aws-iam-data 0.0.24 → 0.0.26

package/data/json/iam.json

@@ -41412,8 +41412,8 @@
         "accessLevel": "List",
         "resourceTypes": [
           {
-            "resourceType": "log-group",
-            "required": true,
+            "resourceType": "",
+            "required": false,
             "conditionKeys": [],
             "dependentActions": []
           }
@@ -107520,6 +107520,33 @@
     "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonec2instanceconnect.html",
     "servicePrefix": "ec2-instance-connect",
     "actions": [
+      {
+        "name": "OpenTunnel",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/ec2-instance-connect/latest/APIReference/API_OpenTunnel.html",
+        "permissionOnly": false,
+        "description": "Grants permission to establish SSH connection to an EC2 instance using EC2 Instance Connect Endpoint",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "instance-connect-endpoint",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
+          {
+            "resourceType": "instance-connect-endpoint",
+            "required": false,
+            "conditionKeys": [
+              "aws:ResourceTag/${TagKey}",
+              "ec2:ResourceTag/${TagKey}",
+              "ec2-instance-connect:remotePort",
+              "ec2-instance-connect:privateIpAddress",
+              "ec2-instance-connect:MaxTunnelDuration"
+            ],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "SendSSHPublicKey",
         "apiReferenceUrl": "https://docs.aws.amazon.com/ec2-instance-connect/latest/APIReference/API_SendSSHPublicKey.html",
@@ -107568,6 +107595,15 @@
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}"
         ]
+      },
+      {
+        "name": "instance-connect-endpoint",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policy-structure.html#Instance_ConnectEndpoint_Id",
+        "arnPattern": "arn:${Partition}:ec2:${Region}:${Account}:instance-connect-endpoint/${InstanceConnectEndpointId}",
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ]
       }
     ],
     "conditionKeys": [
@@ -107577,6 +107613,24 @@
         "description": "Filters access by tags associated with the resource",
         "type": "String"
       },
+      {
+        "name": "ec2-instance-connect:maxTunnelDuration",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#instance-connect-max-duration",
+        "description": "Filters access by maximum session duration associated with the instance",
+        "type": "String"
+      },
+      {
+        "name": "ec2-instance-connect:privateIpAddress",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#instance-connect-pvt-ip",
+        "description": "Filters access by private IP Address associated with the instance",
+        "type": "String"
+      },
+      {
+        "name": "ec2-instance-connect:remotePort",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#instance-connect-remote-port",
+        "description": "Filters access by port number associated with the instance",
+        "type": "String"
+      },
       {
         "name": "ec2:ResourceTag/${TagKey}",
         "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag",
@@ -111550,6 +111604,41 @@
           }
         ]
       },
+      {
+        "name": "AssociateSourceNetworkStack",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/drs/latest/APIReference/API_AssociateSourceNetworkStack.html",
+        "permissionOnly": false,
+        "description": "Grants permission to associate CloudFormation stack with source network",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "SourceNetworkResource",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": [
+              "cloudformation:DescribeStackResource",
+              "cloudformation:DescribeStacks",
+              "drs:GetLaunchConfiguration",
+              "ec2:CreateLaunchTemplateVersion",
+              "ec2:DescribeLaunchTemplateVersions",
+              "ec2:DescribeLaunchTemplates",
+              "ec2:DescribeSecurityGroups",
+              "ec2:DescribeSubnets",
+              "ec2:DescribeVpcs",
+              "ec2:ModifyLaunchTemplate"
+            ]
+          },
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [
+              "aws:RequestTag/${TagKey}",
+              "aws:TagKeys"
+            ],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "BatchCreateVolumeSnapshotGroupForDrs",
         "apiReferenceUrl": "https://docs.aws.amazon.com/drs/latest/userguide/drs-apis.html",
@@ -111699,6 +111788,27 @@
           }
         ]
       },
+      {
+        "name": "CreateSourceNetwork",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/drs/latest/APIReference/API_CreateSourceNetwork.html",
+        "permissionOnly": false,
+        "description": "Grants permission to create a source network",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [
+              "aws:RequestTag/${TagKey}",
+              "aws:TagKeys"
+            ],
+            "dependentActions": [
+              "ec2:DescribeInstances",
+              "ec2:DescribeVpcs"
+            ]
+          }
+        ]
+      },
       {
         "name": "CreateSourceServerForDrs",
         "apiReferenceUrl": "https://docs.aws.amazon.com/drs/latest/userguide/drs-apis.html",
@@ -111777,6 +111887,21 @@
           }
         ]
       },
+      {
+        "name": "DeleteSourceNetwork",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/drs/latest/APIReference/API_DeleteSourceNetwork.html",
+        "permissionOnly": false,
+        "description": "Grants permission to delete source network",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "SourceNetworkResource",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "DeleteSourceServer",
         "apiReferenceUrl": "https://docs.aws.amazon.com/drs/latest/APIReference/API_DeleteSourceServer.html",
@@ -111915,6 +112040,21 @@
           }
         ]
       },
+      {
+        "name": "DescribeSourceNetworks",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/drs/latest/APIReference/API_DescribeSourceNetworks.html",
+        "permissionOnly": false,
+        "description": "Grants permission to describe source networks",
+        "accessLevel": "Read",
+        "resourceTypes": [
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "DescribeSourceServers",
         "apiReferenceUrl": "https://docs.aws.amazon.com/drs/latest/APIReference/API_DescribeSourceServers.html",
@@ -111960,6 +112100,34 @@
           }
         ]
       },
+      {
+        "name": "ExportSourceNetworkCfnTemplate",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/drs/latest/APIReference/API_ExportSourceNetworkCfnTemplate.html",
+        "permissionOnly": false,
+        "description": "Grants permission to export CloudFormation template which contains source network resources",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "SourceNetworkResource",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": [
+              "s3:GetBucketLocation",
+              "s3:GetObject",
+              "s3:PutObject"
+            ]
+          },
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [
+              "aws:RequestTag/${TagKey}",
+              "aws:TagKeys"
+            ],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "GetAgentCommandForDrs",
         "apiReferenceUrl": "https://docs.aws.amazon.com/drs/latest/userguide/drs-apis.html",
@@ -112646,6 +112814,60 @@
           }
         ]
       },
+      {
+        "name": "StartSourceNetworkRecovery",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/drs/latest/APIReference/API_StartSourceNetworkRecovery.html",
+        "permissionOnly": false,
+        "description": "Grants permission to start network recovery",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "SourceNetworkResource",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": [
+              "cloudformation:CreateStack",
+              "cloudformation:DescribeStackResource",
+              "cloudformation:DescribeStacks",
+              "cloudformation:UpdateStack",
+              "drs:GetLaunchConfiguration",
+              "ec2:CreateLaunchTemplateVersion",
+              "ec2:DescribeLaunchTemplateVersions",
+              "ec2:DescribeLaunchTemplates",
+              "ec2:DescribeSecurityGroups",
+              "ec2:DescribeSubnets",
+              "ec2:DescribeVpcs",
+              "ec2:ModifyLaunchTemplate",
+              "s3:GetObject",
+              "s3:PutObject"
+            ]
+          },
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [
+              "aws:RequestTag/${TagKey}",
+              "aws:TagKeys"
+            ],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "StartSourceNetworkReplication",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/drs/latest/APIReference/API_StartSourceNetworkReplication.html",
+        "permissionOnly": false,
+        "description": "Grants permission to start network replication",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "SourceNetworkResource",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "StopFailback",
         "apiReferenceUrl": "https://docs.aws.amazon.com/drs/latest/APIReference/API_StopFailback.html",
@@ -112676,6 +112898,21 @@
           }
         ]
       },
+      {
+        "name": "StopSourceNetworkReplication",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/drs/latest/APIReference/API_StopSourceNetworkReplication.html",
+        "permissionOnly": false,
+        "description": "Grants permission to stop network replication",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "SourceNetworkResource",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "TagResource",
         "apiReferenceUrl": "https://docs.aws.amazon.com/drs/latest/APIReference/API_TagResource.html",
@@ -112707,6 +112944,12 @@
             "conditionKeys": [],
             "dependentActions": []
           },
+          {
+            "resourceType": "SourceNetworkResource",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
           {
             "resourceType": "SourceServerResource",
             "required": false,
@@ -112786,6 +113029,12 @@
             "conditionKeys": [],
             "dependentActions": []
           },
+          {
+            "resourceType": "SourceNetworkResource",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
           {
             "resourceType": "SourceServerResource",
             "required": false,
@@ -113072,7 +113321,7 @@
       },
       {
         "name": "LaunchConfigurationTemplateResource",
-        "apiReferenceUrl": "https://docs.aws.amazon.com/drs/latest/userguide/launch-configuration-template.html",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/drs/latest/userguide/default-drs-launch-settings.html",
         "arnPattern": "arn:${Partition}:drs:${Region}:${Account}:launch-configuration-template/${LaunchConfigurationTemplateID}",
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}"
@@ -113085,6 +113334,14 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}"
         ]
+      },
+      {
+        "name": "SourceNetworkResource",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/drs/latest/userguide/source-networks.html",
+        "arnPattern": "arn:${Partition}:drs:${Region}:${Account}:source-network/${SourceNetworkID}",
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ]
       }
     ],
     "conditionKeys": [
@@ -157089,6 +157346,21 @@
           }
         ]
       },
+      {
+        "name": "CancelSbomExport",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_CancelSbomExport.html",
+        "permissionOnly": false,
+        "description": "Grants permission to cancel the generation of an SBOM report",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "CreateFilter",
         "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_CreateFilter.html",
@@ -157128,6 +157400,21 @@
           }
         ]
       },
+      {
+        "name": "CreateSbomExport",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_CreateSbomExport.html",
+        "permissionOnly": false,
+        "description": "Grants permission to request the generation of an SBOM report",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "DeleteFilter",
         "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_DeleteFilter.html",
@@ -157278,6 +157565,21 @@
           }
         ]
       },
+      {
+        "name": "GetEncryptionKey",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetEncryptionKey.html",
+        "permissionOnly": false,
+        "description": "Grants permission to retrieve information about the KMS key used to encrypt code snippets with",
+        "accessLevel": "Read",
+        "resourceTypes": [
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "GetFindingsReportStatus",
         "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetFindingsReportStatus.html",
@@ -157308,6 +157610,21 @@
           }
         ]
       },
+      {
+        "name": "GetSbomExport",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_GetSbomExport.html",
+        "permissionOnly": false,
+        "description": "Grants permission to retrieve a requested SBOM report",
+        "accessLevel": "Read",
+        "resourceTypes": [
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "ListAccountPermissions",
         "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_ListAccountPermissions.html",
@@ -157458,6 +157775,21 @@
           }
         ]
       },
+      {
+        "name": "ResetEncryptionKey",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_ResetEncryptionKey.html",
+        "permissionOnly": false,
+        "description": "Grants permission to let a customer reset to use an Amazon-owned KMS key to encrypt code snippets with",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "SearchVulnerabilities",
         "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_SearchVulnerabilities.html",
@@ -157539,6 +157871,21 @@
           }
         ]
       },
+      {
+        "name": "UpdateEncryptionKey",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateEncryptionKey.html",
+        "permissionOnly": false,
+        "description": "Grants permission to let a customer use a KMS key to encrypt code snippets with",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "UpdateFilter",
         "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/v2/APIReference/API_UpdateFilter.html",
@@ -255846,7 +256193,8 @@
             "required": false,
             "conditionKeys": [
               "aws:RequestTag/${TagKey}",
-              "aws:TagKeys"
+              "aws:TagKeys",
+              "sagemaker:TaggingAction"
             ],
             "dependentActions": []
           }
@@ -263535,6 +263883,12 @@
         "description": "Filters access by limiting memory size used for Serverless inference in the request",
         "type": "Numeric"
       },
+      {
+        "name": "sagemaker:TaggingAction",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys",
+        "description": "Filters access by the API actions to which a user can apply tags. Uses the name of the API operation that creates a taggable resource to filter access",
+        "type": "String"
+      },
       {
         "name": "sagemaker:TargetModel",
         "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys",
@@ -265236,6 +265590,21 @@
           }
         ]
       },
+      {
+        "name": "BatchDeleteAutomationRules",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules",
+        "permissionOnly": false,
+        "description": "Grants permission to delete one or more automation rules in Security Hub",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "automation-rule",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "BatchDisableStandards",
         "apiReferenceUrl": "https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchDisableStandards.html",
@@ -265266,6 +265635,21 @@
           }
         ]
       },
+      {
+        "name": "BatchGetAutomationRules",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules",
+        "permissionOnly": false,
+        "description": "Grants permission to retrieve a list of details for automation rules from Security Hub based on rule Amazon Resource Names (ARNs)",
+        "accessLevel": "Read",
+        "resourceTypes": [
+          {
+            "resourceType": "automation-rule",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "BatchGetControlEvaluations",
         "apiReferenceUrl": "https://docs.aws.amazon.com/securityhub/latest/userguide/iam-permissions-controls-standards.html",
@@ -265338,6 +265722,21 @@
           }
         ]
       },
+      {
+        "name": "BatchUpdateAutomationRules",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules",
+        "permissionOnly": false,
+        "description": "Grants permission to update one or more automation rules from Security Hub based on rule Amazon Resource Names (ARNs) and input parameters",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "automation-rule",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "BatchUpdateFindings",
         "apiReferenceUrl": "https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchUpdateFindings.html",
@@ -265393,6 +265792,24 @@
           }
         ]
       },
+      {
+        "name": "CreateAutomationRule",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules",
+        "permissionOnly": false,
+        "description": "Grants permission to create an automation rule based on input parameters",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [
+              "aws:RequestTag/${TagKey}",
+              "aws:TagKeys"
+            ],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "CreateFindingAggregator",
         "apiReferenceUrl": "https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateFindingAggregator.html",
@@ -266023,6 +266440,21 @@
           }
         ]
       },
+      {
+        "name": "ListAutomationRules",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules",
+        "permissionOnly": false,
+        "description": "Grants permission to retrieve a list of automation rules and their metadata for the calling account from Security Hub",
+        "accessLevel": "List",
+        "resourceTypes": [
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "ListControlEvaluationSummaries",
         "apiReferenceUrl": "https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_ListControlEvaluationSummaries.html",
@@ -266154,9 +266586,15 @@
         "description": "Grants permission to list of tags associated with a resource",
         "accessLevel": "Read",
         "resourceTypes": [
+          {
+            "resourceType": "automation-rule",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
           {
             "resourceType": "hub",
-            "required": true,
+            "required": false,
             "conditionKeys": [],
             "dependentActions": []
           }
@@ -266199,9 +266637,15 @@
         "description": "Grants permission to add tags to a Security Hub resource",
         "accessLevel": "Tagging",
         "resourceTypes": [
+          {
+            "resourceType": "automation-rule",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
           {
             "resourceType": "hub",
-            "required": true,
+            "required": false,
             "conditionKeys": [],
             "dependentActions": []
           }
@@ -266214,9 +266658,15 @@
         "description": "Grants permission to remove tags from a Security Hub resource",
         "accessLevel": "Tagging",
         "resourceTypes": [
+          {
+            "resourceType": "automation-rule",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
           {
             "resourceType": "hub",
-            "required": true,
+            "required": false,
             "conditionKeys": [],
             "dependentActions": []
           }
@@ -266348,6 +266798,12 @@
         "apiReferenceUrl": "https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-access.html#resources",
         "arnPattern": "arn:${Partition}:securityhub:${Region}:${Account}:finding-aggregator/${FindingAggregatorId}",
         "conditionKeys": []
+      },
+      {
+        "name": "automation-rule",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules",
+        "arnPattern": "arn:${Partition}:securityhub:${Region}:${Account}:automation-rule/${AutomationRuleId}",
+        "conditionKeys": []
       }
     ],
     "conditionKeys": [
@@ -294032,6 +294488,382 @@
     "resourceTypes": [],
     "conditionKeys": []
   },
+  {
+    "name": "Amazon Verified Permissions",
+    "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonverifiedpermissions.html",
+    "servicePrefix": "verifiedpermissions",
+    "actions": [
+      {
+        "name": "CreateIdentitySource",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_CreateIdentitySource.html",
+        "permissionOnly": false,
+        "description": "Grants permission to create a reference to an external identity provider (IdP) that is compatible with OpenID Connect (OIDC) authentication protocol, such as Amazon Cognito",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "CreatePolicy",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_CreatePolicy.html",
+        "permissionOnly": false,
+        "description": "Grants permission to create a Cedar policy and save it in the specified policy store",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "CreatePolicyStore",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_CreatePolicyStore.html",
+        "permissionOnly": false,
+        "description": "Grants permission to create a Cedar policy and save it in the specified policy store",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "CreatePolicyTemplate",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_CreatePolicyTemplate.html",
+        "permissionOnly": false,
+        "description": "Grants permission to create a policy template",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "DeleteIdentitySource",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_DeleteIdentitySource.html",
+        "permissionOnly": false,
+        "description": "Grants permission to delete an identity source that references an identity provider (IdP) such as Amazon Cognito",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "DeletePolicy",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_DeletePolicy.html",
+        "permissionOnly": false,
+        "description": "Grants permission to delete the specified policy from the policy store",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "DeletePolicyStore",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_DeletePolicyStore.html",
+        "permissionOnly": false,
+        "description": "Grants permission to delete the specified policy store",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "DeletePolicyTemplate",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_DeletePolicyTemplate.html",
+        "permissionOnly": false,
+        "description": "Grants permission to delete the specified policy template from the policy store",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "GetIdentitySource",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_GetIdentitySource.html",
+        "permissionOnly": false,
+        "description": "Grants permission to retrieve the details about the specified identity source",
+        "accessLevel": "Read",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "GetPolicy",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_GetPolicy.html",
+        "permissionOnly": false,
+        "description": "Grants permission to retrieve information about the specified policy",
+        "accessLevel": "Read",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "GetPolicyStore",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_GetPolicyStore.html",
+        "permissionOnly": false,
+        "description": "Grants permission to retrieve details about a policy store",
+        "accessLevel": "Read",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "GetPolicyTemplate",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_GetPolicyTemplate.html",
+        "permissionOnly": false,
+        "description": "Grants permission to retrieve the details for the specified policy template in the specified policy store",
+        "accessLevel": "Read",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "GetSchema",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_GetSchema.html",
+        "permissionOnly": false,
+        "description": "Grants permission to retrieve the details for the specified schema in the specified policy store",
+        "accessLevel": "Read",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "IsAuthorized",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_IsAuthorized.html",
+        "permissionOnly": false,
+        "description": "Grants permission to make an authorization decision about a service request described in the parameters",
+        "accessLevel": "Read",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "IsAuthorizedWithToken",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_IsAuthorizedWithToken.html",
+        "permissionOnly": false,
+        "description": "Grants permission to make an authorization decision about a service request described in the parameters. The principal in this request comes from an external identity source",
+        "accessLevel": "Read",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "ListIdentitySources",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_ListIdentitySources.html",
+        "permissionOnly": false,
+        "description": "Grants permission to return a paginated list of all of the identity sources defined in the specified policy store",
+        "accessLevel": "List",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "ListPolicies",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_ListPolicies.html",
+        "permissionOnly": false,
+        "description": "Grants permission to return a paginated list of all policies stored in the specified policy store",
+        "accessLevel": "List",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "ListPolicyStores",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_ListPolicyStores.html",
+        "permissionOnly": false,
+        "description": "Grants permission to return a paginated list of all policy stores in the calling Amazon Web Services account",
+        "accessLevel": "List",
+        "resourceTypes": [
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "ListPolicyTemplates",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_ListPolicyTemplates.html",
+        "permissionOnly": false,
+        "description": "Grants permission to return a paginated list of all policy templates in the specified policy store",
+        "accessLevel": "List",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "PutSchema",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_PutSchema.html",
+        "permissionOnly": false,
+        "description": "Grants permission to create or update the policy schema in the specified policy store",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "UpdateIdentitySource",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_UpdateIdentitySource.html",
+        "permissionOnly": false,
+        "description": "Grants permission to update the specified identity source to use a new identity provider (IdP) source, or to change the mapping of identities from the IdP to a different principal entity type",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "UpdatePolicy",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_UpdatePolicy.html",
+        "permissionOnly": false,
+        "description": "Grants permission to modify the specified Cedar static policy in the specified policy store",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "UpdatePolicyStore",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_UpdatePolicyStore.html",
+        "permissionOnly": false,
+        "description": "Grants permission to modify the validation setting for a policy store",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "UpdatePolicyTemplate",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermission/latest/apireference/API_UpdatePolicyTemplate.html",
+        "permissionOnly": false,
+        "description": "Grants permission to update the specified policy template",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "policy-store",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      }
+    ],
+    "resourceTypes": [
+      {
+        "name": "policy-store",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/policy-stores.html",
+        "arnPattern": "arn:${Partition}:verifiedpermissions::${Account}:policy-store/${PolicyStoreId}",
+        "conditionKeys": []
+      }
+    ],
+    "conditionKeys": []
+  },
   {
     "name": "Amazon VPC Lattice",
     "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonvpclattice.html",
@@ -299673,6 +300505,21 @@
           }
         ]
       },
+      {
+        "name": "AssociateProfiles",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_AssociateProfiles.html",
+        "permissionOnly": false,
+        "description": "Grants permission to associate a profile to the specified workload",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "workload",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "CreateLensShare",
         "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_CreateLensShare.html",
@@ -299718,6 +300565,39 @@
           }
         ]
       },
+      {
+        "name": "CreateProfile",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_CreateProfile.html",
+        "permissionOnly": false,
+        "description": "Grants permission to create a new profile",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [
+              "aws:RequestTag/${TagKey}",
+              "aws:TagKeys"
+            ],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "CreateProfileShare",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_CreateProfileShare.html",
+        "permissionOnly": false,
+        "description": "Grants permission to an owner of a profile to share with other AWS accounts and IAM Users",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "profile",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "CreateWorkload",
         "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_CreateWorkload.html",
@@ -299781,6 +300661,36 @@
           }
         ]
       },
+      {
+        "name": "DeleteProfile",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_DeleteProfile.html",
+        "permissionOnly": false,
+        "description": "Grants permission to delete a profile",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "profile",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "DeleteProfileShare",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_DeleteProfileShare.html",
+        "permissionOnly": false,
+        "description": "Grants permission to delete an existing profile share",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "profile",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "DeleteWorkload",
         "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_DeleteWorkload.html",
@@ -299826,6 +300736,21 @@
           }
         ]
       },
+      {
+        "name": "DisassociateProfiles",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_DisassociateProfiles.html",
+        "permissionOnly": false,
+        "description": "Grants permission to disassociate a profile from the specified workload",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "workload",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "ExportLens",
         "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ExportLens.html",
@@ -299954,6 +300879,44 @@
           }
         ]
       },
+      {
+        "name": "GetProfile",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_GetProfile.html",
+        "permissionOnly": false,
+        "description": "Grants permission to retrieve the specified profile",
+        "accessLevel": "Read",
+        "resourceTypes": [
+          {
+            "resourceType": "profile",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [
+              "aws:ResourceTag/${TagKey}"
+            ],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "GetProfileTemplate",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_GetProfileTemplate.html",
+        "permissionOnly": false,
+        "description": "Grants permission to retrieve the specified profile template",
+        "accessLevel": "Read",
+        "resourceTypes": [
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "GetWorkload",
         "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_GetWorkload.html",
@@ -300130,6 +301093,51 @@
           }
         ]
       },
+      {
+        "name": "ListProfileNotifications",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListProfileNotifications.html",
+        "permissionOnly": false,
+        "description": "Grants permission to list profile notifications related to specified resource",
+        "accessLevel": "List",
+        "resourceTypes": [
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "ListProfileShares",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListProfileShares.html",
+        "permissionOnly": false,
+        "description": "Grants permission to list all shares created for a profile",
+        "accessLevel": "List",
+        "resourceTypes": [
+          {
+            "resourceType": "profile",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
+      {
+        "name": "ListProfiles",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListProfiles.html",
+        "permissionOnly": false,
+        "description": "Grants permission to list the profiles available to this account",
+        "accessLevel": "List",
+        "resourceTypes": [
+          {
+            "resourceType": "",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "ListShareInvitations",
         "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_ListShareInvitations.html",
@@ -300158,6 +301166,12 @@
             "conditionKeys": [],
             "dependentActions": []
           },
+          {
+            "resourceType": "profile",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
           {
             "resourceType": "workload",
             "required": false,
@@ -300217,6 +301231,12 @@
             "conditionKeys": [],
             "dependentActions": []
           },
+          {
+            "resourceType": "profile",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
           {
             "resourceType": "workload",
             "required": false,
@@ -300247,6 +301267,12 @@
             "conditionKeys": [],
             "dependentActions": []
           },
+          {
+            "resourceType": "profile",
+            "required": false,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
           {
             "resourceType": "workload",
             "required": false,
@@ -300308,6 +301334,21 @@
           }
         ]
       },
+      {
+        "name": "UpdateProfile",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UpdateProfile.html",
+        "permissionOnly": false,
+        "description": "Grants permission to update properties of the specified profile",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "profile",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
+      },
       {
         "name": "UpdateShareInvitation",
         "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UpdateShareInvitation.html",
@@ -300367,6 +301408,27 @@
             "dependentActions": []
           }
         ]
+      },
+      {
+        "name": "UpgradeProfileVersion",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UpgradeProfileVersion.html",
+        "permissionOnly": false,
+        "description": "Grants permission to upgrade the specified workload to use the latest version of the associated profile",
+        "accessLevel": "Write",
+        "resourceTypes": [
+          {
+            "resourceType": "profile",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          },
+          {
+            "resourceType": "workload",
+            "required": true,
+            "conditionKeys": [],
+            "dependentActions": []
+          }
+        ]
       }
     ],
     "resourceTypes": [
@@ -300385,6 +301447,14 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}"
         ]
+      },
+      {
+        "name": "profile",
+        "apiReferenceUrl": "https://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_Profile.html",
+        "arnPattern": "arn:${Partition}:wellarchitected:${Region}:${Account}:profile/${ResourceId}",
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ]
       }
     ],
     "conditionKeys": [