iamdata 0.1.202509301__py3-none-any.whl → 0.1.202511241__py3-none-any.whl

iamdata/data/conditionKeys/rtbfabric.json

@@ -0,0 +1,47 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair that is allowed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair of a resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by a list of tag keys that are allowed in the request",
+    "type": "ArrayOfString"
+  },
+  "rtbfabric:inboundexternallinkgatewayid": {
+    "key": "rtbfabric:InboundExternalLinkGatewayId",
+    "description": "Filters access by gateway identifier supporting rtb-gw-* formats",
+    "type": "String"
+  },
+  "rtbfabric:inboundexternallinklinkid": {
+    "key": "rtbfabric:InboundExternalLinkLinkId",
+    "description": "Filters access by InboundExternalLink resource linkId identifier",
+    "type": "String"
+  },
+  "rtbfabric:linklinkid": {
+    "key": "rtbfabric:LinkLinkId",
+    "description": "Filters access by Link resource linkId identifier",
+    "type": "String"
+  },
+  "rtbfabric:outboundexternallinklinkid": {
+    "key": "rtbfabric:OutboundExternalLinkLinkId",
+    "description": "Filters access by OutboundExternalLink resource linkId identifier",
+    "type": "String"
+  },
+  "rtbfabric:requestergatewaygatewayid": {
+    "key": "rtbfabric:RequesterGatewayGatewayId",
+    "description": "Filters access by gateway identifier supporting rtb-gw-* formats",
+    "type": "String"
+  },
+  "rtbfabric:respondergatewaygatewayid": {
+    "key": "rtbfabric:ResponderGatewayGatewayId",
+    "description": "Filters access by gateway identifier supporting rtb-gw-* formats",
+    "type": "String"
+  }
+}

iamdata/data/conditionKeys/s3.json

@@ -39,6 +39,11 @@
     "description": "Filters access by existing access point tag key and value",
     "type": "String"
   },
+  "s3:buckettag/${tagkey}": {
+    "key": "s3:BucketTag/${TagKey}",
+    "description": "Filters access by the tags associated with the bucket",
+    "type": "String"
+  },
   "s3:dataaccesspointaccount": {
     "key": "s3:DataAccessPointAccount",
     "description": "Filters access by the AWS Account ID that owns the access point",

iamdata/data/conditionKeys/s3tables.json

@@ -1,4 +1,19 @@
 {
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  },
   "s3tables:kmskeyarn": {
     "key": "s3tables:KMSKeyArn",
     "description": "Filters access by the AWS KMS key ARN for the key used to encrypt a table",
@@ -9,6 +24,11 @@
     "description": "Filters access by the server-side encryption algorithm used to encrypt a table",
     "type": "String"
   },
+  "s3tables:tablebuckettag/${tagkey}": {
+    "key": "s3tables:TableBucketTag/${TagKey}",
+    "description": "Filters access by the tags associated with the table bucket",
+    "type": "String"
+  },
   "s3tables:namespace": {
     "key": "s3tables:namespace",
     "description": "Filters access by the namespaces created in the table bucket",

iamdata/data/conditionKeys/sagemaker-unified-studio-mcp.json

@@ -0,0 +1 @@
+{}

iamdata/data/conditionKeys/secretsmanager.json

@@ -29,6 +29,11 @@
     "description": "Filters access by the description text in the request",
     "type": "String"
   },
+  "secretsmanager:externalsecretrotationrolearn": {
+    "key": "secretsmanager:ExternalSecretRotationRoleArn",
+    "description": "Filters access by the managed external secret rotation role ARN in the request",
+    "type": "ARN"
+  },
   "secretsmanager:forcedeletewithoutrecovery": {
     "key": "secretsmanager:ForceDeleteWithoutRecovery",
     "description": "Filters access by whether the secret is to be deleted immediately without any recovery window",
@@ -89,6 +94,11 @@
     "description": "Filters access by primary region in which the secret is created if the secret is a multi-Region secret",
     "type": "String"
   },
+  "secretsmanager:type": {
+    "key": "secretsmanager:Type",
+    "description": "Filters access by the managed external secret type in the request",
+    "type": "String"
+  },
   "secretsmanager:versionid": {
     "key": "secretsmanager:VersionId",
     "description": "Filters access by the unique identifier of the version of the secret in the request",
@@ -103,5 +113,10 @@
     "key": "secretsmanager:resource/AllowRotationLambdaArn",
     "description": "Filters access by the ARN of the rotation Lambda function associated with the secret",
     "type": "ARN"
+  },
+  "secretsmanager:resource/type": {
+    "key": "secretsmanager:resource/Type",
+    "description": "Filters access by the managed external secret type associated with the secret",
+    "type": "String"
   }
 }

iamdata/data/conditionKeys/sso.json

@@ -14,6 +14,16 @@
     "description": "Filters access by the tag keys that are passed in the request",
     "type": "ArrayOfString"
   },
+  "identitycenter:applicationarn": {
+    "key": "identitycenter:ApplicationArn",
+    "description": "Filters access by the ARN of the IAM Identity Center application",
+    "type": "ARN"
+  },
+  "identitycenter:instancearn": {
+    "key": "identitycenter:InstanceArn",
+    "description": "Filters access by the ARN of the IAM Identity Center instance",
+    "type": "ARN"
+  },
   "sso:applicationaccount": {
     "key": "sso:ApplicationAccount",
     "description": "Filters access by the account which creates the application. This condition key is not supported for customer managed SAML applications",

iamdata/data/conditionKeys/sts.json

@@ -234,6 +234,11 @@
     "description": "Filters access by the unique identifier required when you assume a role in another account",
     "type": "String"
   },
+  "sts:identitytokenaudience": {
+    "key": "sts:IdentityTokenAudience",
+    "description": "Filters access by the audience that is passed in the request",
+    "type": "String"
+  },
   "sts:requestcontext/${contextkey}": {
     "key": "sts:RequestContext/${ContextKey}",
     "description": "Filters access by the session context key-value pairs embedded in the signed context assertion retrieved from a trusted context provider",
@@ -249,6 +254,11 @@
     "description": "Filters access by the role session name required when you assume a role",
     "type": "String"
   },
+  "sts:signingalgorithm": {
+    "key": "sts:SigningAlgorithm",
+    "description": "Filters access by the signing algorithm that is passed in the request",
+    "type": "String"
+  },
   "sts:sourceidentity": {
     "key": "sts:SourceIdentity",
     "description": "Filters access by the source identity that is passed in the request",

iamdata/data/conditionKeys/vpc-lattice-svcs.json

@@ -14,6 +14,11 @@
     "description": "Filters access by the method of the request",
     "type": "String"
   },
+  "vpc-lattice-svcs:requestpath": {
+    "key": "vpc-lattice-svcs:RequestPath",
+    "description": "Filters access by the path portion of the request URL",
+    "type": "String"
+  },
   "vpc-lattice-svcs:requestquerystring/${querystringkey}": {
     "key": "vpc-lattice-svcs:RequestQueryString/${QueryStringKey}",
     "description": "Filters access by the query string key-value pairs in the request URL",

iamdata/data/conditionKeys/vpc-lattice.json

@@ -19,6 +19,21 @@
     "description": "Filters access by the auth type specified in the request",
     "type": "String"
   },
+  "vpc-lattice:domainname": {
+    "key": "vpc-lattice:DomainName",
+    "description": "Filters access by the domain name",
+    "type": "String"
+  },
+  "vpc-lattice:privatednspreference": {
+    "key": "vpc-lattice:PrivateDnsPreference",
+    "description": "Filters access by the private dns preference",
+    "type": "String"
+  },
+  "vpc-lattice:privatednsspecifieddomains": {
+    "key": "vpc-lattice:PrivateDnsSpecifiedDomains",
+    "description": "Filters access by the private dns domains",
+    "type": "ArrayOfString"
+  },
   "vpc-lattice:protocol": {
     "key": "vpc-lattice:Protocol",
     "description": "Filters access by the protocol specified in the request",

iamdata/data/conditionKeys/xray.json

@@ -14,6 +14,11 @@
     "description": "Filters access by the tag keys that are passed in the request",
     "type": "ArrayOfString"
   },
+  "logs:loggeneratingresourcearns": {
+    "key": "logs:LogGeneratingResourceArns",
+    "description": "Filters access by LogGeneratingResourceArn in the request",
+    "type": "ArrayOfARN"
+  },
   "xray:resourcepolicyname": {
     "key": "xray:ResourcePolicyName",
     "description": "Filters access by PolicyName in the request",

iamdata/data/conditionPatterns.json

@@ -91,6 +91,9 @@
   "ecs": {
     "ecs:ResourceTag/.+?": "ecs:ResourceTag/${TagKey}"
   },
+  "eks": {
+    "eks:loggingType/.+?": "eks:loggingType/${type}"
+  },
   "elasticmapreduce": {
     "elasticmapreduce:RequestTag/.+?": "elasticmapreduce:RequestTag/${TagKey}",
     "elasticmapreduce:ResourceTag/.+?": "elasticmapreduce:ResourceTag/${TagKey}"
@@ -113,12 +116,16 @@
     "s3express:AccessPointTag/.+?": "s3express:AccessPointTag/${TagKey}",
     "s3express:BucketTag/.+?": "s3express:BucketTag/${TagKey}"
   },
+  "s3tables": {
+    "s3tables:TableBucketTag/.+?": "s3tables:TableBucketTag/${TagKey}"
+  },
   "s3-outposts": {
     "s3-outposts:ExistingObjectTag/.+?": "s3-outposts:ExistingObjectTag/<key>",
     "s3-outposts:RequestObjectTag/.+?": "s3-outposts:RequestObjectTag/<key>"
   },
   "s3": {
     "s3:AccessPointTag/.+?": "s3:AccessPointTag/${TagKey}",
+    "s3:BucketTag/.+?": "s3:BucketTag/${TagKey}",
     "s3:ExistingObjectTag/.+?": "s3:ExistingObjectTag/<key>",
     "s3:RequestObjectTag/.+?": "s3:RequestObjectTag/<key>"
   },

iamdata/data/metadata.json

@@ -1,4 +1,4 @@
 {
-  "version": "0.1.202509301",
-  "updatedAt": "2025-09-30T04:47:07.429Z"
+  "version": "0.1.202511241",
+  "updatedAt": "2025-11-24T04:56:35.656Z"
 }

iamdata/data/resourceTypes/action-recommendations.json

@@ -0,0 +1 @@
+{}

iamdata/data/resourceTypes/airflow-serverless.json

@@ -0,0 +1,9 @@
+{
+  "workflow": {
+    "key": "Workflow",
+    "arn": "arn:${Partition}:airflow-serverless:${Region}:${Account}:workflow/${WorkflowId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

iamdata/data/resourceTypes/aps.json

@@ -17,6 +17,15 @@
       "aws:TagKeys"
     ]
   },
+  "anomalydetector": {
+    "key": "anomalydetector",
+    "arn": "arn:${Partition}:aps:${Region}:${Account}:anomalydetector/${WorkspaceId}/${AnomalyDetectorId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ]
+  },
   "scraper": {
     "key": "scraper",
     "arn": "arn:${Partition}:aps:${Region}:${Account}:scraper/${ScraperId}",

iamdata/data/resourceTypes/athena.json

@@ -19,5 +19,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "session": {
+    "key": "session",
+    "arn": "arn:${Partition}:athena:${Region}:${Account}:workgroup/${WorkGroupName}/session/${SessionId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

iamdata/data/resourceTypes/backup.json

@@ -47,5 +47,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "tieringconfiguration": {
+    "key": "tieringConfiguration",
+    "arn": "arn:${Partition}:backup:${Region}:${Account}:tiering-configuration:${TieringConfigurationName}-${TieringConfigurationId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

iamdata/data/resourceTypes/bedrock-agentcore.json

@@ -1,23 +1,38 @@
 {
   "memory": {
     "key": "memory",
-    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/${MemoryId}"
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/${MemoryId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "gateway": {
     "key": "gateway",
-    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/${GatewayId}"
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/${GatewayId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "workload-identity": {
     "key": "workload-identity",
-    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}/workload-identity/${WorkloadIdentityName}"
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}/workload-identity/${WorkloadIdentityName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "oauth2credentialprovider": {
     "key": "oauth2credentialprovider",
-    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/oauth2credentialprovider/${Name}"
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/oauth2credentialprovider/${Name}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "apikeycredentialprovider": {
     "key": "apikeycredentialprovider",
-    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/apikeycredentialprovider/${Name}"
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/apikeycredentialprovider/${Name}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "runtime": {
     "key": "runtime",
@@ -57,10 +72,16 @@
   },
   "workload-identity-directory": {
     "key": "workload-identity-directory",
-    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}"
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "token-vault": {
     "key": "token-vault",
-    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}"
+    "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

iamdata/data/resourceTypes/bedrock.json

@@ -3,6 +3,10 @@
     "key": "foundation-model",
     "arn": "arn:${Partition}:bedrock:${Region}::foundation-model/${ResourceId}"
   },
+  "system-tool": {
+    "key": "system-tool",
+    "arn": "arn:${Partition}:bedrock::${Account}:system-tool/${ResourceId}"
+  },
   "async-invoke": {
     "key": "async-invoke",
     "arn": "arn:${Partition}:bedrock:${Region}:${Account}:async-invoke/${ResourceId}",

iamdata/data/resourceTypes/braket.json

@@ -12,5 +12,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "spending-limit": {
+    "key": "spending-limit",
+    "arn": "arn:${Partition}:braket:${Region}:${Account}:spending-limit/${RandomId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

iamdata/data/resourceTypes/cloudformation.json

@@ -28,6 +28,10 @@
     "key": "type",
     "arn": "arn:${Partition}:cloudformation:${Region}:${Account}:type/resource/${Type}"
   },
+  "typehook": {
+    "key": "typeHook",
+    "arn": "arn:${Partition}:cloudformation:${Region}:${Account}:type/hook/${Type}"
+  },
   "generatedtemplate": {
     "key": "generatedtemplate",
     "arn": "arn:${Partition}:cloudformation:${Region}:${Account}:generatedTemplate/${Id}"

iamdata/data/resourceTypes/ec2.json

@@ -28,6 +28,19 @@
       "ec2:ResourceTag/${TagKey}"
     ]
   },
+  "capacity-manager-data-export": {
+    "key": "capacity-manager-data-export",
+    "arn": "arn:${Partition}:ec2:${Region}:${Account}:capacity-manager-data-export/${CapacityManagerDataExportId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "ec2:Attribute",
+      "ec2:Attribute/${AttributeName}",
+      "ec2:Region",
+      "ec2:ResourceTag/${TagKey}"
+    ]
+  },
   "capacity-reservation-fleet": {
     "key": "capacity-reservation-fleet",
     "arn": "arn:${Partition}:ec2:${Region}:${Account}:capacity-reservation-fleet/${CapacityReservationFleetId}",
@@ -1163,6 +1176,7 @@
       "ec2:LaunchTemplate",
       "ec2:ManagedResourceOperator",
       "ec2:ParentSnapshot",
+      "ec2:ParentVolume",
       "ec2:Region",
       "ec2:ResourceTag/${TagKey}",
       "ec2:VolumeID",
@@ -1208,10 +1222,10 @@
       "ec2:Attribute/${AttributeName}",
       "ec2:Region",
       "ec2:ResourceTag/${TagKey}",
+      "ec2:VpceMultiRegion",
       "ec2:VpceServiceName",
       "ec2:VpceServiceOwner",
-      "ec2:vpceMultiRegion",
-      "ec2:vpceServiceRegion"
+      "ec2:VpceServiceRegion"
     ]
   },
   "vpc-endpoint-service": {
@@ -1225,10 +1239,10 @@
       "ec2:Attribute/${AttributeName}",
       "ec2:Region",
       "ec2:ResourceTag/${TagKey}",
+      "ec2:VpceMultiRegion",
       "ec2:VpceServicePrivateDnsName",
-      "ec2:vpceMultiRegion",
-      "ec2:vpceServiceRegion",
-      "ec2:vpceSupportedRegion"
+      "ec2:VpceServiceRegion",
+      "ec2:VpceSupportedRegion"
     ]
   },
   "vpc-endpoint-service-permission": {

iamdata/data/resourceTypes/eks-mcp.json

@@ -0,0 +1 @@
+{}

iamdata/data/resourceTypes/guardduty.json

@@ -43,7 +43,10 @@
   },
   "publishingdestination": {
     "key": "publishingDestination",
-    "arn": "arn:${Partition}:guardduty:${Region}:${Account}:detector/${DetectorId}/publishingDestination/${PublishingDestinationId}"
+    "arn": "arn:${Partition}:guardduty:${Region}:${Account}:detector/${DetectorId}/publishingdestination/${PublishingDestinationId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "malwareprotectionplan": {
     "key": "malwareprotectionplan",

iamdata/data/resourceTypes/iam.json

@@ -76,5 +76,12 @@
       "aws:ResourceTag/${TagKey}",
       "iam:ResourceTag/${TagKey}"
     ]
+  },
+  "delegation-request": {
+    "key": "delegation-request",
+    "arn": "arn:${Partition}:iam::${Account}:delegation-request/${DelegationRequestId}",
+    "conditionKeys": [
+      "iam:DelegationRequestOwner"
+    ]
   }
 }

iamdata/data/resourceTypes/invoicing.json

@@ -5,5 +5,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "procurement-portal-preference": {
+    "key": "procurement-portal-preference",
+    "arn": "arn:${Partition}:invoicing::${Account}:procurement-portal-preference/${Identifier}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

iamdata/data/resourceTypes/license-manager.json

@@ -28,5 +28,19 @@
       "aws:ResourceTag/${TagKey}",
       "license-manager:ResourceTag/${TagKey}"
     ]
+  },
+  "license-asset-ruleset": {
+    "key": "license-asset-ruleset",
+    "arn": "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-ruleset:${LicenseAssetRulesetId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "license-asset-group": {
+    "key": "license-asset-group",
+    "arn": "arn:${Partition}:license-manager:${Region}:${Account}:license-asset-group:${LicenseAssetGroupId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

iamdata/data/resourceTypes/logs.json

@@ -47,5 +47,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "scheduled-query": {
+    "key": "scheduled-query",
+    "arn": "arn:${Partition}:logs:${Region}:${Account}:scheduled-query:${ScheduledQueryId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

iamdata/data/resourceTypes/mediaconnect.json

@@ -1,19 +1,31 @@
 {
   "entitlement": {
     "key": "Entitlement",
-    "arn": "arn:${Partition}:mediaconnect:${Region}:${Account}:entitlement:${FlowId}:${EntitlementName}"
+    "arn": "arn:${Partition}:mediaconnect:${Region}:${Account}:entitlement:${FlowId}:${EntitlementName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "flow": {
     "key": "Flow",
-    "arn": "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:${FlowId}:${FlowName}"
+    "arn": "arn:${Partition}:mediaconnect:${Region}:${Account}:flow:${FlowId}:${FlowName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "output": {
     "key": "Output",
-    "arn": "arn:${Partition}:mediaconnect:${Region}:${Account}:output:${OutputId}:${OutputName}"
+    "arn": "arn:${Partition}:mediaconnect:${Region}:${Account}:output:${OutputId}:${OutputName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "source": {
     "key": "Source",
-    "arn": "arn:${Partition}:mediaconnect:${Region}:${Account}:source:${SourceId}:${SourceName}"
+    "arn": "arn:${Partition}:mediaconnect:${Region}:${Account}:source:${SourceId}:${SourceName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "gateway": {
     "key": "Gateway",

iamdata/data/resourceTypes/observabilityadmin.json

@@ -1,21 +1,21 @@
 {
   "telemetry-rule": {
     "key": "telemetry-rule",
-    "arn": "arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-rule:${TelemetryRuleName}",
+    "arn": "arn:${Partition}:observabilityadmin:${Region}:${Account}:telemetry-rule/${TelemetryRuleName}",
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
   },
   "organization-telemetry-rule": {
     "key": "organization-telemetry-rule",
-    "arn": "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-telemetry-rule:${TelemetryRuleName}",
+    "arn": "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-telemetry-rule/${TelemetryRuleName}",
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
   },
   "organization-centralization-rule": {
     "key": "organization-centralization-rule",
-    "arn": "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-centralization-rule:${CentralizationRuleName}",
+    "arn": "arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-centralization-rule/${CentralizationRuleName}",
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]

iamdata/data/resourceTypes/organizations.json

@@ -45,5 +45,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "responsibilitytransfer": {
+    "key": "responsibilitytransfer",
+    "arn": "arn:${Partition}:organizations::${Account}:transfer/o-${OrganizationId}/${TransferType}/${TransferDirection}/rt-${ResponsibilityTransferId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }