iamdata 0.1.202509301__py3-none-any.whl → 0.1.202512101__py3-none-any.whl

iamdata/data/conditionKeys/lambda.json

@@ -34,6 +34,11 @@
     "description": "Filters access by authorization type specified in request. Available during CreateFunctionUrlConfig, UpdateFunctionUrlConfig, DeleteFunctionUrlConfig, GetFunctionUrlConfig, ListFunctionUrlConfig, AddPermission and RemovePermission operations",
     "type": "String"
   },
+  "lambda:invokedviafunctionurl": {
+    "key": "lambda:InvokedViaFunctionUrl",
+    "description": "Limits the scope of lambda:InvokeFunction action to Function URLs only. Available during AddPermission operation",
+    "type": "Bool"
+  },
   "lambda:layer": {
     "key": "lambda:Layer",
     "description": "Filters access by the ARN of a version of an AWS Lambda layer",

iamdata/data/conditionKeys/mediaconnect.json

@@ -1 +1,17 @@
-{}
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

iamdata/data/conditionKeys/nova-act.json

@@ -0,0 +1 @@
+{}

iamdata/data/conditionKeys/observabilityadmin.json

@@ -28,5 +28,10 @@
     "key": "observabilityadmin:CentralizationSourceRegions",
     "description": "Filters access by the source regions that are passed in the request",
     "type": "ArrayOfString"
+  },
+  "observabilityadmin:sourcetype": {
+    "key": "observabilityadmin:SourceType",
+    "description": "Filters access by the source type that is passed in the request",
+    "type": "String"
   }
 }

iamdata/data/conditionKeys/organizations.json

@@ -23,5 +23,15 @@
     "key": "organizations:ServicePrincipal",
     "description": "Filters access by the specified service principal names",
     "type": "String"
+  },
+  "organizations:transferdirection": {
+    "key": "organizations:TransferDirection",
+    "description": "Filters access by the specified responsibility transfer by the direction",
+    "type": "String"
+  },
+  "organizations:transfertype": {
+    "key": "organizations:TransferType",
+    "description": "Filters access by the specified responsibility transfer type names",
+    "type": "String"
   }
 }

iamdata/data/conditionKeys/partnercentral-account-management.json

@@ -1 +1,12 @@
-{}
+{
+  "partnercentral-account-management:legacypartnercentralrole": {
+    "key": "partnercentral-account-management:LegacyPartnerCentralRole",
+    "description": "Filters access by the Legacy Partner Central role",
+    "type": "ArrayOfString"
+  },
+  "partnercentral-account-management:marketingcentralrole": {
+    "key": "partnercentral-account-management:MarketingCentralRole",
+    "description": "Filters access by Marketing Central role",
+    "type": "ArrayOfString"
+  }
+}

iamdata/data/conditionKeys/partnercentral.json

@@ -16,12 +16,32 @@
   },
   "partnercentral:catalog": {
     "key": "partnercentral:Catalog",
-    "description": "Filters access by a specific Catalog. Accepted values: [AWS, Sandbox]",
+    "description": "Filters access by a specific Catalog",
     "type": "String"
   },
+  "partnercentral:channelhandshaketype": {
+    "key": "partnercentral:ChannelHandshakeType",
+    "description": "Filters access by channel handshake types",
+    "type": "String"
+  },
+  "partnercentral:fulfillmenttypes": {
+    "key": "partnercentral:FulfillmentTypes",
+    "description": "Filters access by benefit fulfillment types",
+    "type": "ArrayOfString"
+  },
+  "partnercentral:programs": {
+    "key": "partnercentral:Programs",
+    "description": "Filters access by program",
+    "type": "ArrayOfString"
+  },
   "partnercentral:relatedentitytype": {
     "key": "partnercentral:RelatedEntityType",
-    "description": "Filters access by entity types for Opportunity association. Accepted values: [Solutions, AwsProducts, AwsMarketplaceOffers]",
+    "description": "Filters access by entity types for Opportunity association",
+    "type": "String"
+  },
+  "partnercentral:verificationtype": {
+    "key": "partnercentral:VerificationType",
+    "description": "Filters access by the type of verification being performed",
     "type": "String"
   }
 }

iamdata/data/conditionKeys/pricingplanmanager.json

@@ -0,0 +1 @@
+{}

iamdata/data/conditionKeys/route53globalresolver.json

@@ -0,0 +1,17 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair that is allowed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair of a resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by a list of tag keys that are allowed in the request",
+    "type": "ArrayOfString"
+  }
+}

iamdata/data/conditionKeys/rtbfabric.json

@@ -0,0 +1,47 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair that is allowed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by a tag key and value pair of a resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by a list of tag keys that are allowed in the request",
+    "type": "ArrayOfString"
+  },
+  "rtbfabric:inboundexternallinkgatewayid": {
+    "key": "rtbfabric:InboundExternalLinkGatewayId",
+    "description": "Filters access by gateway identifier supporting rtb-gw-* formats",
+    "type": "String"
+  },
+  "rtbfabric:inboundexternallinklinkid": {
+    "key": "rtbfabric:InboundExternalLinkLinkId",
+    "description": "Filters access by InboundExternalLink resource linkId identifier",
+    "type": "String"
+  },
+  "rtbfabric:linklinkid": {
+    "key": "rtbfabric:LinkLinkId",
+    "description": "Filters access by Link resource linkId identifier",
+    "type": "String"
+  },
+  "rtbfabric:outboundexternallinklinkid": {
+    "key": "rtbfabric:OutboundExternalLinkLinkId",
+    "description": "Filters access by OutboundExternalLink resource linkId identifier",
+    "type": "String"
+  },
+  "rtbfabric:requestergatewaygatewayid": {
+    "key": "rtbfabric:RequesterGatewayGatewayId",
+    "description": "Filters access by gateway identifier supporting rtb-gw-* formats",
+    "type": "String"
+  },
+  "rtbfabric:respondergatewaygatewayid": {
+    "key": "rtbfabric:ResponderGatewayGatewayId",
+    "description": "Filters access by gateway identifier supporting rtb-gw-* formats",
+    "type": "String"
+  }
+}

iamdata/data/conditionKeys/s3.json

@@ -39,6 +39,11 @@
     "description": "Filters access by existing access point tag key and value",
     "type": "String"
   },
+  "s3:buckettag/${tagkey}": {
+    "key": "s3:BucketTag/${TagKey}",
+    "description": "Filters access by the tags associated with the bucket",
+    "type": "String"
+  },
   "s3:dataaccesspointaccount": {
     "key": "s3:DataAccessPointAccount",
     "description": "Filters access by the AWS Account ID that owns the access point",

iamdata/data/conditionKeys/s3tables.json

@@ -1,4 +1,19 @@
 {
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  },
   "s3tables:kmskeyarn": {
     "key": "s3tables:KMSKeyArn",
     "description": "Filters access by the AWS KMS key ARN for the key used to encrypt a table",
@@ -9,6 +24,16 @@
     "description": "Filters access by the server-side encryption algorithm used to encrypt a table",
     "type": "String"
   },
+  "s3tables:storageclass": {
+    "key": "s3tables:StorageClass",
+    "description": "Filters access by the storage class that can be set on tables under a table bucket",
+    "type": "String"
+  },
+  "s3tables:tablebuckettag/${tagkey}": {
+    "key": "s3tables:TableBucketTag/${TagKey}",
+    "description": "Filters access by the tags associated with the table bucket",
+    "type": "String"
+  },
   "s3tables:namespace": {
     "key": "s3tables:namespace",
     "description": "Filters access by the namespaces created in the table bucket",

iamdata/data/conditionKeys/s3vectors.json

@@ -1,4 +1,24 @@
 {
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  },
+  "s3vectors:vectorbuckettag/${tagkey}": {
+    "key": "s3vectors:VectorBucketTag/${TagKey}",
+    "description": "Filters access by the tags associated with the vector bucket",
+    "type": "String"
+  },
   "s3vectors:kmskeyarn": {
     "key": "s3vectors:kmsKeyArn",
     "description": "Filters access by the AWS KMS key ARN for the key used to encrypt a vector bucket",

iamdata/data/conditionKeys/sagemaker-unified-studio-mcp.json

@@ -0,0 +1 @@
+{}

iamdata/data/conditionKeys/secretsmanager.json

@@ -29,6 +29,11 @@
     "description": "Filters access by the description text in the request",
     "type": "String"
   },
+  "secretsmanager:externalsecretrotationrolearn": {
+    "key": "secretsmanager:ExternalSecretRotationRoleArn",
+    "description": "Filters access by the managed external secret rotation role ARN in the request",
+    "type": "ARN"
+  },
   "secretsmanager:forcedeletewithoutrecovery": {
     "key": "secretsmanager:ForceDeleteWithoutRecovery",
     "description": "Filters access by whether the secret is to be deleted immediately without any recovery window",
@@ -89,6 +94,11 @@
     "description": "Filters access by primary region in which the secret is created if the secret is a multi-Region secret",
     "type": "String"
   },
+  "secretsmanager:type": {
+    "key": "secretsmanager:Type",
+    "description": "Filters access by the managed external secret type in the request",
+    "type": "String"
+  },
   "secretsmanager:versionid": {
     "key": "secretsmanager:VersionId",
     "description": "Filters access by the unique identifier of the version of the secret in the request",
@@ -103,5 +113,10 @@
     "key": "secretsmanager:resource/AllowRotationLambdaArn",
     "description": "Filters access by the ARN of the rotation Lambda function associated with the secret",
     "type": "ARN"
+  },
+  "secretsmanager:resource/type": {
+    "key": "secretsmanager:resource/Type",
+    "description": "Filters access by the managed external secret type associated with the secret",
+    "type": "String"
   }
 }

iamdata/data/conditionKeys/securityagent.json

@@ -0,0 +1 @@
+{}

iamdata/data/conditionKeys/sso.json

@@ -14,6 +14,16 @@
     "description": "Filters access by the tag keys that are passed in the request",
     "type": "ArrayOfString"
   },
+  "identitycenter:applicationarn": {
+    "key": "identitycenter:ApplicationArn",
+    "description": "Filters access by the ARN of the IAM Identity Center application",
+    "type": "ARN"
+  },
+  "identitycenter:instancearn": {
+    "key": "identitycenter:InstanceArn",
+    "description": "Filters access by the ARN of the IAM Identity Center instance",
+    "type": "ARN"
+  },
   "sso:applicationaccount": {
     "key": "sso:ApplicationAccount",
     "description": "Filters access by the account which creates the application. This condition key is not supported for customer managed SAML applications",

iamdata/data/conditionKeys/sts.json

@@ -234,6 +234,11 @@
     "description": "Filters access by the unique identifier required when you assume a role in another account",
     "type": "String"
   },
+  "sts:identitytokenaudience": {
+    "key": "sts:IdentityTokenAudience",
+    "description": "Filters access by the audience that is passed in the request",
+    "type": "String"
+  },
   "sts:requestcontext/${contextkey}": {
     "key": "sts:RequestContext/${ContextKey}",
     "description": "Filters access by the session context key-value pairs embedded in the signed context assertion retrieved from a trusted context provider",
@@ -249,6 +254,11 @@
     "description": "Filters access by the role session name required when you assume a role",
     "type": "String"
   },
+  "sts:signingalgorithm": {
+    "key": "sts:SigningAlgorithm",
+    "description": "Filters access by the signing algorithm that is passed in the request",
+    "type": "String"
+  },
   "sts:sourceidentity": {
     "key": "sts:SourceIdentity",
     "description": "Filters access by the source identity that is passed in the request",

iamdata/data/conditionKeys/transform-custom.json

@@ -0,0 +1,17 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

iamdata/data/conditionKeys/vpc-lattice-svcs.json

@@ -14,6 +14,11 @@
     "description": "Filters access by the method of the request",
     "type": "String"
   },
+  "vpc-lattice-svcs:requestpath": {
+    "key": "vpc-lattice-svcs:RequestPath",
+    "description": "Filters access by the path portion of the request URL",
+    "type": "String"
+  },
   "vpc-lattice-svcs:requestquerystring/${querystringkey}": {
     "key": "vpc-lattice-svcs:RequestQueryString/${QueryStringKey}",
     "description": "Filters access by the query string key-value pairs in the request URL",

iamdata/data/conditionKeys/vpc-lattice.json

@@ -19,6 +19,21 @@
     "description": "Filters access by the auth type specified in the request",
     "type": "String"
   },
+  "vpc-lattice:domainname": {
+    "key": "vpc-lattice:DomainName",
+    "description": "Filters access by the domain name",
+    "type": "String"
+  },
+  "vpc-lattice:privatednspreference": {
+    "key": "vpc-lattice:PrivateDnsPreference",
+    "description": "Filters access by the private dns preference",
+    "type": "String"
+  },
+  "vpc-lattice:privatednsspecifieddomains": {
+    "key": "vpc-lattice:PrivateDnsSpecifiedDomains",
+    "description": "Filters access by the private dns domains",
+    "type": "ArrayOfString"
+  },
   "vpc-lattice:protocol": {
     "key": "vpc-lattice:Protocol",
     "description": "Filters access by the protocol specified in the request",

iamdata/data/conditionKeys/xray.json

@@ -14,6 +14,11 @@
     "description": "Filters access by the tag keys that are passed in the request",
     "type": "ArrayOfString"
   },
+  "logs:loggeneratingresourcearns": {
+    "key": "logs:LogGeneratingResourceArns",
+    "description": "Filters access by LogGeneratingResourceArn in the request",
+    "type": "ArrayOfARN"
+  },
   "xray:resourcepolicyname": {
     "key": "xray:ResourcePolicyName",
     "description": "Filters access by PolicyName in the request",

iamdata/data/conditionPatterns.json

@@ -70,6 +70,7 @@
     "ssm:resourceTag/.+?": "ssm:resourceTag/${TagKey}"
   },
   "connect": {
+    "connect:PrimaryAttribute/.+?": "connect:PrimaryAttribute/${PrimaryAttribute}",
     "connect:SearchTag/.+?": "connect:SearchTag/${TagKey}"
   },
   "autoscaling": {
@@ -91,6 +92,9 @@
   "ecs": {
     "ecs:ResourceTag/.+?": "ecs:ResourceTag/${TagKey}"
   },
+  "eks": {
+    "eks:loggingType/.+?": "eks:loggingType/${type}"
+  },
   "elasticmapreduce": {
     "elasticmapreduce:RequestTag/.+?": "elasticmapreduce:RequestTag/${TagKey}",
     "elasticmapreduce:ResourceTag/.+?": "elasticmapreduce:ResourceTag/${TagKey}"
@@ -113,12 +117,19 @@
     "s3express:AccessPointTag/.+?": "s3express:AccessPointTag/${TagKey}",
     "s3express:BucketTag/.+?": "s3express:BucketTag/${TagKey}"
   },
+  "s3tables": {
+    "s3tables:TableBucketTag/.+?": "s3tables:TableBucketTag/${TagKey}"
+  },
+  "s3vectors": {
+    "s3vectors:VectorBucketTag/.+?": "s3vectors:VectorBucketTag/${TagKey}"
+  },
   "s3-outposts": {
     "s3-outposts:ExistingObjectTag/.+?": "s3-outposts:ExistingObjectTag/<key>",
     "s3-outposts:RequestObjectTag/.+?": "s3-outposts:RequestObjectTag/<key>"
   },
   "s3": {
     "s3:AccessPointTag/.+?": "s3:AccessPointTag/${TagKey}",
+    "s3:BucketTag/.+?": "s3:BucketTag/${TagKey}",
     "s3:ExistingObjectTag/.+?": "s3:ExistingObjectTag/<key>",
     "s3:RequestObjectTag/.+?": "s3:RequestObjectTag/<key>"
   },

iamdata/data/metadata.json

@@ -1,4 +1,4 @@
 {
-  "version": "0.1.202509301",
-  "updatedAt": "2025-09-30T04:47:07.429Z"
+  "version": "0.1.202512101",
+  "updatedAt": "2025-12-10T04:56:53.831Z"
 }

iamdata/data/resourceTypes/aco-automation.json

@@ -0,0 +1,9 @@
+{
+  "automationrule": {
+    "key": "AutomationRule",
+    "arn": "arn:${Partition}:compute-optimizer::${Account}:automation-rule/${RuleId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

iamdata/data/resourceTypes/action-recommendations.json

@@ -0,0 +1 @@
+{}

iamdata/data/resourceTypes/aidevops.json

@@ -0,0 +1,24 @@
+{
+  "agentspaceresource": {
+    "key": "AgentSpaceResource",
+    "arn": "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/${AgentSpaceId}",
+    "conditionKeys": [
+      "aidevops:AgentSpaceResourceAgentSpaceId"
+    ]
+  },
+  "associationresource": {
+    "key": "AssociationResource",
+    "arn": "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/${AgentSpaceId}/associations/${AssociationId}",
+    "conditionKeys": [
+      "aidevops:AssociationResourceAgentSpaceId",
+      "aidevops:AssociationResourceAssociationId"
+    ]
+  },
+  "serviceresource": {
+    "key": "ServiceResource",
+    "arn": "arn:${Partition}:aidevops:${Region}:${Account}:service/${ServiceId}",
+    "conditionKeys": [
+      "aidevops:ServiceResourceServiceId"
+    ]
+  }
+}

iamdata/data/resourceTypes/airflow-serverless.json

@@ -0,0 +1,9 @@
+{
+  "workflow": {
+    "key": "Workflow",
+    "arn": "arn:${Partition}:airflow-serverless:${Region}:${Account}:workflow/${WorkflowId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

iamdata/data/resourceTypes/apigateway.json

@@ -464,6 +464,7 @@
       "apigateway:Request/DisableExecuteApiEndpoint",
       "apigateway:Request/EndpointType",
       "apigateway:Request/RouteAuthorizationType",
+      "apigateway:Request/SecurityPolicy",
       "apigateway:Resource/ApiKeyRequired",
       "apigateway:Resource/ApiName",
       "apigateway:Resource/AuthorizerType",
@@ -471,6 +472,7 @@
       "apigateway:Resource/DisableExecuteApiEndpoint",
       "apigateway:Resource/EndpointType",
       "apigateway:Resource/RouteAuthorizationType",
+      "apigateway:Resource/SecurityPolicy",
       "aws:ResourceTag/${TagKey}"
     ]
   },
@@ -485,6 +487,7 @@
       "apigateway:Request/DisableExecuteApiEndpoint",
       "apigateway:Request/EndpointType",
       "apigateway:Request/RouteAuthorizationType",
+      "apigateway:Request/SecurityPolicy",
       "aws:ResourceTag/${TagKey}"
     ]
   },

iamdata/data/resourceTypes/aps.json

@@ -17,6 +17,15 @@
       "aws:TagKeys"
     ]
   },
+  "anomalydetector": {
+    "key": "anomalydetector",
+    "arn": "arn:${Partition}:aps:${Region}:${Account}:anomalydetector/${WorkspaceId}/${AnomalyDetectorId}",
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ]
+  },
   "scraper": {
     "key": "scraper",
     "arn": "arn:${Partition}:aps:${Region}:${Account}:scraper/${ScraperId}",

iamdata/data/resourceTypes/athena.json

@@ -19,5 +19,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "session": {
+    "key": "session",
+    "arn": "arn:${Partition}:athena:${Region}:${Account}:workgroup/${WorkGroupName}/session/${SessionId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

iamdata/data/resourceTypes/aws-mcp.json

@@ -0,0 +1 @@
+{}

iamdata/data/resourceTypes/backup.json

@@ -47,5 +47,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "tieringconfiguration": {
+    "key": "tieringConfiguration",
+    "arn": "arn:${Partition}:backup:${Region}:${Account}:tiering-configuration:${TieringConfigurationName}-${TieringConfigurationId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

iamdata/data/resourceTypes/bcm-data-exports.json

@@ -9,5 +9,12 @@
   "table": {
     "key": "table",
     "arn": "arn:${Partition}:bcm-data-exports:${Region}:${Account}:table/${Identifier}"
+  },
+  "billingview": {
+    "key": "billingview",
+    "arn": "arn:${Partition}:billing::${Account}:billingview/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }