables": {
+    "s3tables:TableBucketTag/.+?": "s3tables:TableBucketTag/${TagKey}"
+  },
+  "s3vectors": {
+    "s3vectors:VectorBucketTag/.+?": "s3vectors:VectorBucketTag/${TagKey}"
+  },
+  "s3-outposts": {
+    "s3-outposts:ExistingObjectTag/.+?": "s3-outposts:ExistingObjectTag/<key>",
+    "s3-outposts:RequestObjectTag/.+?": "s3-outposts:RequestObjectTag/<key>"
+  },
+  "s3": {
+    "s3:AccessPointTag/.+?": "s3:AccessPointTag/${TagKey}",
+    "s3:BucketTag/.+?": "s3:BucketTag/${TagKey}",
+    "s3:ExistingObjectTag/.+?": "s3:ExistingObjectTag/<key>",
+    "s3:RequestObjectTag/.+?": "s3:RequestObjectTag/<key>"
+  },
+  "sagemaker": {
+    "sagemaker:ResourceTag/.+?": "sagemaker:ResourceTag/${TagKey}",
+    "sagemaker:CurrentCustomerMetadataProperties/.+?": "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}",
+    "sagemaker:CustomerMetadataProperties/.+?": "sagemaker:CustomerMetadataProperties/${MetadataKey}",
+    "sagemaker:SearchVisibilityCondition/.+?": "sagemaker:SearchVisibilityCondition/${FilterKey}"
+  },
+  "vpc-lattice-svcs": {
+    "vpc-lattice-svcs:RequestHeader/.+?": "vpc-lattice-svcs:RequestHeader/${HeaderName}",
+    "vpc-lattice-svcs:RequestQueryString/.+?": "vpc-lattice-svcs:RequestQueryString/${QueryStringKey}"
+  }
+}

iamdata/data/metadata.json

@@ -1,4 +1,4 @@
 {
-  "version": "0.1.202505111",
-  "updatedAt": "2025-05-11T04:47:52.922Z"
+  "version": "0.1.202512121",
+  "updatedAt": "2025-12-12T04:56:31.146Z"
 }

iamdata/data/resourceTypes/aco-automation.json

@@ -0,0 +1,9 @@
+{
+  "automationrule": {
+    "key": "AutomationRule",
+    "arn": "arn:${Partition}:compute-optimizer::${Account}:automation-rule/${RuleId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

iamdata/data/resourceTypes/action-recommendations.json

@@ -0,0 +1 @@
+{}

iamdata/data/resourceTypes/aidevops.json

@@ -0,0 +1,24 @@
+{
+  "agentspaceresource": {
+    "key": "AgentSpaceResource",
+    "arn": "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/${AgentSpaceId}",
+    "conditionKeys": [
+      "aidevops:AgentSpaceResourceAgentSpaceId"
+    ]
+  },
+  "associationresource": {
+    "key": "AssociationResource",
+    "arn": "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/${AgentSpaceId}/associations/${AssociationId}",
+    "conditionKeys": [
+      "aidevops:AssociationResourceAgentSpaceId",
+      "aidevops:AssociationResourceAssociationId"
+    ]
+  },
+  "serviceresource": {
+    "key": "ServiceResource",
+    "arn": "arn:${Partition}:aidevops:${Region}:${Account}:service/${ServiceId}",
+    "conditionKeys": [
+      "aidevops:ServiceResourceServiceId"
+    ]
+  }
+}

iamdata/data/resourceTypes/airflow-serverless.json

@@ -0,0 +1,9 @@
+{
+  "workflow": {
+    "key": "Workflow",
+    "arn": "arn:${Partition}:airflow-serverless:${Region}:${Account}:workflow/${WorkflowId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

iamdata/data/resourceTypes/apigateway.json

@@ -211,6 +211,15 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "routingrule": {
+    "key": "RoutingRule",
+    "arn": "arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/${DomainName}/routingrules/${RoutingRuleId}",
+    "conditionKeys": [
+      "apigateway:Resource/ConditionBasePaths",
+      "apigateway:Resource/Priority",
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "stage": {
     "key": "Stage",
     "arn": "arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/stages/${StageName}",
@@ -330,6 +339,7 @@
       "apigateway:Resource/EndpointType",
       "apigateway:Resource/MtlsTrustStoreUri",
       "apigateway:Resource/MtlsTrustStoreVersion",
+      "apigateway:Resource/RoutingMode",
       "apigateway:Resource/SecurityPolicy",
       "aws:ResourceTag/${TagKey}"
     ]
@@ -342,6 +352,7 @@
       "apigateway:Request/MtlsTrustStoreUri",
       "apigateway:Request/MtlsTrustStoreVersion",
       "apigateway:Request/SecurityPolicy",
+      "apigateway:Resource/RoutingMode",
       "aws:ResourceTag/${TagKey}"
     ]
   },
@@ -410,6 +421,7 @@
     "conditionKeys": [
       "apigateway:Request/EndpointType",
       "apigateway:Resource/EndpointType",
+      "apigateway:Resource/RoutingMode",
       "aws:ResourceTag/${TagKey}"
     ]
   },
@@ -452,6 +464,7 @@
       "apigateway:Request/DisableExecuteApiEndpoint",
       "apigateway:Request/EndpointType",
       "apigateway:Request/RouteAuthorizationType",
+      "apigateway:Request/SecurityPolicy",
       "apigateway:Resource/ApiKeyRequired",
       "apigateway:Resource/ApiName",
       "apigateway:Resource/AuthorizerType",
@@ -459,6 +472,7 @@
       "apigateway:Resource/DisableExecuteApiEndpoint",
       "apigateway:Resource/EndpointType",
       "apigateway:Resource/RouteAuthorizationType",
+      "apigateway:Resource/SecurityPolicy",
       "aws:ResourceTag/${TagKey}"
     ]
   },
@@ -473,6 +487,7 @@
       "apigateway:Request/DisableExecuteApiEndpoint",
       "apigateway:Request/EndpointType",
       "apigateway:Request/RouteAuthorizationType",
+      "apigateway:Request/SecurityPolicy",
       "aws:ResourceTag/${TagKey}"
     ]
   },

iamdata/data/resourceTypes/aps.json

@@ -17,6 +17,15 @@
       "aws:TagKeys"
     ]
   },
+  "anomalydetector": {
+    "key": "anomalydetector",
+    "arn": "arn:${Partition}:aps:${Region}:${Account}:anomalydetector/${WorkspaceId}/${AnomalyDetectorId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ]
+  },
   "scraper": {
     "key": "scraper",
     "arn": "arn:${Partition}:aps:${Region}:${Account}:scraper/${ScraperId}",

iamdata/data/resourceTypes/arc-region-switch.json

@@ -0,0 +1,9 @@
+{
+  "plan": {
+    "key": "plan",
+    "arn": "arn:${Partition}:arc-region-switch:${Region}:${Account}:plan/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

iamdata/data/resourceTypes/artifact.json

@@ -1,8 +1,4 @@
 {
-  "report-package": {
-    "key": "report-package",
-    "arn": "arn:${Partition}:artifact:::report-package/*"
-  },
   "customer-agreement": {
     "key": "customer-agreement",
     "arn": "arn:${Partition}:artifact::${Account}:customer-agreement/*"
@@ -13,6 +9,10 @@
   },
   "report": {
     "key": "report",
-    "arn": "arn:${Partition}:artifact:${Region}::report/${ReportId}:${Version}"
+    "arn": "arn:${Partition}:artifact:${Region}::report/${ReportId}:${Version}",
+    "conditionKeys": [
+      "artifact:ReportCategory",
+      "artifact:ReportSeries"
+    ]
   }
 }

iamdata/data/resourceTypes/athena.json

@@ -19,5 +19,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "session": {
+    "key": "session",
+    "arn": "arn:${Partition}:athena:${Region}:${Account}:workgroup/${WorkGroupName}/session/${SessionId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

iamdata/data/resourceTypes/auditmanager.json

@@ -1,11 +1,17 @@
 {
   "assessment": {
     "key": "assessment",
-    "arn": "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/${AssessmentId}"
+    "arn": "arn:${Partition}:auditmanager:${Region}:${Account}:assessment/${AssessmentId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "assessmentframework": {
     "key": "assessmentFramework",
-    "arn": "arn:${Partition}:auditmanager:${Region}:${Account}:assessmentFramework/${AssessmentFrameworkId}"
+    "arn": "arn:${Partition}:auditmanager:${Region}:${Account}:assessmentFramework/${AssessmentFrameworkId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "assessmentcontrolset": {
     "key": "assessmentControlSet",

iamdata/data/resourceTypes/aws-mcp.json

@@ -0,0 +1 @@
+{}

iamdata/data/resourceTypes/backup.json

@@ -47,5 +47,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "tieringconfiguration": {
+    "key": "tieringConfiguration",
+    "arn": "arn:${Partition}:backup:${Region}:${Account}:tiering-configuration:${TieringConfigurationName}-${TieringConfigurationId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

iamdata/data/resourceTypes/batch.json

@@ -38,6 +38,20 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "service-environment": {
+    "key": "service-environment",
+    "arn": "arn:${Partition}:batch:${Region}:${Account}:service-environment/${ServiceEnvironmentName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "service-job": {
+    "key": "service-job",
+    "arn": "arn:${Partition}:batch:${Region}:${Account}:service-job/${JobId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "consumable-resource": {
     "key": "consumable-resource",
     "arn": "arn:${Partition}:batch:${Region}:${Account}:consumable-resource/${ConsumableResourceName}",

iamdata/data/resourceTypes/bcm-dashboards.json

@@ -0,0 +1 @@
+{}

iamdata/data/resourceTypes/bcm-data-exports.json

@@ -9,5 +9,12 @@
   "table": {
     "key": "table",
     "arn": "arn:${Partition}:bcm-data-exports:${Region}:${Account}:table/${Identifier}"
+  },
+  "billingview": {
+    "key": "billingview",
+    "arn": "arn:${Partition}:billing::${Account}:billingview/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

iamdata/data/resourceTypes/bcm-recommended-actions.json

@@ -0,0 +1 @@
+{}

iamdata/data/resourceTypes/bedrock-agentcore.json

@@ -0,0 +1,107 @@
+{
+  "evaluator": {
+    "key": "evaluator",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:evaluator/${EvaluatorId}"
+  },
+  "online-evaluation-config": {
+    "key": "online-evaluation-config",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:online-evaluation-config/${OnlineEvaluationConfigId}"
+  },
+  "memory": {
+    "key": "memory",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/${MemoryId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "gateway": {
+    "key": "gateway",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/${GatewayId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "workload-identity": {
+    "key": "workload-identity",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}/workload-identity/${WorkloadIdentityName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "oauth2credentialprovider": {
+    "key": "oauth2credentialprovider",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/oauth2credentialprovider/${Name}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "apikeycredentialprovider": {
+    "key": "apikeycredentialprovider",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/apikeycredentialprovider/${Name}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "runtime": {
+    "key": "runtime",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "runtime-endpoint": {
+    "key": "runtime-endpoint",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}/runtime-endpoint/${Name}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "code-interpreter-custom": {
+    "key": "code-interpreter-custom",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/${CodeInterpreterId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "code-interpreter": {
+    "key": "code-interpreter",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:aws:code-interpreter/${CodeInterpreterId}"
+  },
+  "browser-custom": {
+    "key": "browser-custom",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/${BrowserId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "browser": {
+    "key": "browser",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:aws:browser/${BrowserId}"
+  },
+  "workload-identity-directory": {
+    "key": "workload-identity-directory",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "token-vault": {
+    "key": "token-vault",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "policy-engine": {
+    "key": "policy-engine",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}"
+  },
+  "policy": {
+    "key": "policy",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}/policy/${PolicyId}"
+  },
+  "policy-generation": {
+    "key": "policy-generation",
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}/policy-generation/${PolicyGenerationId}"
+  }
+}

iamdata/data/resourceTypes/bedrock-mantle.json

@@ -0,0 +1,6 @@
+{
+  "project": {
+    "key": "project",
+    "arn": "arn:${Partition}:bedrock-mantle:${Region}:${Account}:project/${ResourceId}"
+  }
+}

iamdata/data/resourceTypes/bedrock.json

@@ -3,6 +3,10 @@
     "key": "foundation-model",
     "arn": "arn:${Partition}:bedrock:${Region}::foundation-model/${ResourceId}"
   },
+  "system-tool": {
+    "key": "system-tool",
+    "arn": "arn:${Partition}:bedrock::${Account}:system-tool/${ResourceId}"
+  },
   "async-invoke": {
     "key": "async-invoke",
     "arn": "arn:${Partition}:bedrock:${Region}:${Account}:async-invoke/${ResourceId}",
@@ -99,6 +103,24 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "guardrail-profile": {
+    "key": "guardrail-profile",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:guardrail-profile/${ResourceId}"
+  },
+  "automated-reasoning-policy": {
+    "key": "automated-reasoning-policy",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/${AutomatedReasoningPolicyId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "automated-reasoning-policy-version": {
+    "key": "automated-reasoning-policy-version",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/${AutomatedReasoningPolicyId}:${AutomatedReasoningPolicyVersion}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "flow": {
     "key": "flow",
     "arn": "arn:${Partition}:bedrock:${Region}:${Account}:flow/${FlowId}",
@@ -113,6 +135,10 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "flow-execution": {
+    "key": "flow-execution",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:flow/${FlowId}/alias/${FlowAliasId}/execution/${FlowExecutionId}"
+  },
   "model-copy-job": {
     "key": "model-copy-job",
     "arn": "arn:${Partition}:bedrock:${Region}:${Account}:model-copy-job/${ResourceId}",
@@ -154,15 +180,24 @@
   },
   "data-automation-project": {
     "key": "data-automation-project",
-    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-project/${ProjectId}"
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-project/${ProjectId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "blueprint": {
     "key": "blueprint",
-    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:blueprint/${BlueprintId}"
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:blueprint/${BlueprintId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "data-automation-invocation-job": {
     "key": "data-automation-invocation-job",
-    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-invocation/${JobId}"
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:data-automation-invocation/${JobId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "data-automation-profile": {
     "key": "data-automation-profile",
@@ -174,5 +209,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "custom-model-deployment": {
+    "key": "custom-model-deployment",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

iamdata/data/resourceTypes/braket.json

@@ -12,5 +12,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "spending-limit": {
+    "key": "spending-limit",
+    "arn": "arn:${Partition}:braket:${Region}:${Account}:spending-limit/${RandomId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

iamdata/data/resourceTypes/cassandra.json

@@ -12,5 +12,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "stream": {
+    "key": "stream",
+    "arn": "arn:${Partition}:cassandra:${Region}:${Account}:/keyspace/${KeyspaceName}/table/${TableName}/stream/${StreamLabel}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }