iamdata 0.1.202506181__py3-none-any.whl → 0.1.202506201__py3-none-any.whl

iamdata/data/actions/acm.json

@@ -49,7 +49,7 @@
   },
   "exportcertificate": {
     "name": "ExportCertificate",
-    "description": "Grants permission to export a private certificate issued by a private certificate authority (CA) for use anywhere",
+    "description": "Grants permission to export an exportable certificate for use anywhere",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -59,7 +59,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "acm:DomainNames"
+    ],
     "dependentActions": []
   },
   "getaccountconfiguration": {
@@ -179,7 +181,8 @@
       "acm:CertificateTransparencyLogging",
       "acm:ValidationMethod",
       "acm:KeyAlgorithm",
-      "acm:CertificateAuthority"
+      "acm:CertificateAuthority",
+      "acm:Export"
     ],
     "dependentActions": []
   },
@@ -198,6 +201,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "revokecertificate": {
+    "name": "RevokeCertificate",
+    "description": "Grants permission to revoke an exportable certificate",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "certificate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "acm:DomainNames"
+    ],
+    "dependentActions": []
+  },
   "updatecertificateoptions": {
     "name": "UpdateCertificateOptions",
     "description": "Grants permission to update a certificate configuration. Use this to specify whether to opt in to or out of certificate transparency logging",

iamdata/data/actions/aiops.json

@@ -32,8 +32,13 @@
     ],
     "conditionKeys": [],
     "dependentActions": [
+      "cloudwatch:DescribeAlarmHistory",
+      "cloudwatch:DescribeAlarms",
+      "cloudwatch:GetInsightRuleReport",
+      "cloudwatch:GetMetricData",
       "kms:Decrypt",
       "kms:GenerateDataKey",
+      "logs:GetQueryResults",
       "sts:SetContext"
     ]
   },
@@ -44,7 +49,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": [
       "aiops:TagResource",

iamdata/data/actions/backup.json

@@ -1,4 +1,21 @@
 {
+  "associatebackupvaultmpaapprovalteam": {
+    "name": "AssociateBackupVaultMpaApprovalTeam",
+    "description": "Grants permission to associate an MPA approval team with a backup vault",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "backupVault",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "backup:MpaApprovalTeamArn"
+    ],
+    "dependentActions": []
+  },
   "cancellegalhold": {
     "name": "CancelLegalHold",
     "description": "Grants permission to cancel a legal hold",
@@ -179,6 +196,24 @@
     ],
     "dependentActions": []
   },
+  "createrestoreaccessbackupvault": {
+    "name": "CreateRestoreAccessBackupVault",
+    "description": "Grants permission to create a restore access backup vault",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "backupVault",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createrestoretestingplan": {
     "name": "CreateRestoreTestingPlan",
     "description": "Grants permission to create a new restore testing plan",
@@ -511,6 +546,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disassociatebackupvaultmpaapprovalteam": {
+    "name": "DisassociateBackupVaultMpaApprovalTeam",
+    "description": "Grants permission to disassociate an MPA approval team from a backup vault",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "backupVault",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disassociaterecoverypoint": {
     "name": "DisassociateRecoveryPoint",
     "description": "Grants permission to disassociate a recovery point from a backup vault",
@@ -936,6 +986,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listrestoreaccessbackupvaults": {
+    "name": "ListRestoreAccessBackupVaults",
+    "description": "Grants permission to list a restore access backup vaults associated with a backup vault",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "backupVault",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listrestorejobsummaries": {
     "name": "ListRestoreJobSummaries",
     "description": "Grants permission to list restore job summaries",
@@ -1107,6 +1172,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "revokerestoreaccessbackupvault": {
+    "name": "RevokeRestoreAccessBackupVault",
+    "description": "Grants permission to revoke a restore access backup vault",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "backupVault",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "searchrecoverypoint": {
     "name": "SearchRecoveryPoint",
     "isPermissionOnly": true,

iamdata/data/actions/connect-campaigns.json

@@ -160,6 +160,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getinstancecommunicationlimits": {
+    "name": "GetInstanceCommunicationLimits",
+    "description": "Grants permission to get the communication limits configuration of an Amazon Connect instance",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getinstanceonboardingjobstatus": {
     "name": "GetInstanceOnboardingJobStatus",
     "description": "Grants permission to get onboarding job status for an Amazon Connect instance",
@@ -241,6 +249,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putinstancecommunicationlimits": {
+    "name": "PutInstanceCommunicationLimits",
+    "description": "Grants permission to put the communication limits configuration of an Amazon Connect instance",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putoutboundrequestbatch": {
     "name": "PutOutboundRequestBatch",
     "description": "Grants permission to create dial requests for the specified campaign",

iamdata/data/actions/lex.json

@@ -235,6 +235,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createresourcepolicystatement": {
+    "name": "CreateResourcePolicyStatement",
+    "description": "Grants permission to create a new resource policy statement for a Lex resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "bot alias",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createslot": {
     "name": "CreateSlot",
     "description": "Grants permission to create a new slot in an intent",
@@ -485,6 +506,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteresourcepolicystatement": {
+    "name": "DeleteResourcePolicyStatement",
+    "description": "Grants permission to delete an existing resource policy statement for a Lex resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bot",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "bot alias",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletesession": {
     "name": "DeleteSession",
     "description": "Removes session information for a specified bot, alias, and user ID",

iamdata/data/actions/mpa.json

@@ -0,0 +1,313 @@
+{
+  "cancelsession": {
+    "name": "CancelSession",
+    "description": "Grants permission to cancel an approval session",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "mpa:RequestedOperation",
+      "mpa:ProtectedResourceAccount"
+    ],
+    "dependentActions": []
+  },
+  "createapprovalteam": {
+    "name": "CreateApprovalTeam",
+    "description": "Grants permission to create an approval team",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "approval-team",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createidentitysource": {
+    "name": "CreateIdentitySource",
+    "description": "Grants permission to create an identity source",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "identity-source",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deleteidentitysource": {
+    "name": "DeleteIdentitySource",
+    "description": "Grants permission to delete an identity source",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "identity-source",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "deleteinactiveapprovalteamversion": {
+    "name": "DeleteInactiveApprovalTeamVersion",
+    "description": "Grants permission to delete an inactive approval team",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "approval-team",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "deleteresourcepolicy": {
+    "name": "DeleteResourcePolicy",
+    "isPermissionOnly": true,
+    "description": "Grants permission to delete a resource policy",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getapprovalteam": {
+    "name": "GetApprovalTeam",
+    "description": "Grants permission to retrieve details for an approval team",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "approval-team",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "getidentitysource": {
+    "name": "GetIdentitySource",
+    "description": "Grants permission to retrieve details for an identity source",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "identity-source",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "getpolicyversion": {
+    "name": "GetPolicyVersion",
+    "description": "Grants permission to retrieve details for a policy",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getresourcepolicy": {
+    "name": "GetResourcePolicy",
+    "description": "Grants permission to retrieve details for a specific resource",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getsession": {
+    "name": "GetSession",
+    "description": "Grants permission to retrieve details for an approval session",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "mpa:RequestedOperation",
+      "mpa:ProtectedResourceAccount"
+    ],
+    "dependentActions": []
+  },
+  "listapprovalteams": {
+    "name": "ListApprovalTeams",
+    "description": "Grants permission to list approval teams",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listidentitysources": {
+    "name": "ListIdentitySources",
+    "description": "Grants permission to list identity sources",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listpolicies": {
+    "name": "ListPolicies",
+    "description": "Grants permission to list policies",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listpolicyversions": {
+    "name": "ListPolicyVersions",
+    "description": "Grants permission to list the versions for policies",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listresourcepolicies": {
+    "name": "ListResourcePolicies",
+    "description": "Grants permission to list policies for a resource",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listsessions": {
+    "name": "ListSessions",
+    "description": "Grants permission to list approval sessions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list tags for a resource",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putresourcepolicy": {
+    "name": "PutResourcePolicy",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create or update policies for a resource",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startactiveapprovalteamdeletion": {
+    "name": "StartActiveApprovalTeamDeletion",
+    "description": "Grants permission to start the deletion process for an active approval team",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "approval-team",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "startsession": {
+    "name": "StartSession",
+    "isPermissionOnly": true,
+    "description": "Grants permission to start an approval session",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "mpa:RequestedOperation",
+      "mpa:ProtectedResourceAccount"
+    ],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to tag a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to untag a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updateapprovalteam": {
+    "name": "UpdateApprovalTeam",
+    "description": "Grants permission to update approval team",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "approval-team",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  }
+}

iamdata/data/actions/profile.json

@@ -284,6 +284,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createuploadjob": {
+    "name": "CreateUploadJob",
+    "description": "Grants permission to create an upload job in the domain",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletecalculatedattributedefinition": {
     "name": "DeleteCalculatedAttributeDefinition",
     "description": "Grants permission to delete a calculated attribute definition in the domain",
@@ -855,6 +870,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getuploadjob": {
+    "name": "GetUploadJob",
+    "description": "Grants permission to get details of an upload job in the domain",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getuploadjobpath": {
+    "name": "GetUploadJobPath",
+    "description": "Grants permission to get a pre-signed URL to upload file for an upload job",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getworkflow": {
     "name": "GetWorkflow",
     "description": "Grants permission to get workflow details in a domain",
@@ -1139,17 +1184,50 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "event-triggers",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "integrations",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "layouts",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "object-types",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "segment-definitions",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listuploadjobs": {
+    "name": "ListUploadJobs",
+    "description": "Grants permission to list all upload jobs in the domain",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -1269,6 +1347,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startuploadjob": {
+    "name": "StartUploadJob",
+    "description": "Grants permission to start an upload job in the domain",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopuploadjob": {
+    "name": "StopUploadJob",
+    "description": "Grants permission to stop an upload job in the domain",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to adds tags to a resource",
@@ -1292,17 +1400,35 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "event-triggers",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "integrations",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "layouts",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "object-types",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "segment-definitions",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1334,17 +1460,35 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "event-triggers",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "integrations",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "layouts",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "object-types",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "segment-definitions",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [

iamdata/data/actions/support.json

@@ -230,5 +230,13 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "updateinteraction": {
+    "name": "UpdateInteraction",
+    "description": "Grants permission to update a specific interaction to receive personalized troubleshooting assistance for account and technical issues",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

iamdata/data/conditionKeys/acm.json

@@ -14,6 +14,11 @@
     "description": "Filters access by domainNames in the request. This key can be used to restrict which domains can be in certificate requests",
     "type": "ArrayOfString"
   },
+  "acm:export": {
+    "key": "acm:Export",
+    "description": "Filters access by the export option in the request. Can be used to restrict creation of certificates that can be exported",
+    "type": "String"
+  },
   "acm:keyalgorithm": {
     "key": "acm:KeyAlgorithm",
     "description": "Filters access by keyAlgorithm in the request",

iamdata/data/conditionKeys/backup.json

@@ -26,7 +26,7 @@
   },
   "backup:copytargets": {
     "key": "backup:CopyTargets",
-    "description": "Filters access by the ARN of an backup vault",
+    "description": "Filters access by the ARN of a backup vault",
     "type": "ArrayOfARN"
   },
   "backup:frameworkarns": {
@@ -48,5 +48,10 @@
     "key": "backup:MinRetentionDays",
     "description": "Filters access by the value of the MinRetentionDays parameter",
     "type": "Numeric"
+  },
+  "backup:mpaapprovalteamarn": {
+    "key": "backup:MpaApprovalTeamArn",
+    "description": "Filters access by the MPA Approval Team ARN of a backup vault",
+    "type": "ARN"
   }
 }

iamdata/data/conditionKeys/mpa.json

@@ -0,0 +1,27 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair that is allowed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair of a resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by a list of tag keys that are allowed in the request",
+    "type": "ArrayOfString"
+  },
+  "mpa:protectedresourceaccount": {
+    "key": "mpa:ProtectedResourceAccount",
+    "description": "Filters access by the account that owns the resource that is the target of the operation that requires approval",
+    "type": "String"
+  },
+  "mpa:requestedoperation": {
+    "key": "mpa:RequestedOperation",
+    "description": "Filters access by a requested operation that requires team approval before it can be executed",
+    "type": "String"
+  }
+}

iamdata/data/metadata.json

@@ -1,4 +1,4 @@
 {
-  "version": "0.1.202506181",
-  "updatedAt": "2025-06-18T04:53:43.340Z"
+  "version": "0.1.202506201",
+  "updatedAt": "2025-06-20T04:53:07.362Z"
 }

iamdata/data/resourceTypes/mpa.json

@@ -0,0 +1,23 @@
+{
+  "approval-team": {
+    "key": "approval-team",
+    "arn": "arn:${Partition}:mpa:${Region}:${Account}:approval-team/${Arn}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "identity-source": {
+    "key": "identity-source",
+    "arn": "arn:${Partition}:mpa:${Region}:${Account}:identity-source/${IdentitySourceArn}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "session": {
+    "key": "session",
+    "arn": "arn:${Partition}:mpa:${Region}:${Account}:session/${SessionArn}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

iamdata/data/serviceNames.json

@@ -256,6 +256,7 @@
   "mobileanalytics": "Amazon Mobile Analytics",
   "mobiletargeting": "Amazon Pinpoint",
   "monitron": "Amazon Monitron",
+  "mpa": "Multi-party approval",
   "mq": "Amazon MQ",
   "neptune-db": "Amazon Neptune",
   "neptune-graph": "Amazon Neptune Analytics",

iamdata/data/services.json

@@ -256,6 +256,7 @@
   "mobileanalytics",
   "mobiletargeting",
   "monitron",
+  "mpa",
   "mq",
   "neptune-db",
   "neptune-graph",

{iamdata-0.1.202506181.dist-info → iamdata-0.1.202506201.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iamdata
-Version: 0.1.202506181
+Version: 0.1.202506201
 Summary: IAM data for AWS actions, resources, and conditions based on IAM policy documents. Checked for updates daily.
 Project-URL: Homepage, https://github.com/cloud-copilot/iam-data-python
 Project-URL: Issues, https://github.com/cloud-copilot/iam-data-python/issues

{iamdata-0.1.202506181.dist-info → iamdata-0.1.202506201.dist-info}/RECORD

@@ -4,17 +4,17 @@ iamdata/conditions.py,sha256=JmNyw26ux0SsUGRLctBpVZNi-A88rK9HwMy_e76vxTk,1127
 iamdata/resources.py,sha256=q55U8l74HnjnkHp1-i2-rZCe-IsZpZWmfGeMvQjf4xo,1166
 iamdata/services.py,sha256=trEYZQnUb_vwEN-L29RY-vJFnEXDGrpppVpAeQazjgw,689
 iamdata/utils.py,sha256=mwNqfgNO51L33Ag_K9VxaP85J6XRoZrN7rKz6Q_DJQk,398
-iamdata/data/metadata.json,sha256=uM8iXlZqJknbOPMYCb2sxvNhGPMQFvL0OsWuTKI6TS8,76
-iamdata/data/serviceNames.json,sha256=xAFLAVjVb3aLSeOIhusjnqvvx5pH2HMiiDzptEZ7g44,18422
-iamdata/data/services.json,sha256=4yNtRfU79GjLQhKkAkwmJe9NwhdxvTRCNNrkw8_q8JM,7164
+iamdata/data/metadata.json,sha256=ABXlQ1_y8y58yfHnshOXNO7vDApmbjwq0xk5WbOudM4,76
+iamdata/data/serviceNames.json,sha256=mFNp3JQL3wXYEyRGWud5DgOBVppMVtFKg5lVhArcShQ,18455
+iamdata/data/services.json,sha256=tOMPn_2c_zODHhAM0eS0-SG3Uh91-tH-eBR_SMs5vcI,7173
 iamdata/data/actions/a2c.json,sha256=gdQce9wi9GkwSZX-kLklr_Pp3H6haDhGjpWHqWhYLW8,1032
 iamdata/data/actions/a4b.json,sha256=9La5kB7t8g1LE0uLDVuOMPeSgY5YBTZRt88XxdlSDFg,35617
 iamdata/data/actions/access-analyzer.json,sha256=wOZB3FD4LQtMnnznZFnEO8936QIvEhxTuATXo0Nefbw,12622
 iamdata/data/actions/account.json,sha256=gtyJ3HeDEb-efKOzamlHCXPVvM0BG8a7n7Bb3VqYkn8,7819
 iamdata/data/actions/acm-pca.json,sha256=_XtYyJtyfGPiXgK8PtSWzNPXph23VotzCGMp8ZWg9Wg,10119
-iamdata/data/actions/acm.json,sha256=qPbui83raaa7pufM-5tv7rSuEOcB9cDyycyB76lMsVA,6067
+iamdata/data/actions/acm.json,sha256=nDtI7PGahr1fQfAyvEvK1B0GJq8EiAmwJvC9yIMd7DE,6484
 iamdata/data/actions/activate.json,sha256=DF-tzN0a3j6sBimcATSh6EH6lFsmoDAe4QodPZ9WdaM,1893
-iamdata/data/actions/aiops.json,sha256=NLJjV7VTKpu2QEiQ5fpEqUfrtAay0OZCIcXLk_Nbo34,10705
+iamdata/data/actions/aiops.json,sha256=1_cFRMkuafBaFhK9d5tysiSvb4XfamsR1ocNHpDcPrY,10921
 iamdata/data/actions/airflow.json,sha256=_vR379Y3V_5MSinPJReSi0GQrEPHGFty3c1TU_td9Vo,5034
 iamdata/data/actions/amplify.json,sha256=P7nVW339-sVsELNEgWchmbtBLvkJddH0vRymEqSoEUM,16794
 iamdata/data/actions/amplifybackend.json,sha256=JnMeolg-gIMo4LdolZHrxXnpV_CMN35KhDGYUFcyFF8,18149
@@ -53,7 +53,7 @@ iamdata/data/actions/b2bi.json,sha256=L_lu8OzkJdZw319ZGET4HRPUwye1K2gLWV7z56uduG
 iamdata/data/actions/backup-gateway.json,sha256=cJhxxuUTF6zVSNDqo4C2D-43OTrx9KslArWPFX6Z4O8,10576
 iamdata/data/actions/backup-search.json,sha256=g37ZjdEazsIVYO7lSh08gAblAvc-cuyigmeDAsGXtrE,4808
 iamdata/data/actions/backup-storage.json,sha256=xIVT3cQuIpi4IxizgNWGhgX5rOzuKM6zg0mkoYuaanI,4064
-iamdata/data/actions/backup.json,sha256=dR8raNjQ5JmoVeREEutUjLM0KQx5WesZUzmS4vp_nBI,38363
+iamdata/data/actions/backup.json,sha256=uFP_DCQT3nD80b7AExlp6z3gIsxi8ZhHKfNdRObdF8g,40605
 iamdata/data/actions/batch.json,sha256=0ReKY6Wxy-uzPSjI7cMBl77fRLpgpxPnJvRk2oABqS8,15822
 iamdata/data/actions/bcm-data-exports.json,sha256=mjXiIPyT5DBAtXJDLun6sUN23PkoqygdtgrcdL2_D2g,4568
 iamdata/data/actions/bcm-pricing-calculator.json,sha256=jQDECaZnvn6wpeLF2Wd_YTMnazp91AVginiZimCb2d4,13722
@@ -104,7 +104,7 @@ iamdata/data/actions/comprehend.json,sha256=tIqpIHBjGVXNkxIrlJ1INhji7uCd0AdTl-Q6
 iamdata/data/actions/comprehendmedical.json,sha256=cBtFmyWVK7LKb0o3sHuat17otFgpLLJIJZgzWr_MhJM,7303
 iamdata/data/actions/compute-optimizer.json,sha256=e7fhylob4PxLDlwGP6kMEPeHV_UzWx50C-VcXkwfS6w,10218
 iamdata/data/actions/config.json,sha256=jQGTa5vzBDeUExTXef7kwiRcy1p4WKJgMHbBkse5uIA,43354
-iamdata/data/actions/connect-campaigns.json,sha256=4Wwn72V9GPaJ5vqicB20I3SM5ufWc_iBVp2sXGey9dE,13501
+iamdata/data/actions/connect-campaigns.json,sha256=JoCThQJCWcNvtd3xvaFllCpWlakITKZVbvAak3GTo4I,14120
 iamdata/data/actions/connect.json,sha256=QrlrkzBNzHgstr--DIOCqPGPRjvIo5sqcE2hu2Z-TLs,166598
 iamdata/data/actions/consoleapp.json,sha256=GO6wCJDJGsuYO3T7cRd1RtIG7vtuTMjwYnguio4uUl8,667
 iamdata/data/actions/consolidatedbilling.json,sha256=GCQbprPWn2lMp1OMCsrRva2UU48cqVnRIGTPq2L8Uto,569
@@ -229,7 +229,7 @@ iamdata/data/actions/kms.json,sha256=muPERxCDFE0lssFSCfBQdL3c47yqvbisslS3Fvp_ln4
 iamdata/data/actions/lakeformation.json,sha256=umu3862CPiA-ngZwCjQ2gHSCOKk1L8aWqZeuds74jFc,16117
 iamdata/data/actions/lambda.json,sha256=GztbLvqZ0DOGCEt-1apK3U5FtgPZ95Aao5Fpv6U4Kis,31247
 iamdata/data/actions/launchwizard.json,sha256=um7PaidJkgrT-VIHRMcCXtcYBz83CbMuy-jN6_N2Bu0,10792
-iamdata/data/actions/lex.json,sha256=fwvYrD93lKdBLEs2BdSR_7XZZfFodrjzOCLrSEEqmsU,56726
+iamdata/data/actions/lex.json,sha256=NL6mveM_wNL4VgscUQp8SOgqmHqu8Tln8zwjdUZCB0Q,57846
 iamdata/data/actions/license-manager-linux-subscriptions.json,sha256=AYenC_fl0whD4ppeKchYDjW__QtcZe7xP_pad9GOzDQ,3926
 iamdata/data/actions/license-manager-user-subscriptions.json,sha256=Dy8cH3ijnRi6v-u4Fm31uKniNNsdTeko4NrWrE1-YaA,8770
 iamdata/data/actions/license-manager.json,sha256=cYlwIZQi9dEPPk8tJ6R3r-nVkXRuy0bpVnmAu2Hr3ug,17924
@@ -264,6 +264,7 @@ iamdata/data/actions/migrationhub-strategy.json,sha256=6ZKOu_f3muZp6j_nukHkQbFY2
 iamdata/data/actions/mobileanalytics.json,sha256=OA2QozA8-7mEOXTLmttAi-CMi3DxEEksoN-qhy6-vYc,684
 iamdata/data/actions/mobiletargeting.json,sha256=WPZKFqjR163L1MysKIDg5Jn2WX3C-kcj4wYne_6ouuA,52911
 iamdata/data/actions/monitron.json,sha256=kO8R-chIFGhGC5_fQjBCi6BH_Lxl0CRXOE1obWBRRWg,9224
+iamdata/data/actions/mpa.json,sha256=OkJXt0YYAGzc5oQDhKTeoThOrg80hGRW-xFLMUmDbSk,8323
 iamdata/data/actions/mq.json,sha256=zhybxIfW7F1v8u9IppBNogL4v6617gSQDHVTspuoR34,10055
 iamdata/data/actions/neptune-db.json,sha256=h1XoLU76_YFyFTG5JYPMHsxo2HRNwishnAggEjLe6r8,12891
 iamdata/data/actions/neptune-graph.json,sha256=zTrtjGrznKZ0r6jlXI8DqU7YvlwEyRkzOUA1-uYn-g8,17467
@@ -299,7 +300,7 @@ iamdata/data/actions/pipes.json,sha256=5zK6euxqKwWddbxMD0Yf0h2TjeDM7VAdua-1jhXy-
 iamdata/data/actions/polly.json,sha256=hYPq7nRF2-8kyoNVNdlsOjqeSDl8sT0l4Vf0SRgN9VI,3079
 iamdata/data/actions/pricing.json,sha256=zm-BI0D9leB4oGj7Z71PkPf6hnGtx56eXWfMle9rDIA,1432
 iamdata/data/actions/private-networks.json,sha256=uX17jjHVVWdPhGNmO0t-nSpwNaFsshHbuAUbROV32Wg,11076
-iamdata/data/actions/profile.json,sha256=sEvmrrw_rhNh_Ta3sBvzBahl9ni2iwR2mNSiHLY0Zf4,36711
+iamdata/data/actions/profile.json,sha256=x8o2FyxyP2DgAlbNGWED5yqwp9elCy4ZkgX4ZexS2qI,40212
 iamdata/data/actions/proton.json,sha256=-JWHqz_SnsIDuxP2BZ2pWMR6TDfiEPhcj-8KL54PATU,49972
 iamdata/data/actions/purchase-orders.json,sha256=-ncXZ2FvaE5xjlKqcKmleSjT3Va32HdO9bMQLqojNlI,6242
 iamdata/data/actions/q.json,sha256=iWr-C_4ZqKX5sX5G_l4KGIpPf_XprnnSZgDM4FMx9jw,13525
@@ -384,7 +385,7 @@ iamdata/data/actions/states.json,sha256=DNJWrTYPKKwY-qi9CINOI1Ajv9bkI0bIckSEA2E2
 iamdata/data/actions/storagegateway.json,sha256=87l-rpd-cqGJTH5KUx7vcY9_xTFjlZ9m7eGplOpjIAY,43905
 iamdata/data/actions/sts.json,sha256=PG27BFhzE3DeNQRmJI2_fKA3u6-E-xQ9mzC_k8AtyBA,8283
 iamdata/data/actions/support-console.json,sha256=utZ-Hyz5rKsJumWjCgBQAvwblOuGDrQ7oemy7VHtUGw,3100
-iamdata/data/actions/support.json,sha256=F-G8-oP9buZruMxaWvuOVJb0WtBSL4v1WtJ-BOtFx3U,8449
+iamdata/data/actions/support.json,sha256=QQmdTBJsAyqzUPGEwqu-0MkNc5ReumrXrVvbNxr_z3o,8774
 iamdata/data/actions/supportapp.json,sha256=4_F5iPZ64y_G1bQlR_uQxsTZefZiWi-QpcK74rt2l6w,3850
 iamdata/data/actions/supportplans.json,sha256=MW_iAr3Ka3WYkQ44WQ3pfVbNRemQVHSWtO8jIX9JdPA,1549
 iamdata/data/actions/supportrecommendations.json,sha256=yOHJWonwKtV4zt4yZFv0Z0wxprcdde5oAKwbnp9BR2I,715
@@ -433,7 +434,7 @@ iamdata/data/conditionKeys/a4b.json,sha256=rxQCKCe125TdAUcjup1xxhAlFRFh5HrcaAk__
 iamdata/data/conditionKeys/access-analyzer.json,sha256=3LtgqO95psLCdlBh2_DxCa5Gron_VUC5qQpa-E5OZXs,553
 iamdata/data/conditionKeys/account.json,sha256=qWDd3sNh08aeLYqHPbQt6gGHeBdhiiWKe5--QEYtHWY,986
 iamdata/data/conditionKeys/acm-pca.json,sha256=PDC0twLMSo9fbV0B2pfTUPvhWr0OYdkCsFPZWOfU3ik,712
-iamdata/data/conditionKeys/acm.json,sha256=Mv8jyjiyGkuLRm2SB82YS-o4W_BMn4F4jb-mxi92KvY,1651
+iamdata/data/conditionKeys/acm.json,sha256=zsLTIzp-iNdSa_jMNoqeJnBf1hb_ovfprvrkjKolLP4,1864
 iamdata/data/conditionKeys/activate.json,sha256=RBNvo1WzZ4oRRq0W9-hknpT7T8If536DEMBg9hyq_4o,2
 iamdata/data/conditionKeys/aiops.json,sha256=bykLz99TDnMUiW3mYBFaOB8Dd0QuWAzWkxf97Dc1jnc,518
 iamdata/data/conditionKeys/airflow.json,sha256=PZQI6yB3cugNbnSSDrYLaC7X-JNu6EooUYvZCs0djkE,516
@@ -474,7 +475,7 @@ iamdata/data/conditionKeys/b2bi.json,sha256=bykLz99TDnMUiW3mYBFaOB8Dd0QuWAzWkxf9
 iamdata/data/conditionKeys/backup-gateway.json,sha256=dldzYUchHPuUjVd91C9ti1H4fC65mmCXdOxYDVmd01k,528
 iamdata/data/conditionKeys/backup-search.json,sha256=rq2nXOG8pApcsvxUyS90bR7-ryJzed-pD_bYopkYfXw,527
 iamdata/data/conditionKeys/backup-storage.json,sha256=RBNvo1WzZ4oRRq0W9-hknpT7T8If536DEMBg9hyq_4o,2
-iamdata/data/conditionKeys/backup.json,sha256=RY4d_fpmcQK-BPdGhVBKFFD5_wEZdpADImA5PqqcWNU,1688
+iamdata/data/conditionKeys/backup.json,sha256=M51upnH3EF1fRucFrv6XHAHT6WG-_Kver2sUOqj8rfw,1867
 iamdata/data/conditionKeys/batch.json,sha256=yzWN8dncyJS43HhQy-MqjFWJSZ47qMIe61-IVvVeoxg,3495
 iamdata/data/conditionKeys/bcm-data-exports.json,sha256=bykLz99TDnMUiW3mYBFaOB8Dd0QuWAzWkxf97Dc1jnc,518
 iamdata/data/conditionKeys/bcm-pricing-calculator.json,sha256=bykLz99TDnMUiW3mYBFaOB8Dd0QuWAzWkxf97Dc1jnc,518
@@ -685,6 +686,7 @@ iamdata/data/conditionKeys/migrationhub-strategy.json,sha256=RBNvo1WzZ4oRRq0W9-h
 iamdata/data/conditionKeys/mobileanalytics.json,sha256=RBNvo1WzZ4oRRq0W9-hknpT7T8If536DEMBg9hyq_4o,2
 iamdata/data/conditionKeys/mobiletargeting.json,sha256=vuj0jd-QXPg3aFfRh4BedFSuALvDlBLAZ_avmnhScu8,593
 iamdata/data/conditionKeys/monitron.json,sha256=qK26C4LmmaXyfNtBgMX_zJI5zB_Qz-0Rg8zCMMfyaZw,513
+iamdata/data/conditionKeys/mpa.json,sha256=PawvLh0UDtaaiU6-OhBEGJQFVf_zYPHWMNZkziulQK4,990
 iamdata/data/conditionKeys/mq.json,sha256=bykLz99TDnMUiW3mYBFaOB8Dd0QuWAzWkxf97Dc1jnc,518
 iamdata/data/conditionKeys/neptune-db.json,sha256=HYs4-nhvV1vnPdRBoE5FqoOpJJZxIxh7ilfv9HwDtB8,151
 iamdata/data/conditionKeys/neptune-graph.json,sha256=GvdY0qhFf8x-6i32hEBNEJgOgGSr-E3g5K7tcdOXtis,810
@@ -1106,6 +1108,7 @@ iamdata/data/resourceTypes/migrationhub-strategy.json,sha256=RBNvo1WzZ4oRRq0W9-h
 iamdata/data/resourceTypes/mobileanalytics.json,sha256=RBNvo1WzZ4oRRq0W9-hknpT7T8If536DEMBg9hyq_4o,2
 iamdata/data/resourceTypes/mobiletargeting.json,sha256=9XjfkxmAObxG2KQW38yMTzwzIShu8g_5moeK-B9mLno,4636
 iamdata/data/resourceTypes/monitron.json,sha256=S4CXxKgVAddJpnTwFEpJH9IwtnWgBCVkGh3ICuUWQXo,190
+iamdata/data/resourceTypes/mpa.json,sha256=P7vQSzj-_daS_pTJZwOs-MeNQYQUNZXhkkVvLvQFc3Q,593
 iamdata/data/resourceTypes/mq.json,sha256=Blx5zy9IymOulmGIkOtylZs7OCXOa8MOZi8I00c9y_w,402
 iamdata/data/resourceTypes/neptune-db.json,sha256=6c8c4eRzkIRx7DDEz5bNB3it0xqK3Qz-CYUgOcf-isg,131
 iamdata/data/resourceTypes/neptune-graph.json,sha256=5fLuvXIZuKjpkup39h0dfdAAhAsuKv9mjNeygovOmQ0,685
@@ -1274,7 +1277,7 @@ iamdata/tests/actions.py,sha256=cg2f1KPOzBYvGf7kJC9OokOo9oP_hS55tvt0_UKZVMw,1071
 iamdata/tests/conditions.py,sha256=YbQZ_V7zQh4FkCp2wCBjw_NmNMVmwtcLAQrN7Iw2uJ0,1250
 iamdata/tests/resources.py,sha256=I9N-PHtu1wjrB-y9kBTvb1lFnvsDb03EipHRj2nIQl4,1177
 iamdata/tests/services.py,sha256=Kj1EQ9AeHHXYifvnybdH83xafXTxgYFt40KUghP_B8I,1016
-iamdata-0.1.202506181.dist-info/METADATA,sha256=2w7h4Lwq02W_dQr1U_TvDEfSgIjEM5l8RGe2AwUMuHs,3491
-iamdata-0.1.202506181.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-iamdata-0.1.202506181.dist-info/licenses/LICENSE.txt,sha256=f7okslHWZM8fVIaucefW0FUlap5UxIqOrAWqzSCoeZA,1069
-iamdata-0.1.202506181.dist-info/RECORD,,
+iamdata-0.1.202506201.dist-info/METADATA,sha256=cJlHr1wQ7ndcW1YOHRG0-vDfFWRuVSJCV3sPNzKYm8E,3491
+iamdata-0.1.202506201.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+iamdata-0.1.202506201.dist-info/licenses/LICENSE.txt,sha256=f7okslHWZM8fVIaucefW0FUlap5UxIqOrAWqzSCoeZA,1069
+iamdata-0.1.202506201.dist-info/RECORD,,