npm - aws-iam-data - Versions diffs - 0.0.433 → 0.0.435 - Mend

aws-iam-data 0.0.433 → 0.0.435

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (5) hide show

package/dist/data/json/changelog.json +78 -0
package/dist/data/json/iam.json +989 -338
package/dist/data/json/metadata.json +65 -20
package/dist/data/json/reports.json +11 -11
package/package.json +1 -1

package/dist/data/json/iam.json CHANGED Viewed

@@ -5417,7 +5417,7 @@
             {
                 "name": "execute-api-domain",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/apigateway/latest/developerguide/security_iam_service-with-iam.html",
-                "arnPattern": "arn:${Partition}:execute-api:${Region}:${Account}:/domainnames/${DomainName}+${DomainIdentifier}",
+                "arnPattern": "arn:${Partition}:execute-api:${Region}:${Account}:/domainnames/${DomainName} ${DomainIdentifier}",
                 "conditionKeys": []
             }
         ],
@@ -6651,7 +6651,7 @@
             {
                 "name": "PrivateBasePathMapping",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/apigateway/latest/api/API_BasePathMapping.html",
-                "arnPattern": "arn:${Partition}:apigateway:${Region}::/domainnames/${DomainName}+${DomainIdentifier}/basepathmappings/${BasePath}",
+                "arnPattern": "arn:${Partition}:apigateway:${Region}::/domainnames/${DomainName} ${DomainIdentifier}/basepathmappings/${BasePath}",
                 "conditionKeys": [
                     "aws:ResourceTag/${TagKey}"
                 ]
@@ -6659,7 +6659,7 @@
             {
                 "name": "PrivateBasePathMappings",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/apigateway/latest/api/API_BasePathMapping.html",
-                "arnPattern": "arn:${Partition}:apigateway:${Region}::/domainnames/${DomainName}+${DomainIdentifier}/basepathmappings",
+                "arnPattern": "arn:${Partition}:apigateway:${Region}::/domainnames/${DomainName} ${DomainIdentifier}/basepathmappings",
                 "conditionKeys": [
                     "aws:ResourceTag/${TagKey}"
                 ]
@@ -6667,7 +6667,7 @@
             {
                 "name": "PrivateDomainName",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/apigateway/latest/api/API_DomainName.html",
-                "arnPattern": "arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/${DomainName}+${DomainIdentifier}",
+                "arnPattern": "arn:${Partition}:apigateway:${Region}:${Account}:/domainnames/${DomainName} ${DomainIdentifier}",
                 "conditionKeys": [
                     "apigateway:Request/EndpointType",
                     "apigateway:Resource/EndpointType",
@@ -37120,6 +37120,150 @@
             }
         ]
     },
+    {
+        "name": "AWS Billing and Cost Management Dashboards",
+        "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbillingandcostmanagementdashboards.html",
+        "servicePrefix": "bcm-dashboards",
+        "actions": [
+            {
+                "name": "CreateDashboard",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_CreateDashboard.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a dashboard",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteDashboard",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_DeleteDashboard.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a dashboard",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetDashboard",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_GetDashboard.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get dashboard information",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetResourcePolicy",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_GetResourcePolicy.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get the resource policy for a dashboard",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListDashboards",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_ListDashboards.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list information about all of the dashboards for a user",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListTagsForResource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_ListTagsForResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list all of the tags for a resource",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "TagResource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_TagResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a tag for a resource",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UntagResource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_UntagResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to remove a tag for a resource",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateDashboard",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_UpdateDashboard.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update an existing dashboard",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            }
+        ],
+        "resourceTypes": [],
+        "conditionKeys": []
+    },
     {
         "name": "AWS Billing And Cost Management Data Exports",
         "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbillingandcostmanagementdataexports.html",
@@ -105620,6 +105764,21 @@
                     }
                 ]
             },
+            {
+                "name": "AssociateGovernedTerms",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_AssociateGovernedTerms.html",
+                "permissionOnly": false,
+                "description": "Grants permission to associate governed terms to an asset",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "BatchDeleteLinkedTypes",
                 "apiReferenceUrl": "${APIReferenceDocPage}API_BatchDeleteLinkedTypes.html",
@@ -106523,6 +106682,21 @@
                     }
                 ]
             },
+            {
+                "name": "DisassociateGovernedTerms",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DisassociateGovernedTerms.html",
+                "permissionOnly": false,
+                "description": "Grants permission to disassociate governed terms to an asset",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetAccountPool",
                 "apiReferenceUrl": "${APIReferenceDocPage}API_GetAccountPool.html",
@@ -176323,6 +176497,51 @@
                     }
                 ]
             },
+            {
+                "name": "CreateWhatsAppMessageTemplate",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/social-messaging/latest/APIReference/API_CreateWhatsAppMessageTemplate.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a WhatsApp message template",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateWhatsAppMessageTemplateFromLibrary",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/social-messaging/latest/APIReference/API_CreateWhatsAppMessageTemplateFromLibrary.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a WhatsApp message template from Meta's template library",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateWhatsAppMessageTemplateMedia",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/social-messaging/latest/APIReference/API_CreateWhatsAppMessageTemplateMedia.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create media for WhatsApp message templates",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DeleteWhatsAppMessageMedia",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/social-messaging/latest/APIReference/API_DeleteWhatsAppMessageMedia.html",
@@ -176338,6 +176557,21 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteWhatsAppMessageTemplate",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/social-messaging/latest/APIReference/API_DeleteWhatsAppMessageTemplate.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a WhatsApp message template",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DisassociateWhatsAppBusinessAccount",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/social-messaging/latest/APIReference/API_DisassociateWhatsAppBusinessAccount.html",
@@ -176398,6 +176632,21 @@
                     }
                 ]
             },
+            {
+                "name": "GetWhatsAppMessageTemplate",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/social-messaging/latest/APIReference/API_GetWhatsAppMessageTemplate.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get details of a WhatsApp message template",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListLinkedWhatsAppBusinessAccounts",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/social-messaging/latest/APIReference/API_ListLinkedWhatsAppBusinessAccounts.html",
@@ -176434,6 +176683,36 @@
                     }
                 ]
             },
+            {
+                "name": "ListWhatsAppMessageTemplates",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/social-messaging/latest/APIReference/API_ListWhatsAppMessageTemplates.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list WhatsApp message templates",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListWhatsAppTemplateLibrary",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/social-messaging/latest/APIReference/API_ListWhatsAppTemplateLibrary.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list available templates from Meta's template library",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "PostWhatsAppMessageMedia",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/social-messaging/latest/APIReference/API_PostWhatsAppMessageMedia.html",
@@ -176539,6 +176818,21 @@
                         "dependentActions": []
                     }
                 ]
+            },
+            {
+                "name": "UpdateWhatsAppMessageTemplate",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/social-messaging/latest/APIReference/API_UpdateWhatsAppMessageTemplate.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a WhatsApp message template",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
             }
         ],
         "resourceTypes": [
@@ -192339,6 +192633,21 @@
                     }
                 ]
             },
+            {
+                "name": "CreateGlueIdentityCenterConfiguration",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/glue/latest/dg/security-trusted-identity-propagation-getting-started.html#security-trusted-identity-propagation-connecting",
+                "permissionOnly": false,
+                "description": "Grants permission to connect Glue with Identity Center",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "CreateInboundIntegration",
                 "apiReferenceUrl": "aws-glue-api-integrations.html",
@@ -193100,6 +193409,21 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteGlueIdentityCenterConfiguration",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/glue/latest/dg/security-trusted-identity-propagation-getting-started.html#security-trusted-identity-propagation-connecting",
+                "permissionOnly": false,
+                "description": "Grants permission to disconnect Glue with Identity Center",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DeleteIntegration",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-integrations.html#aws-glue-api-integrations-DeleteIntegration",
@@ -194313,6 +194637,21 @@
                     }
                 ]
             },
+            {
+                "name": "GetGlueIdentityCenterConfiguration",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/glue/latest/dg/security-trusted-identity-propagation-getting-started.html#security-trusted-identity-propagation-connecting",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve the managed Idc application",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetIntegrationResourceProperty",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-integrations.html#aws-glue-api-integrations-GetIntegrationResourceProperty",
@@ -197171,6 +197510,21 @@
                     }
                 ]
             },
+            {
+                "name": "UpdateGlueIdentityCenterConfiguration",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/glue/latest/dg/security-trusted-identity-propagation-getting-started.html#security-trusted-identity-propagation-connecting",
+                "permissionOnly": false,
+                "description": "Grants permission to update the managed Idc application",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "UpdateIntegrationResourceProperty",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-integrations.html#aws-glue-api-integrations-UpdateIntegrationResourceProperty",
@@ -199413,7 +199767,7 @@
                 "name": "CreateBatch",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/sagemaker/latest/dg/sms-data-input.html#sms-console-create-manifest-file",
                 "permissionOnly": true,
-                "description": "Grants permission to create a GT+ Batch",
+                "description": "Grants permission to create a GT  Batch",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
@@ -199443,7 +199797,7 @@
                 "name": "CreateProject",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/sagemaker/latest/dg/sms-data-input.html#sms-console-create-manifest-file",
                 "permissionOnly": true,
-                "description": "Grants permission to create a GT+ Project",
+                "description": "Grants permission to create a GT  Project",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
@@ -199458,7 +199812,7 @@
                 "name": "CreateWorkflowDefinition",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/sagemaker/latest/dg/sms-data-input.html#sms-console-create-manifest-file",
                 "permissionOnly": true,
-                "description": "Grants permission to create a GT+ Workflow Definition",
+                "description": "Grants permission to create a GT  Workflow Definition",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
@@ -199503,7 +199857,7 @@
                 "name": "GetBatch",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/sagemaker/latest/dg/sms-data-input.html#sms-console-create-manifest-file",
                 "permissionOnly": true,
-                "description": "Grants permission to get a GT+ Batch",
+                "description": "Grants permission to get a GT  Batch",
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
@@ -199533,7 +199887,7 @@
                 "name": "ListBatches",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/sagemaker/latest/dg/sms-data-input.html#sms-console-create-manifest-file",
                 "permissionOnly": true,
-                "description": "Grants permission to list a GT+ Batchs",
+                "description": "Grants permission to list a GT  Batchs",
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
@@ -199563,7 +199917,7 @@
                 "name": "ListProjects",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/sagemaker/latest/dg/sms-data-input.html#sms-console-create-manifest-file",
                 "permissionOnly": true,
-                "description": "Grants permission to list a GT+ Projects",
+                "description": "Grants permission to list a GT  Projects",
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
@@ -199623,7 +199977,7 @@
                 "name": "UpdateBatch",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/sagemaker/latest/dg/sms-data-input.html#sms-console-create-manifest-file",
                 "permissionOnly": true,
-                "description": "Grants permission to update a GT+ Batch",
+                "description": "Grants permission to update a GT  Batch",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
@@ -199820,6 +200174,26 @@
                     }
                 ]
             },
+            {
+                "name": "CreateThreatEntitySet",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateThreatEntitySet.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create GuardDuty ThreatEntitySets, where a ThreatEntitySet consists of known malicious IP addresses and/or domains used by GuardDuty to generate findings",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": [
+                            "s3:GetObject"
+                        ]
+                    }
+                ]
+            },
             {
                 "name": "CreateThreatIntelSet",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateThreatIntelSet.html",
@@ -199838,6 +200212,27 @@
                     }
                 ]
             },
+            {
+                "name": "CreateTrustedEntitySet",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateTrustedEntitySet.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a TrustedEntitySet",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:ResourceTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": [
+                            "s3:GetObject"
+                        ]
+                    }
+                ]
+            },
             {
                 "name": "DeclineInvitations",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeclineInvitations.html",
@@ -199958,6 +200353,21 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteThreatEntitySet",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteThreatEntitySet.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete GuardDuty ThreatEntitySets",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "threatentityset",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DeleteThreatIntelSet",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteThreatIntelSet.html",
@@ -199973,6 +200383,21 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteTrustedEntitySet",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteTrustedEntitySet.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete GuardDuty TrustedEntitySets",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "trustedentityset",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DescribeMalwareScans",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DescribeMalwareScans.html",
@@ -200318,6 +200743,21 @@
                     }
                 ]
             },
+            {
+                "name": "GetThreatEntitySet",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetThreatEntitySet.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve GuardDuty ThreatEntitySets",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "threatentityset",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetThreatIntelSet",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetThreatIntelSet.html",
@@ -200333,6 +200773,21 @@
                     }
                 ]
             },
+            {
+                "name": "GetTrustedEntitySet",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetTrustedEntitySet.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve GuardDuty TrustedEntitySets",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "trustedentityset",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetUsageStatistics",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetUsageStatistics.html",
@@ -200544,11 +200999,38 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "threatentityset",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "threatintelset",
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "trustedentityset",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListThreatEntitySets",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListThreatEntitySets.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve a list of GuardDuty ThreatEntitySets",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -200567,6 +201049,21 @@
                     }
                 ]
             },
+            {
+                "name": "ListTrustedEntitySets",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListTrustedEntitySets.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve a list of GuardDuty TrustedEntitySets",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "SendSecurityTelemetry",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_SendSecurityTelemetry.html",
@@ -200658,12 +201155,24 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "threatentityset",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "threatintelset",
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "trustedentityset",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "",
                         "required": false,
@@ -200721,12 +201230,24 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "threatentityset",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "threatintelset",
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "trustedentityset",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "",
                         "required": false,
@@ -200878,6 +201399,23 @@
                     }
                 ]
             },
+            {
+                "name": "UpdateThreatEntitySet",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateThreatEntitySet.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update GuardDuty ThreatEntitySets",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "threatentityset",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": [
+                            "s3:GetObject"
+                        ]
+                    }
+                ]
+            },
             {
                 "name": "UpdateThreatIntelSet",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateThreatIntelSet.html",
@@ -200895,6 +201433,23 @@
                         ]
                     }
                 ]
+            },
+            {
+                "name": "UpdateTrustedEntitySet",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateTrustedEntitySet.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update GuardDuty TrustedEntitySets",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "trustedentityset",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": [
+                            "s3:GetObject"
+                        ]
+                    }
+                ]
             }
         ],
         "resourceTypes": [
@@ -200930,6 +201485,22 @@
                     "aws:ResourceTag/${TagKey}"
                 ]
             },
+            {
+                "name": "trustedentityset",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_managing_access.html#guardduty-resources",
+                "arnPattern": "arn:${Partition}:guardduty:${Region}:${Account}:detector/${DetectorId}/trustedentityset/${TrustedEntitySetId}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
+            },
+            {
+                "name": "threatentityset",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_managing_access.html#guardduty-resources",
+                "arnPattern": "arn:${Partition}:guardduty:${Region}:${Account}:detector/${DetectorId}/threatentityset/${ThreatEntitySetId}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
+            },
             {
                 "name": "publishingDestination",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_managing_access.html#guardduty-resources",
@@ -205853,21 +206424,6 @@
                     }
                 ]
             },
-            {
-                "name": "DeletePermissionsPolicy",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
-                "permissionOnly": false,
-                "description": "Grants permission to delete the permission policy associated with a permission set",
-                "accessLevel": "Permissions management",
-                "resourceTypes": [
-                    {
-                        "resourceType": "",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
             {
                 "name": "DeleteProfile",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
@@ -205989,21 +206545,6 @@
                     }
                 ]
             },
-            {
-                "name": "DescribeDirectories",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
-                "permissionOnly": false,
-                "description": "Grants permission to obtain information about the directories for this account",
-                "accessLevel": "Read",
-                "resourceTypes": [
-                    {
-                        "resourceType": "",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
             {
                 "name": "DescribeInstance",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeInstance.html",
@@ -206070,21 +206611,6 @@
                     }
                 ]
             },
-            {
-                "name": "DescribePermissionsPolicies",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
-                "permissionOnly": false,
-                "description": "Grants permission to retrieve all the permissions policies associated with a permission set",
-                "accessLevel": "Read",
-                "resourceTypes": [
-                    {
-                        "resourceType": "",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
             {
                 "name": "DescribeRegisteredRegions",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
@@ -206115,21 +206641,6 @@
                     }
                 ]
             },
-            {
-                "name": "DescribeTrusts",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
-                "permissionOnly": false,
-                "description": "Grants permission to obtain information about the trust relationships for this account",
-                "accessLevel": "Read",
-                "resourceTypes": [
-                    {
-                        "resourceType": "",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
             {
                 "name": "DetachCustomerManagedPolicyReferenceFromPermissionSet",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DetachCustomerManagedPolicyReferenceFromPermissionSet.html",
@@ -206436,23 +206947,6 @@
                     }
                 ]
             },
-            {
-                "name": "GetPermissionsPolicy",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
-                "permissionOnly": false,
-                "description": "Grants permission to retrieve all permission policies associated with a permission set",
-                "accessLevel": "Read",
-                "resourceTypes": [
-                    {
-                        "resourceType": "",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": [
-                            "sso:DescribePermissionsPolicies"
-                        ]
-                    }
-                ]
-            },
             {
                 "name": "GetProfile",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
@@ -207510,21 +208004,6 @@
                     }
                 ]
             },
-            {
-                "name": "UpdateDirectoryAssociation",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
-                "permissionOnly": false,
-                "description": "Grants permission to update the user attribute mappings for your connected directory",
-                "accessLevel": "Write",
-                "resourceTypes": [
-                    {
-                        "resourceType": "",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
             {
                 "name": "UpdateInstance",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_UpdateInstance.html",
@@ -262258,6 +262737,29 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteResourcePolicy",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/prometheus/latest/APIReference/API_DeleteResourcePolicy.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete workspace resource policy",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "workspace",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DeleteRuleGroupsNamespace",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/prometheus/latest/APIReference/API_DeleteRuleGroupsNamespace.html",
@@ -262396,6 +262898,29 @@
                     }
                 ]
             },
+            {
+                "name": "DescribeResourcePolicy",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/prometheus/latest/APIReference/API_DescribeResourcePolicy.html",
+                "permissionOnly": false,
+                "description": "Grants permission to describe workspace resource policy",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "workspace",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DescribeRuleGroupsNamespace",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/prometheus/latest/APIReference/API_DescribeRuleGroupsNamespace.html",
@@ -262891,6 +263416,29 @@
                     }
                 ]
             },
+            {
+                "name": "PutResourcePolicy",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/prometheus/latest/APIReference/API_PutResourcePolicy.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create and update workspace resource policy",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "workspace",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "PutRuleGroupsNamespace",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/prometheus/latest/APIReference/API_PutRuleGroupsNamespace.html",
@@ -300013,6 +300561,29 @@
         "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonqbusiness.html",
         "servicePrefix": "qbusiness",
         "actions": [
+            {
+                "name": "AllowVendedLogDeliveryForResource",
+                "apiReferenceUrl": "${UserGuideDocPage}monitoring-overview.html",
+                "permissionOnly": true,
+                "description": "Grants permission to configure vended log delivery for Amazon Q Business application resource",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "application",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "AssociatePermission",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/amazonq/latest/api-reference/API_AssociatePermission.html",
@@ -306487,8 +307058,7 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "quicksight:Group",
-                            "identitystore:GroupId"
+                            "quicksight:Group"
                         ],
                         "dependentActions": []
                     }
@@ -307032,8 +307602,7 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "quicksight:Group",
-                            "identitystore:GroupId"
+                            "quicksight:Group"
                         ],
                         "dependentActions": []
                     }
@@ -308060,8 +308629,6 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "aws:TagKeys",
-                            "aws:RequestTag/${TagKey}",
                             "quicksight:AllowedEmbeddingDomains"
                         ],
                         "dependentActions": []
@@ -310388,12 +310955,6 @@
                 "description": "Filters access by tag keys",
                 "type": "ArrayOfString"
             },
-            {
-                "name": "identitystore:GroupId",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
-                "description": "Filters access by IdentityStore group ARN",
-                "type": "ARN"
-            },
             {
                 "name": "quicksight:AllowedEmbeddingDomains",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/embedded-dashboards-for-authenticated-users-step-1.html",
@@ -331173,9 +331734,15 @@
                 "description": "Grants permission to abort a multipart upload",
                 "accessLevel": "Write",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -331183,18 +331750,13 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "s3:DataAccessPointArn",
                             "s3:AccessGrantsInstanceArn",
-                            "s3:DataAccessPointAccount",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:authType",
                             "s3:ResourceAccount",
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:x-amz-content-sha256"
                         ],
                         "dependentActions": []
                     }
@@ -331236,9 +331798,15 @@
                 "description": "Grants permission to allow circumvention of governance-mode object retention settings",
                 "accessLevel": "Permissions management",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -331246,9 +331814,6 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:RequestObjectTag/<key>",
                             "s3:RequestObjectTagKeys",
                             "s3:authType",
@@ -332017,9 +332582,15 @@
                 "description": "Grants permission to remove the null version of an object and insert a delete marker, which becomes the current version of the object",
                 "accessLevel": "Write",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -332028,17 +332599,12 @@
                         "required": false,
                         "conditionKeys": [
                             "s3:AccessGrantsInstanceArn",
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:authType",
                             "s3:ResourceAccount",
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:x-amz-content-sha256"
                         ],
                         "dependentActions": []
                     }
@@ -332051,9 +332617,15 @@
                 "description": "Grants permission to use the tagging subresource to remove the entire tag set from the specified object",
                 "accessLevel": "Tagging",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -332061,18 +332633,13 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:ExistingObjectTag/<key>",
                             "s3:authType",
                             "s3:ResourceAccount",
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:x-amz-content-sha256"
                         ],
                         "dependentActions": []
                     }
@@ -332085,9 +332652,15 @@
                 "description": "Grants permission to remove a specific version of an object",
                 "accessLevel": "Write",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -332096,9 +332669,6 @@
                         "required": false,
                         "conditionKeys": [
                             "s3:AccessGrantsInstanceArn",
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:authType",
                             "s3:ResourceAccount",
                             "s3:signatureAge",
@@ -332118,9 +332688,15 @@
                 "description": "Grants permission to remove the entire tag set for a specific version of the object",
                 "accessLevel": "Tagging",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -332128,9 +332704,6 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:ExistingObjectTag/<key>",
                             "s3:authType",
                             "s3:ResourceAccount",
@@ -332761,9 +333334,15 @@
                 "description": "Grants permission to use the acl subresource to return the access control list (ACL) of an Amazon S3 bucket",
                 "accessLevel": "Read",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspoint",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "bucket",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -332776,9 +333355,7 @@
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:x-amz-content-sha256"
                         ],
                         "dependentActions": []
                     }
@@ -332791,9 +333368,15 @@
                 "description": "Grants permission to return the CORS configuration information set for an Amazon S3 bucket",
                 "accessLevel": "Read",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspoint",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "bucket",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -332806,9 +333389,7 @@
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:x-amz-content-sha256"
                         ],
                         "dependentActions": []
                     }
@@ -332821,9 +333402,15 @@
                 "description": "Grants permission to return the Region that an Amazon S3 bucket resides in",
                 "accessLevel": "Read",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspoint",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "bucket",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -332836,9 +333423,7 @@
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:x-amz-content-sha256"
                         ],
                         "dependentActions": []
                     }
@@ -332907,9 +333492,15 @@
                 "description": "Grants permission to get the notification configuration of an Amazon S3 bucket",
                 "accessLevel": "Read",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspoint",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "bucket",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -332922,9 +333513,7 @@
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:x-amz-content-sha256"
                         ],
                         "dependentActions": []
                     }
@@ -332994,38 +333583,14 @@
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
-                        "resourceType": "bucket",
-                        "required": true,
+                        "resourceType": "accesspoint",
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
-                    {
-                        "resourceType": "",
-                        "required": false,
-                        "conditionKeys": [
-                            "s3:authType",
-                            "s3:ResourceAccount",
-                            "s3:signatureAge",
-                            "s3:signatureversion",
-                            "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
-                        ],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "GetBucketPolicyStatus",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketPolicyStatus.html",
-                "permissionOnly": false,
-                "description": "Grants permission to retrieve the policy status for a specific Amazon S3 bucket, which indicates whether the bucket is public",
-                "accessLevel": "Read",
-                "resourceTypes": [
                     {
                         "resourceType": "bucket",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -333045,10 +333610,38 @@
                 ]
             },
             {
-                "name": "GetBucketPublicAccessBlock",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetPublicAccessBlock.html",
+                "name": "GetBucketPolicyStatus",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketPolicyStatus.html",
                 "permissionOnly": false,
-                "description": "Grants permission to retrieve the PublicAccessBlock configuration for an Amazon S3 bucket",
+                "description": "Grants permission to retrieve the policy status for a specific Amazon S3 bucket, which indicates whether the bucket is public",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "bucket",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "s3:authType",
+                            "s3:ResourceAccount",
+                            "s3:signatureAge",
+                            "s3:signatureversion",
+                            "s3:TlsVersion",
+                            "s3:x-amz-content-sha256"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetBucketPublicAccessBlock",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetPublicAccessBlock.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve the PublicAccessBlock configuration for an Amazon S3 bucket",
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
@@ -333508,9 +334101,15 @@
                 "description": "Grants permission to retrieve objects from Amazon S3",
                 "accessLevel": "Read",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -333519,9 +334118,6 @@
                         "required": false,
                         "conditionKeys": [
                             "s3:AccessGrantsInstanceArn",
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:ExistingObjectTag/<key>",
                             "s3:authType",
                             "s3:ResourceAccount",
@@ -333530,9 +334126,7 @@
                             "s3:TlsVersion",
                             "s3:x-amz-content-sha256",
                             "s3:if-match",
-                            "s3:if-none-match",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:if-none-match"
                         ],
                         "dependentActions": []
                     }
@@ -333545,9 +334139,15 @@
                 "description": "Grants permission to return the access control list (ACL) of an object",
                 "accessLevel": "Read",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -333556,18 +334156,13 @@
                         "required": false,
                         "conditionKeys": [
                             "s3:AccessGrantsInstanceArn",
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:ExistingObjectTag/<key>",
                             "s3:authType",
                             "s3:ResourceAccount",
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:x-amz-content-sha256"
                         ],
                         "dependentActions": []
                     }
@@ -333581,14 +334176,14 @@
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
-                        "resourceType": "accesspoint",
-                        "required": true,
+                        "resourceType": "accesspointobject",
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -333596,18 +334191,13 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:ExistingObjectTag/<key>",
                             "s3:authType",
                             "s3:ResourceAccount",
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:x-amz-content-sha256"
                         ],
                         "dependentActions": []
                     }
@@ -333620,9 +334210,15 @@
                 "description": "Grants permission to get an object's current Legal Hold status",
                 "accessLevel": "Read",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -333630,17 +334226,12 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:authType",
                             "s3:ResourceAccount",
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:x-amz-content-sha256"
                         ],
                         "dependentActions": []
                     }
@@ -333653,9 +334244,15 @@
                 "description": "Grants permission to retrieve the retention settings for an object",
                 "accessLevel": "Read",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -333663,17 +334260,12 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:authType",
                             "s3:ResourceAccount",
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:x-amz-content-sha256"
                         ],
                         "dependentActions": []
                     }
@@ -333686,9 +334278,15 @@
                 "description": "Grants permission to return the tag set of an object",
                 "accessLevel": "Read",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -333696,18 +334294,13 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:ExistingObjectTag/<key>",
                             "s3:authType",
                             "s3:ResourceAccount",
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:x-amz-content-sha256"
                         ],
                         "dependentActions": []
                     }
@@ -333748,9 +334341,15 @@
                 "description": "Grants permission to retrieve a specific version of an object",
                 "accessLevel": "Read",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -333759,9 +334358,6 @@
                         "required": false,
                         "conditionKeys": [
                             "s3:AccessGrantsInstanceArn",
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:ExistingObjectTag/<key>",
                             "s3:authType",
                             "s3:ResourceAccount",
@@ -333782,9 +334378,15 @@
                 "description": "Grants permission to return the access control list (ACL) of a specific object version",
                 "accessLevel": "Read",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -333793,9 +334395,6 @@
                         "required": false,
                         "conditionKeys": [
                             "s3:AccessGrantsInstanceArn",
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:ExistingObjectTag/<key>",
                             "s3:authType",
                             "s3:ResourceAccount",
@@ -333816,9 +334415,15 @@
                 "description": "Grants permission to retrieve attributes related to a specific version of an object",
                 "accessLevel": "Read",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -333826,9 +334431,6 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:ExistingObjectTag/<key>",
                             "s3:authType",
                             "s3:ResourceAccount",
@@ -333877,9 +334479,15 @@
                 "description": "Grants permission to return the tag set for a specific version of the object",
                 "accessLevel": "Read",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -333887,9 +334495,6 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:ExistingObjectTag/<key>",
                             "s3:authType",
                             "s3:ResourceAccount",
@@ -334248,9 +334853,15 @@
                 "description": "Grants permission to list some or all of the objects in an Amazon S3 bucket (up to 1000)",
                 "accessLevel": "List",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspoint",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "bucket",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -334259,9 +334870,6 @@
                         "required": false,
                         "conditionKeys": [
                             "s3:AccessGrantsInstanceArn",
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:authType",
                             "s3:delimiter",
                             "s3:max-keys",
@@ -334270,9 +334878,7 @@
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:x-amz-content-sha256"
                         ],
                         "dependentActions": []
                     }
@@ -334319,9 +334925,15 @@
                 "description": "Grants permission to list metadata about all the versions of objects in an Amazon S3 bucket",
                 "accessLevel": "List",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspoint",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "bucket",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -334330,9 +334942,6 @@
                         "required": false,
                         "conditionKeys": [
                             "s3:AccessGrantsInstanceArn",
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:authType",
                             "s3:delimiter",
                             "s3:max-keys",
@@ -334341,9 +334950,7 @@
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:x-amz-content-sha256"
                         ],
                         "dependentActions": []
                     }
@@ -334428,9 +335035,15 @@
                 "description": "Grants permission to list the parts that have been uploaded for a specific multipart upload",
                 "accessLevel": "List",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -334439,17 +335052,12 @@
                         "required": false,
                         "conditionKeys": [
                             "s3:AccessGrantsInstanceArn",
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:authType",
                             "s3:ResourceAccount",
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:x-amz-content-sha256"
                         ],
                         "dependentActions": []
                     }
@@ -334716,17 +335324,12 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:authType",
                             "s3:ResourceAccount",
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:x-amz-content-sha256"
                         ],
                         "dependentActions": []
                     }
@@ -335379,9 +335982,15 @@
                 "description": "Grants permission to add an object to a bucket",
                 "accessLevel": "Write",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -335390,9 +335999,6 @@
                         "required": false,
                         "conditionKeys": [
                             "s3:AccessGrantsInstanceArn",
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:RequestObjectTag/<key>",
                             "s3:RequestObjectTagKeys",
                             "s3:authType",
@@ -335420,9 +336026,7 @@
                             "s3:object-lock-legal-hold",
                             "s3:if-match",
                             "s3:if-none-match",
-                            "s3:ObjectCreationOperation",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:ObjectCreationOperation"
                         ],
                         "dependentActions": []
                     }
@@ -335435,9 +336039,15 @@
                 "description": "Grants permission to set the access control list (ACL) permissions for new or existing objects in an S3 bucket",
                 "accessLevel": "Permissions management",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -335446,9 +336056,6 @@
                         "required": false,
                         "conditionKeys": [
                             "s3:AccessGrantsInstanceArn",
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:ExistingObjectTag/<key>",
                             "s3:authType",
                             "s3:ResourceAccount",
@@ -335462,9 +336069,7 @@
                             "s3:x-amz-grant-read-acp",
                             "s3:x-amz-grant-write",
                             "s3:x-amz-grant-write-acp",
-                            "s3:x-amz-storage-class",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:x-amz-storage-class"
                         ],
                         "dependentActions": []
                     }
@@ -335477,9 +336082,15 @@
                 "description": "Grants permission to apply a Legal Hold configuration to the specified object",
                 "accessLevel": "Write",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -335487,18 +336098,13 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:authType",
                             "s3:ResourceAccount",
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
                             "s3:x-amz-content-sha256",
-                            "s3:object-lock-legal-hold",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:object-lock-legal-hold"
                         ],
                         "dependentActions": []
                     }
@@ -335511,9 +336117,15 @@
                 "description": "Grants permission to place an Object Retention configuration on an object",
                 "accessLevel": "Write",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -335521,9 +336133,6 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:authType",
                             "s3:ResourceAccount",
                             "s3:signatureAge",
@@ -335532,9 +336141,7 @@
                             "s3:x-amz-content-sha256",
                             "s3:object-lock-mode",
                             "s3:object-lock-retain-until-date",
-                            "s3:object-lock-remaining-retention-days",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:object-lock-remaining-retention-days"
                         ],
                         "dependentActions": []
                     }
@@ -335547,9 +336154,15 @@
                 "description": "Grants permission to set the supplied tag-set to an object that already exists in a bucket",
                 "accessLevel": "Tagging",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -335557,9 +336170,6 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:ExistingObjectTag/<key>",
                             "s3:RequestObjectTag/<key>",
                             "s3:RequestObjectTagKeys",
@@ -335568,9 +336178,7 @@
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:x-amz-content-sha256"
                         ],
                         "dependentActions": []
                     }
@@ -335583,9 +336191,15 @@
                 "description": "Grants permission to use the acl subresource to set the access control list (ACL) permissions for an object that already exists in a bucket",
                 "accessLevel": "Permissions management",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -335594,9 +336208,6 @@
                         "required": false,
                         "conditionKeys": [
                             "s3:AccessGrantsInstanceArn",
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:ExistingObjectTag/<key>",
                             "s3:authType",
                             "s3:ResourceAccount",
@@ -335624,9 +336235,15 @@
                 "description": "Grants permission to set the supplied tag-set for a specific version of an object",
                 "accessLevel": "Tagging",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -335634,9 +336251,6 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:ExistingObjectTag/<key>",
                             "s3:RequestObjectTag/<key>",
                             "s3:RequestObjectTagKeys",
@@ -335831,9 +336445,15 @@
                 "description": "Grants permission to restore an archived copy of an object back into Amazon S3",
                 "accessLevel": "Write",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "object",
-                        "required": true,
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -335841,17 +336461,12 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:authType",
                             "s3:ResourceAccount",
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:x-amz-content-sha256"
                         ],
                         "dependentActions": []
                     }
@@ -336184,7 +336799,25 @@
                 "name": "accesspoint",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points.html",
                 "arnPattern": "arn:${Partition}:s3:${Region}:${Account}:accesspoint/${AccessPointName}",
-                "conditionKeys": []
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}",
+                    "s3:AccessPointNetworkOrigin",
+                    "s3:AccessPointTag/${TagKey}",
+                    "s3:DataAccessPointAccount",
+                    "s3:DataAccessPointArn"
+                ]
+            },
+            {
+                "name": "accesspointobject",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points.html",
+                "arnPattern": "arn:${Partition}:s3:${Region}:${Account}:accesspoint/${AccessPointName}/object/${ObjectName}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}",
+                    "s3:AccessPointNetworkOrigin",
+                    "s3:AccessPointTag/${TagKey}",
+                    "s3:DataAccessPointAccount",
+                    "s3:DataAccessPointArn"
+                ]
             },
             {
                 "name": "bucket",
@@ -336298,19 +336931,19 @@
             },
             {
                 "name": "s3:AccessGrantScope",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/UserGuide/access-grants-grant.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-grant.html",
                 "description": "Filters access by the grant scope of access grants grant",
                 "type": "String"
             },
             {
                 "name": "s3:AccessGrantsInstanceArn",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/UserGuide/access-grants-instance.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-instance.html",
                 "description": "Filters access by access grants instance ARN",
                 "type": "ARN"
             },
             {
                 "name": "s3:AccessGrantsLocationScope",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/UserGuide/access-grants-location.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-location.html",
                 "description": "Filters access by the location scope of access grants location",
                 "type": "String"
             },
@@ -354598,6 +355231,12 @@
                 "description": "Grants permission to add tags to a Security Hub resource",
                 "accessLevel": "Tagging",
                 "resourceTypes": [
+                    {
+                        "resourceType": "aggregatorv2",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "automation-rule",
                         "required": false,
@@ -354643,6 +355282,12 @@
                 "description": "Grants permission to remove tags from a Security Hub resource",
                 "accessLevel": "Tagging",
                 "resourceTypes": [
+                    {
+                        "resourceType": "aggregatorv2",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "automation-rule",
                         "required": false,
@@ -354897,13 +355542,17 @@
                 "name": "aggregatorv2",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-access.html#resources",
                 "arnPattern": "arn:${Partition}:securityhub:${Region}:${Account}:aggregatorv2/${AggregatorV2Id}",
-                "conditionKeys": []
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             },
             {
                 "name": "automation-rule",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules",
                 "arnPattern": "arn:${Partition}:securityhub:${Region}:${Account}:automation-rule/${AutomationRuleId}",
-                "conditionKeys": []
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             },
             {
                 "name": "automation-rulev2",
@@ -354917,7 +355566,9 @@
                 "name": "configuration-policy",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html",
                 "arnPattern": "arn:${Partition}:securityhub:${Region}:${Account}:configuration-policy/${ConfigurationPolicyId}",
-                "conditionKeys": []
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             },
             {
                 "name": "connectorv2",