@jjrawlins/cdk-ami-builder 0.0.19 → 0.0.21

package/node_modules/cdk-iam-floyd/lib/generated/policy-statements/s3.d.ts

@@ -14,10 +14,7 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Write
      *
      * Possible conditions:
-     * - .ifDataAccessPointArn()
      * - .ifAccessGrantsInstanceArn()
-     * - .ifDataAccessPointAccount()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifAuthType()
      * - .ifResourceAccount()
      * - .ifSignatureAge()
@@ -51,9 +48,6 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Permissions management
      *
      * Possible conditions:
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifRequestObjectTag()
      * - .ifRequestObjectTagKeys()
      * - .ifAuthType()
@@ -85,6 +79,7 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Permissions management
      *
      * Possible conditions:
+     * - .ifAccessGrantScope()
      * - .ifAuthType()
      * - .ifResourceAccount()
      * - .ifSignatureAge()
@@ -123,6 +118,7 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Permissions management
      *
      * Possible conditions:
+     * - .ifAccessGrantsLocationScope()
      * - .ifAuthType()
      * - .ifResourceAccount()
      * - .ifSignatureAge()
@@ -153,6 +149,10 @@ export declare class S3 extends PolicyStatement {
      * - .ifTlsVersion()
      * - .ifXAmzAcl()
      * - .ifXAmzContentSha256()
+     * - .ifAccessPointTag()
+     * - .ifAwsRequestTag()
+     * - .ifAwsResourceTag()
+     * - .ifAwsTagKeys()
      *
      * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessPoint.html
      */
@@ -201,7 +201,7 @@ export declare class S3 extends PolicyStatement {
      */
     toCreateBucket(): this;
     /**
-     * Grants permission to create a new S3 Metadata configuration for a specified bucket
+     * Grants permission to create a new S3 Metadata configuration for a specified general purpose bucket
      *
      * Access Level: Write
      *
@@ -214,12 +214,15 @@ export declare class S3 extends PolicyStatement {
      * - .ifXAmzContentSha256()
      *
      * Dependent actions:
+     * - kms:DescribeKey
      * - s3tables:CreateNamespace
      * - s3tables:CreateTable
+     * - s3tables:CreateTableBucket
      * - s3tables:GetTable
+     * - s3tables:PutTableEncryption
      * - s3tables:PutTablePolicy
      *
-     * https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucketMetadataTableConfiguration.html
+     * https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucketMetadataConfiguration.html
      */
     toCreateBucketMetadataTableConfiguration(): this;
     /**
@@ -287,6 +290,7 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Permissions management
      *
      * Possible conditions:
+     * - .ifAccessGrantScope()
      * - .ifAuthType()
      * - .ifResourceAccount()
      * - .ifSignatureAge()
@@ -338,6 +342,7 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Permissions management
      *
      * Possible conditions:
+     * - .ifAccessGrantsLocationScope()
      * - .ifAuthType()
      * - .ifResourceAccount()
      * - .ifSignatureAge()
@@ -364,6 +369,8 @@ export declare class S3 extends PolicyStatement {
      * - .ifSignatureversion()
      * - .ifTlsVersion()
      * - .ifXAmzContentSha256()
+     * - .ifAccessPointTag()
+     * - .ifAwsResourceTag()
      *
      * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPoint.html
      */
@@ -402,6 +409,8 @@ export declare class S3 extends PolicyStatement {
      * - .ifSignatureversion()
      * - .ifTlsVersion()
      * - .ifXAmzContentSha256()
+     * - .ifAccessPointTag()
+     * - .ifAwsResourceTag()
      *
      * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointPolicy.html
      */
@@ -442,7 +451,7 @@ export declare class S3 extends PolicyStatement {
      */
     toDeleteBucket(): this;
     /**
-     * Grants permission to delete the S3 Metadata configuration for a specified bucket
+     * Grants permission to delete the S3 Metadata configuration for a specified general purpose bucket
      *
      * Access Level: Write
      *
@@ -454,7 +463,7 @@ export declare class S3 extends PolicyStatement {
      * - .ifTlsVersion()
      * - .ifXAmzContentSha256()
      *
-     * https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketMetadataTableConfiguration.html
+     * https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketMetadataConfiguration.html
      */
     toDeleteBucketMetadataTableConfiguration(): this;
     /**
@@ -532,9 +541,6 @@ export declare class S3 extends PolicyStatement {
      *
      * Possible conditions:
      * - .ifAccessGrantsInstanceArn()
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifAuthType()
      * - .ifResourceAccount()
      * - .ifSignatureAge()
@@ -551,9 +557,6 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Tagging
      *
      * Possible conditions:
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifExistingObjectTag()
      * - .ifAuthType()
      * - .ifResourceAccount()
@@ -572,9 +575,6 @@ export declare class S3 extends PolicyStatement {
      *
      * Possible conditions:
      * - .ifAccessGrantsInstanceArn()
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifAuthType()
      * - .ifResourceAccount()
      * - .ifSignatureAge()
@@ -592,9 +592,6 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Tagging
      *
      * Possible conditions:
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifExistingObjectTag()
      * - .ifAuthType()
      * - .ifResourceAccount()
@@ -725,6 +722,7 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Read
      *
      * Possible conditions:
+     * - .ifAccessGrantScope()
      * - .ifAuthType()
      * - .ifResourceAccount()
      * - .ifSignatureAge()
@@ -793,6 +791,7 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Read
      *
      * Possible conditions:
+     * - .ifAccessGrantsLocationScope()
      * - .ifAuthType()
      * - .ifResourceAccount()
      * - .ifSignatureAge()
@@ -819,6 +818,8 @@ export declare class S3 extends PolicyStatement {
      * - .ifSignatureversion()
      * - .ifTlsVersion()
      * - .ifXAmzContentSha256()
+     * - .ifAccessPointTag()
+     * - .ifAwsResourceTag()
      *
      * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPoint.html
      */
@@ -876,6 +877,8 @@ export declare class S3 extends PolicyStatement {
      * - .ifSignatureversion()
      * - .ifTlsVersion()
      * - .ifXAmzContentSha256()
+     * - .ifAccessPointTag()
+     * - .ifAwsResourceTag()
      *
      * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicy.html
      */
@@ -914,6 +917,8 @@ export declare class S3 extends PolicyStatement {
      * - .ifSignatureversion()
      * - .ifTlsVersion()
      * - .ifXAmzContentSha256()
+     * - .ifAccessPointTag()
+     * - .ifAwsResourceTag()
      *
      * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyStatus.html
      */
@@ -1034,7 +1039,7 @@ export declare class S3 extends PolicyStatement {
      */
     toGetBucketLogging(): this;
     /**
-     * Grants permission to return the S3 Metadata configuration for a specified bucket
+     * Grants permission to return the S3 Metadata configuration for a specified general purpose bucket
      *
      * Access Level: Read
      *
@@ -1046,7 +1051,7 @@ export declare class S3 extends PolicyStatement {
      * - .ifTlsVersion()
      * - .ifXAmzContentSha256()
      *
-     * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketMetadataTableConfiguration.html
+     * https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketMetadataConfiguration.html
      */
     toGetBucketMetadataTableConfiguration(): this;
     /**
@@ -1401,9 +1406,6 @@ export declare class S3 extends PolicyStatement {
      *
      * Possible conditions:
      * - .ifAccessGrantsInstanceArn()
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifExistingObjectTag()
      * - .ifAuthType()
      * - .ifResourceAccount()
@@ -1424,9 +1426,6 @@ export declare class S3 extends PolicyStatement {
      *
      * Possible conditions:
      * - .ifAccessGrantsInstanceArn()
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifExistingObjectTag()
      * - .ifAuthType()
      * - .ifResourceAccount()
@@ -1444,9 +1443,6 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Read
      *
      * Possible conditions:
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifExistingObjectTag()
      * - .ifAuthType()
      * - .ifResourceAccount()
@@ -1464,9 +1460,6 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Read
      *
      * Possible conditions:
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifAuthType()
      * - .ifResourceAccount()
      * - .ifSignatureAge()
@@ -1483,9 +1476,6 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Read
      *
      * Possible conditions:
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifAuthType()
      * - .ifResourceAccount()
      * - .ifSignatureAge()
@@ -1502,9 +1492,6 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Read
      *
      * Possible conditions:
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifExistingObjectTag()
      * - .ifAuthType()
      * - .ifResourceAccount()
@@ -1539,9 +1526,6 @@ export declare class S3 extends PolicyStatement {
      *
      * Possible conditions:
      * - .ifAccessGrantsInstanceArn()
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifExistingObjectTag()
      * - .ifAuthType()
      * - .ifResourceAccount()
@@ -1561,9 +1545,6 @@ export declare class S3 extends PolicyStatement {
      *
      * Possible conditions:
      * - .ifAccessGrantsInstanceArn()
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifExistingObjectTag()
      * - .ifAuthType()
      * - .ifResourceAccount()
@@ -1582,9 +1563,6 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Read
      *
      * Possible conditions:
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifExistingObjectTag()
      * - .ifAuthType()
      * - .ifResourceAccount()
@@ -1619,9 +1597,6 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Read
      *
      * Possible conditions:
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifExistingObjectTag()
      * - .ifAuthType()
      * - .ifResourceAccount()
@@ -1847,9 +1822,6 @@ export declare class S3 extends PolicyStatement {
      *
      * Possible conditions:
      * - .ifAccessGrantsInstanceArn()
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifAuthType()
      * - .ifDelimiter()
      * - .ifMaxKeys()
@@ -1879,6 +1851,8 @@ export declare class S3 extends PolicyStatement {
      * - .ifSignatureversion()
      * - .ifTlsVersion()
      * - .ifXAmzContentSha256()
+     * - .ifAccessPointTag()
+     * - .ifAwsResourceTag()
      *
      * https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListMultipartUploads.html
      */
@@ -1890,9 +1864,6 @@ export declare class S3 extends PolicyStatement {
      *
      * Possible conditions:
      * - .ifAccessGrantsInstanceArn()
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifAuthType()
      * - .ifDelimiter()
      * - .ifMaxKeys()
@@ -1961,9 +1932,6 @@ export declare class S3 extends PolicyStatement {
      *
      * Possible conditions:
      * - .ifAccessGrantsInstanceArn()
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifAuthType()
      * - .ifResourceAccount()
      * - .ifSignatureAge()
@@ -2117,9 +2085,6 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Permissions management
      *
      * Possible conditions:
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifAuthType()
      * - .ifResourceAccount()
      * - .ifSignatureAge()
@@ -2512,9 +2477,6 @@ export declare class S3 extends PolicyStatement {
      *
      * Possible conditions:
      * - .ifAccessGrantsInstanceArn()
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifRequestObjectTag()
      * - .ifRequestObjectTagKeys()
      * - .ifAuthType()
@@ -2554,9 +2516,6 @@ export declare class S3 extends PolicyStatement {
      *
      * Possible conditions:
      * - .ifAccessGrantsInstanceArn()
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifExistingObjectTag()
      * - .ifAuthType()
      * - .ifResourceAccount()
@@ -2581,9 +2540,6 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Write
      *
      * Possible conditions:
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifAuthType()
      * - .ifResourceAccount()
      * - .ifSignatureAge()
@@ -2601,9 +2557,6 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Write
      *
      * Possible conditions:
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifAuthType()
      * - .ifResourceAccount()
      * - .ifSignatureAge()
@@ -2623,9 +2576,6 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Tagging
      *
      * Possible conditions:
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifExistingObjectTag()
      * - .ifRequestObjectTag()
      * - .ifRequestObjectTagKeys()
@@ -2646,9 +2596,6 @@ export declare class S3 extends PolicyStatement {
      *
      * Possible conditions:
      * - .ifAccessGrantsInstanceArn()
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifExistingObjectTag()
      * - .ifAuthType()
      * - .ifResourceAccount()
@@ -2674,9 +2621,6 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Tagging
      *
      * Possible conditions:
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifExistingObjectTag()
      * - .ifRequestObjectTag()
      * - .ifRequestObjectTagKeys()
@@ -2804,9 +2748,6 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Write
      *
      * Possible conditions:
-     * - .ifDataAccessPointAccount()
-     * - .ifDataAccessPointArn()
-     * - .ifAccessPointNetworkOrigin()
      * - .ifAuthType()
      * - .ifResourceAccount()
      * - .ifSignatureAge()
@@ -2876,6 +2817,7 @@ export declare class S3 extends PolicyStatement {
      * Access Level: Permissions management
      *
      * Possible conditions:
+     * - .ifAccessGrantsLocationScope()
      * - .ifAuthType()
      * - .ifResourceAccount()
      * - .ifSignatureAge()
@@ -2887,6 +2829,47 @@ export declare class S3 extends PolicyStatement {
      * https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_UpdateAccessGrantsLocation.html
      */
     toUpdateAccessGrantsLocation(): this;
+    /**
+     * Grants permission to update the inventory table configuration on an existing S3 Metadata configuration for a specified general purpose bucket
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifAuthType()
+     * - .ifResourceAccount()
+     * - .ifSignatureAge()
+     * - .ifSignatureversion()
+     * - .ifTlsVersion()
+     * - .ifXAmzContentSha256()
+     *
+     * Dependent actions:
+     * - kms:DescribeKey
+     * - s3tables:CreateNamespace
+     * - s3tables:CreateTable
+     * - s3tables:CreateTableBucket
+     * - s3tables:GetTable
+     * - s3tables:PutTableEncryption
+     * - s3tables:PutTablePolicy
+     *
+     * https://docs.aws.amazon.com/AmazonS3/latest/API/API_UpdateBucketMetadataInventoryTableConfiguration.html
+     */
+    toUpdateBucketMetadataInventoryTableConfiguration(): this;
+    /**
+     * Grants permission to update the journal table configuration on an existing S3 Metadata configuration for a specified general purpose bucket
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifAuthType()
+     * - .ifResourceAccount()
+     * - .ifSignatureAge()
+     * - .ifSignatureversion()
+     * - .ifTlsVersion()
+     * - .ifXAmzContentSha256()
+     *
+     * https://docs.aws.amazon.com/AmazonS3/latest/API/API_UpdateBucketMetadataJournalTableConfiguration.html
+     */
+    toUpdateBucketMetadataJournalTableConfiguration(): this;
     /**
      * Grants permission to update the priority of an existing job
      *
@@ -2951,8 +2934,34 @@ export declare class S3 extends PolicyStatement {
      * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
      * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
      * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     *
+     * Possible conditions:
+     * - .ifAwsResourceTag()
+     * - .ifAccessPointNetworkOrigin()
+     * - .ifAccessPointTag()
+     * - .ifDataAccessPointAccount()
+     * - .ifDataAccessPointArn()
      */
     onAccesspoint(accessPointName: string, account?: string, region?: string, partition?: string): this;
+    /**
+     * Adds a resource of type accesspointobject to the statement
+     *
+     * https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points.html
+     *
+     * @param accessPointName - Identifier for the accessPointName.
+     * @param objectName - Identifier for the objectName.
+     * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
+     * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
+     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     *
+     * Possible conditions:
+     * - .ifAwsResourceTag()
+     * - .ifAccessPointNetworkOrigin()
+     * - .ifAccessPointTag()
+     * - .ifDataAccessPointAccount()
+     * - .ifDataAccessPointArn()
+     */
+    onAccesspointobject(accessPointName: string, objectName: string, account?: string, region?: string, partition?: string): this;
     /**
      * Adds a resource of type bucket to the statement
      *
@@ -3108,6 +3117,7 @@ export declare class S3 extends PolicyStatement {
      * - .toCreateAccessGrant()
      * - .toCreateAccessGrantsInstance()
      * - .toCreateAccessGrantsLocation()
+     * - .toCreateAccessPoint()
      * - .toCreateJob()
      * - .toCreateStorageLensGroup()
      * - .toPutJobTagging()
@@ -3138,24 +3148,33 @@ export declare class S3 extends PolicyStatement {
      * - .toCreateAccessGrant()
      * - .toCreateAccessGrantsInstance()
      * - .toCreateAccessGrantsLocation()
+     * - .toCreateAccessPoint()
      * - .toDeleteAccessGrant()
      * - .toDeleteAccessGrantsInstance()
      * - .toDeleteAccessGrantsInstanceResourcePolicy()
      * - .toDeleteAccessGrantsLocation()
+     * - .toDeleteAccessPoint()
+     * - .toDeleteAccessPointPolicy()
      * - .toDissociateAccessGrantsIdentityCenter()
      * - .toGetAccessGrant()
      * - .toGetAccessGrantsInstance()
      * - .toGetAccessGrantsInstanceForPrefix()
      * - .toGetAccessGrantsInstanceResourcePolicy()
      * - .toGetAccessGrantsLocation()
+     * - .toGetAccessPoint()
+     * - .toGetAccessPointPolicy()
+     * - .toGetAccessPointPolicyStatus()
      * - .toGetDataAccess()
      * - .toListAccessGrants()
      * - .toListAccessGrantsLocations()
+     * - .toListBucketMultipartUploads()
      * - .toListCallerAccessGrants()
      * - .toPutAccessGrantsInstanceResourcePolicy()
      * - .toUpdateAccessGrantsLocation()
      *
      * Applies to resource types:
+     * - accesspoint
+     * - accesspointobject
      * - job
      * - storagelensconfiguration
      * - storagelensgroup
@@ -3177,6 +3196,7 @@ export declare class S3 extends PolicyStatement {
      * - .toCreateAccessGrant()
      * - .toCreateAccessGrantsInstance()
      * - .toCreateAccessGrantsLocation()
+     * - .toCreateAccessPoint()
      * - .toCreateJob()
      * - .toCreateStorageLensGroup()
      * - .toPutJobTagging()
@@ -3197,10 +3217,24 @@ export declare class S3 extends PolicyStatement {
      * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
      */
     ifAwsTagKeys(value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by the grant scope of access grants grant
+     *
+     * https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-grant.html
+     *
+     * Applies to actions:
+     * - .toCreateAccessGrant()
+     * - .toDeleteAccessGrant()
+     * - .toGetAccessGrant()
+     *
+     * @param value The value(s) to check
+     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+     */
+    ifAccessGrantScope(value: string | string[], operator?: Operator | string): this;
     /**
      * Filters access by access grants instance ARN
      *
-     * https://docs.aws.amazon.com/IAM/latest/UserGuide/access-grants-instance.html
+     * https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-instance.html
      *
      * Applies to actions:
      * - .toAbortMultipartUpload()
@@ -3222,14 +3256,27 @@ export declare class S3 extends PolicyStatement {
      * @param operator Works with [arn operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_ARN). **Default:** `ArnLike`
      */
     ifAccessGrantsInstanceArn(value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by the location scope of access grants location
+     *
+     * https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-location.html
+     *
+     * Applies to actions:
+     * - .toCreateAccessGrantsLocation()
+     * - .toDeleteAccessGrantsLocation()
+     * - .toGetAccessGrantsLocation()
+     * - .toUpdateAccessGrantsLocation()
+     *
+     * @param value The value(s) to check
+     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+     */
+    ifAccessGrantsLocationScope(value: string | string[], operator?: Operator | string): this;
     /**
      * Filters access by the network origin (Internet or VPC)
      *
      * https://docs.aws.amazon.com/AmazonS3/latest/userguide/creating-access-points.html#access-points-policies
      *
      * Applies to actions:
-     * - .toAbortMultipartUpload()
-     * - .toBypassGovernanceRetention()
      * - .toCreateAccessPoint()
      * - .toCreateAccessPointForObjectLambda()
      * - .toCreateMultiRegionAccessPoint()
@@ -3238,10 +3285,6 @@ export declare class S3 extends PolicyStatement {
      * - .toDeleteAccessPointPolicy()
      * - .toDeleteAccessPointPolicyForObjectLambda()
      * - .toDeleteMultiRegionAccessPoint()
-     * - .toDeleteObject()
-     * - .toDeleteObjectTagging()
-     * - .toDeleteObjectVersion()
-     * - .toDeleteObjectVersionTagging()
      * - .toGetAccessPoint()
      * - .toGetAccessPointConfigurationForObjectLambda()
      * - .toGetAccessPointForObjectLambda()
@@ -3253,46 +3296,49 @@ export declare class S3 extends PolicyStatement {
      * - .toGetMultiRegionAccessPointPolicy()
      * - .toGetMultiRegionAccessPointPolicyStatus()
      * - .toGetMultiRegionAccessPointRoutes()
-     * - .toGetObject()
-     * - .toGetObjectAcl()
-     * - .toGetObjectAttributes()
-     * - .toGetObjectLegalHold()
-     * - .toGetObjectRetention()
-     * - .toGetObjectTagging()
-     * - .toGetObjectVersion()
-     * - .toGetObjectVersionAcl()
-     * - .toGetObjectVersionAttributes()
-     * - .toGetObjectVersionTagging()
-     * - .toListBucket()
      * - .toListBucketMultipartUploads()
-     * - .toListBucketVersions()
-     * - .toListMultipartUploadParts()
      * - .toPutAccessPointConfigurationForObjectLambda()
-     * - .toPutAccessPointPolicy()
      * - .toPutAccessPointPolicyForObjectLambda()
      * - .toPutMultiRegionAccessPointPolicy()
-     * - .toPutObject()
-     * - .toPutObjectAcl()
-     * - .toPutObjectLegalHold()
-     * - .toPutObjectRetention()
-     * - .toPutObjectTagging()
-     * - .toPutObjectVersionAcl()
-     * - .toPutObjectVersionTagging()
-     * - .toRestoreObject()
      * - .toSubmitMultiRegionAccessPointRoutes()
      *
+     * Applies to resource types:
+     * - accesspoint
+     * - accesspointobject
+     *
      * @param value The value(s) to check
      * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
      */
     ifAccessPointNetworkOrigin(value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by existing access point tag key and value
+     *
+     * https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-point-tagging.html#tagging-and-policies
+     *
+     * Applies to actions:
+     * - .toCreateAccessPoint()
+     * - .toDeleteAccessPoint()
+     * - .toDeleteAccessPointPolicy()
+     * - .toGetAccessPoint()
+     * - .toGetAccessPointPolicy()
+     * - .toGetAccessPointPolicyStatus()
+     * - .toListBucketMultipartUploads()
+     *
+     * Applies to resource types:
+     * - accesspoint
+     * - accesspointobject
+     *
+     * @param tagKey The tag key to check
+     * @param value The value(s) to check
+     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+     */
+    ifAccessPointTag(tagKey: string, value: string | string[], operator?: Operator | string): this;
     /**
      * Filters access by the AWS Account ID that owns the access point
      *
      * https://docs.aws.amazon.com/AmazonS3/latest/userguide/creating-access-points.html#access-points-policies
      *
      * Applies to actions:
-     * - .toAbortMultipartUpload()
-     * - .toBypassGovernanceRetention()
      * - .toCreateAccessPoint()
      * - .toCreateAccessPointForObjectLambda()
      * - .toCreateMultiRegionAccessPoint()
@@ -3301,10 +3347,6 @@ export declare class S3 extends PolicyStatement {
      * - .toDeleteAccessPointPolicy()
      * - .toDeleteAccessPointPolicyForObjectLambda()
      * - .toDeleteMultiRegionAccessPoint()
-     * - .toDeleteObject()
-     * - .toDeleteObjectTagging()
-     * - .toDeleteObjectVersion()
-     * - .toDeleteObjectVersionTagging()
      * - .toGetAccessPoint()
      * - .toGetAccessPointConfigurationForObjectLambda()
      * - .toGetAccessPointForObjectLambda()
@@ -3316,34 +3358,16 @@ export declare class S3 extends PolicyStatement {
      * - .toGetMultiRegionAccessPointPolicy()
      * - .toGetMultiRegionAccessPointPolicyStatus()
      * - .toGetMultiRegionAccessPointRoutes()
-     * - .toGetObject()
-     * - .toGetObjectAcl()
-     * - .toGetObjectAttributes()
-     * - .toGetObjectLegalHold()
-     * - .toGetObjectRetention()
-     * - .toGetObjectTagging()
-     * - .toGetObjectVersion()
-     * - .toGetObjectVersionAcl()
-     * - .toGetObjectVersionAttributes()
-     * - .toGetObjectVersionTagging()
-     * - .toListBucket()
      * - .toListBucketMultipartUploads()
-     * - .toListBucketVersions()
-     * - .toListMultipartUploadParts()
      * - .toPutAccessPointConfigurationForObjectLambda()
-     * - .toPutAccessPointPolicy()
      * - .toPutAccessPointPolicyForObjectLambda()
      * - .toPutMultiRegionAccessPointPolicy()
-     * - .toPutObject()
-     * - .toPutObjectAcl()
-     * - .toPutObjectLegalHold()
-     * - .toPutObjectRetention()
-     * - .toPutObjectTagging()
-     * - .toPutObjectVersionAcl()
-     * - .toPutObjectVersionTagging()
-     * - .toRestoreObject()
      * - .toSubmitMultiRegionAccessPointRoutes()
      *
+     * Applies to resource types:
+     * - accesspoint
+     * - accesspointobject
+     *
      * @param value The value(s) to check
      * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
      */
@@ -3354,8 +3378,6 @@ export declare class S3 extends PolicyStatement {
      * https://docs.aws.amazon.com/AmazonS3/latest/userguide/creating-access-points.html#access-points-policies
      *
      * Applies to actions:
-     * - .toAbortMultipartUpload()
-     * - .toBypassGovernanceRetention()
      * - .toCreateAccessPoint()
      * - .toCreateAccessPointForObjectLambda()
      * - .toCreateMultiRegionAccessPoint()
@@ -3364,10 +3386,6 @@ export declare class S3 extends PolicyStatement {
      * - .toDeleteAccessPointPolicy()
      * - .toDeleteAccessPointPolicyForObjectLambda()
      * - .toDeleteMultiRegionAccessPoint()
-     * - .toDeleteObject()
-     * - .toDeleteObjectTagging()
-     * - .toDeleteObjectVersion()
-     * - .toDeleteObjectVersionTagging()
      * - .toGetAccessPoint()
      * - .toGetAccessPointConfigurationForObjectLambda()
      * - .toGetAccessPointForObjectLambda()
@@ -3379,34 +3397,16 @@ export declare class S3 extends PolicyStatement {
      * - .toGetMultiRegionAccessPointPolicy()
      * - .toGetMultiRegionAccessPointPolicyStatus()
      * - .toGetMultiRegionAccessPointRoutes()
-     * - .toGetObject()
-     * - .toGetObjectAcl()
-     * - .toGetObjectAttributes()
-     * - .toGetObjectLegalHold()
-     * - .toGetObjectRetention()
-     * - .toGetObjectTagging()
-     * - .toGetObjectVersion()
-     * - .toGetObjectVersionAcl()
-     * - .toGetObjectVersionAttributes()
-     * - .toGetObjectVersionTagging()
-     * - .toListBucket()
      * - .toListBucketMultipartUploads()
-     * - .toListBucketVersions()
-     * - .toListMultipartUploadParts()
      * - .toPutAccessPointConfigurationForObjectLambda()
-     * - .toPutAccessPointPolicy()
      * - .toPutAccessPointPolicyForObjectLambda()
      * - .toPutMultiRegionAccessPointPolicy()
-     * - .toPutObject()
-     * - .toPutObjectAcl()
-     * - .toPutObjectLegalHold()
-     * - .toPutObjectRetention()
-     * - .toPutObjectTagging()
-     * - .toPutObjectVersionAcl()
-     * - .toPutObjectVersionTagging()
-     * - .toRestoreObject()
      * - .toSubmitMultiRegionAccessPointRoutes()
      *
+     * Applies to resource types:
+     * - accesspoint
+     * - accesspointobject
+     *
      * @param value The value(s) to check
      * @param operator Works with [arn operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_ARN). **Default:** `ArnLike`
      */
@@ -3723,6 +3723,8 @@ export declare class S3 extends PolicyStatement {
      * - .toTagResource()
      * - .toUntagResource()
      * - .toUpdateAccessGrantsLocation()
+     * - .toUpdateBucketMetadataInventoryTableConfiguration()
+     * - .toUpdateBucketMetadataJournalTableConfiguration()
      * - .toUpdateJobPriority()
      * - .toUpdateJobStatus()
      * - .toUpdateStorageLensGroup()
@@ -3895,6 +3897,8 @@ export declare class S3 extends PolicyStatement {
      * - .toTagResource()
      * - .toUntagResource()
      * - .toUpdateAccessGrantsLocation()
+     * - .toUpdateBucketMetadataInventoryTableConfiguration()
+     * - .toUpdateBucketMetadataJournalTableConfiguration()
      * - .toUpdateJobPriority()
      * - .toUpdateJobStatus()
      * - .toUpdateStorageLensGroup()
@@ -4067,6 +4071,8 @@ export declare class S3 extends PolicyStatement {
      * - .toTagResource()
      * - .toUntagResource()
      * - .toUpdateAccessGrantsLocation()
+     * - .toUpdateBucketMetadataInventoryTableConfiguration()
+     * - .toUpdateBucketMetadataJournalTableConfiguration()
      * - .toUpdateJobPriority()
      * - .toUpdateJobStatus()
      * - .toUpdateStorageLensGroup()
@@ -4392,6 +4398,8 @@ export declare class S3 extends PolicyStatement {
      * - .toTagResource()
      * - .toUntagResource()
      * - .toUpdateAccessGrantsLocation()
+     * - .toUpdateBucketMetadataInventoryTableConfiguration()
+     * - .toUpdateBucketMetadataJournalTableConfiguration()
      * - .toUpdateJobPriority()
      * - .toUpdateJobStatus()
      * - .toUpdateStorageLensGroup()
@@ -4564,6 +4572,8 @@ export declare class S3 extends PolicyStatement {
      * - .toTagResource()
      * - .toUntagResource()
      * - .toUpdateAccessGrantsLocation()
+     * - .toUpdateBucketMetadataInventoryTableConfiguration()
+     * - .toUpdateBucketMetadataJournalTableConfiguration()
      * - .toUpdateJobPriority()
      * - .toUpdateJobStatus()
      * - .toUpdateStorageLensGroup()
@@ -4762,6 +4772,8 @@ export declare class S3 extends PolicyStatement {
      * - .toTagResource()
      * - .toUntagResource()
      * - .toUpdateAccessGrantsLocation()
+     * - .toUpdateBucketMetadataInventoryTableConfiguration()
+     * - .toUpdateBucketMetadataJournalTableConfiguration()
      * - .toUpdateJobPriority()
      * - .toUpdateJobStatus()
      * - .toUpdateStorageLensGroup()