npm - aws-iam-data - Versions diffs - 0.0.459 → 0.0.461 - Mend

aws-iam-data 0.0.459 → 0.0.461

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (5) hide show

package/dist/data/json/changelog.json +60 -0
package/dist/data/json/iam.json +955 -79
package/dist/data/json/metadata.json +57 -6
package/dist/data/json/reports.json +7 -7
package/package.json +1 -1

package/dist/data/json/iam.json CHANGED Viewed

@@ -639,6 +639,25 @@
                     }
                 ]
             },
+            {
+                "name": "CreateReport",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_CreateReport.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a new report in the specified investigation",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "investigation-group",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": [
+                            "kms:Decrypt",
+                            "kms:GenerateDataKey",
+                            "sts:SetContext"
+                        ]
+                    }
+                ]
+            },
             {
                 "name": "DeleteInvestigation",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_DeleteInvestigation.html",
@@ -688,6 +707,25 @@
                     }
                 ]
             },
+            {
+                "name": "GenerateReport",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_GenerateReport.html",
+                "permissionOnly": false,
+                "description": "Grants permission to generate a report in the specified investigation report",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "investigation-group",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": [
+                            "kms:Decrypt",
+                            "kms:GenerateDataKey",
+                            "sts:SetContext"
+                        ]
+                    }
+                ]
+            },
             {
                 "name": "GetEphemeralInvestigationResults",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_GetEphemeralInvestigationResults.html",
@@ -703,6 +741,40 @@
                     }
                 ]
             },
+            {
+                "name": "GetFact",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_GetFact.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve a fact in the specified investigation report",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "investigation-group",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": [
+                            "kms:Decrypt"
+                        ]
+                    }
+                ]
+            },
+            {
+                "name": "GetFactVersions",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_GetFactVersions.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve all versions of a fact token in the specified investigation report",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "investigation-group",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": [
+                            "kms:Decrypt"
+                        ]
+                    }
+                ]
+            },
             {
                 "name": "GetInvestigation",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_GetInvestigation.html",
@@ -782,6 +854,40 @@
                     }
                 ]
             },
+            {
+                "name": "GetReport",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_GetReport.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve a report in the specified investigation",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "investigation-group",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": [
+                            "kms:Decrypt"
+                        ]
+                    }
+                ]
+            },
+            {
+                "name": "ListFacts",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_ListFacts.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list all facts in the specified investigation report",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "investigation-group",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": [
+                            "kms:Decrypt"
+                        ]
+                    }
+                ]
+            },
             {
                 "name": "ListInvestigationEvents",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_ListInvestigationEvents.html",
@@ -827,6 +933,21 @@
                     }
                 ]
             },
+            {
+                "name": "ListReports",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_ListReports.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list all reports in the specified investigation",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "investigation-group",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListTagsForResource",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_ListTagsForResource.html",
@@ -842,6 +963,25 @@
                     }
                 ]
             },
+            {
+                "name": "PutFact",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_PutFact.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create or update a new fact in the specified investigation report",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "investigation-group",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": [
+                            "kms:Decrypt",
+                            "kms:GenerateDataKey",
+                            "sts:SetContext"
+                        ]
+                    }
+                ]
+            },
             {
                 "name": "PutInvestigationGroupPolicy",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_PutInvestigationGroupPolicy.html",
@@ -970,6 +1110,25 @@
                     }
                 ]
             },
+            {
+                "name": "UpdateReport",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_UpdateReport.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a report in the specified investigation",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "investigation-group",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": [
+                            "kms:Decrypt",
+                            "kms:GenerateDataKey",
+                            "sts:SetContext"
+                        ]
+                    }
+                ]
+            },
             {
                 "name": "ValidateInvestigationGroup",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/API_ValidateInvestigationGroup.html",
@@ -34996,9 +35155,70 @@
                     }
                 ]
             },
+            {
+                "name": "BatchCreateMemoryRecords",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchCreateMemoryRecords.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create one or more memory records",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "memory",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "bedrock-agentcore:namespace"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "BatchDeleteMemoryRecords",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchDeleteMemoryRecords.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete one or more memory records",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "memory",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "BatchUpdateMemoryRecords",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchUpdateMemoryRecords.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update one or more memory records",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "memory",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "bedrock-agentcore:namespace"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ConnectBrowserAutomationStream",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ConnectBrowserAutomationStream.html",
                 "permissionOnly": false,
                 "description": "Grants permission to connect to a browser automation stream",
                 "accessLevel": "Read",
@@ -35013,7 +35233,7 @@
             },
             {
                 "name": "ConnectBrowserLiveViewStream",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ConnectBrowserLiveViewStream.html",
                 "permissionOnly": false,
                 "description": "Grants permission to connect to a browser live view stream",
                 "accessLevel": "Read",
@@ -35028,7 +35248,7 @@
             },
             {
                 "name": "CreateAgentRuntime",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateAgentRuntime.html",
                 "permissionOnly": false,
                 "description": "Grants permission to create a new agent runtime",
                 "accessLevel": "Write",
@@ -35048,7 +35268,7 @@
             },
             {
                 "name": "CreateAgentRuntimeEndpoint",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateAgentRuntimeEndpoint.html",
                 "permissionOnly": false,
                 "description": "Grants permission to create a new agent runtime endpoint",
                 "accessLevel": "Write",
@@ -35072,7 +35292,7 @@
             },
             {
                 "name": "CreateApiKeyCredentialProvider",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateApiKeyCredentialProvider.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateApiKeyCredentialProvider.html",
                 "permissionOnly": false,
                 "description": "Grants permission to create a new API Key Credential Provider",
                 "accessLevel": "Write",
@@ -35093,7 +35313,7 @@
             },
             {
                 "name": "CreateBrowser",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateBrowser.html",
                 "permissionOnly": false,
                 "description": "Grants permission to create a new custom browser",
                 "accessLevel": "Write",
@@ -35111,7 +35331,7 @@
             },
             {
                 "name": "CreateCodeInterpreter",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateCodeInterpreter.html",
                 "permissionOnly": false,
                 "description": "Grants permission to create a new custom code interpreter",
                 "accessLevel": "Write",
@@ -35153,7 +35373,7 @@
             },
             {
                 "name": "CreateGateway",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateGateway.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGateway.html",
                 "permissionOnly": false,
                 "description": "Grants permission to create a new gateway",
                 "accessLevel": "Write",
@@ -35173,7 +35393,7 @@
             },
             {
                 "name": "CreateGatewayTarget",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateGatewayTarget.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGatewayTarget.html",
                 "permissionOnly": false,
                 "description": "Grants permission to create a new target in an existing gateway",
                 "accessLevel": "Write",
@@ -35188,7 +35408,7 @@
             },
             {
                 "name": "CreateMemory",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateMemory.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateMemory.html",
                 "permissionOnly": false,
                 "description": "Grants permission to create a Memory resource",
                 "accessLevel": "Write",
@@ -35196,7 +35416,10 @@
                     {
                         "resourceType": "",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
                         "dependentActions": [
                             "iam:PassRole"
                         ]
@@ -35205,7 +35428,7 @@
             },
             {
                 "name": "CreateOauth2CredentialProvider",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateOauth2CredentialProvider.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateOauth2CredentialProvider.html",
                 "permissionOnly": false,
                 "description": "Grants permission to create a new Credential Provider to access external resources with OAuth2 protocol",
                 "accessLevel": "Write",
@@ -35226,7 +35449,7 @@
             },
             {
                 "name": "CreateWorkloadIdentity",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateWorkloadIdentity.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateWorkloadIdentity.html",
                 "permissionOnly": false,
                 "description": "Grants permission to create a new Workload Identity",
                 "accessLevel": "Write",
@@ -35247,7 +35470,7 @@
             },
             {
                 "name": "DeleteAgentRuntime",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteAgentRuntime.html",
                 "permissionOnly": false,
                 "description": "Grants permission to delete an agent runtime",
                 "accessLevel": "Write",
@@ -35262,7 +35485,7 @@
             },
             {
                 "name": "DeleteAgentRuntimeEndpoint",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteAgentRuntimeEndpoint.html",
                 "permissionOnly": false,
                 "description": "Grants permission to delete an agent runtime endpoint",
                 "accessLevel": "Write",
@@ -35283,7 +35506,7 @@
             },
             {
                 "name": "DeleteApiKeyCredentialProvider",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteApiKeyCredentialProvider.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteApiKeyCredentialProvider.html",
                 "permissionOnly": false,
                 "description": "Grants permission to delete a registered API Key Credential Provider",
                 "accessLevel": "Write",
@@ -35304,7 +35527,7 @@
             },
             {
                 "name": "DeleteBrowser",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteBrowser.html",
                 "permissionOnly": false,
                 "description": "Grants permission to delete a custom browser",
                 "accessLevel": "Write",
@@ -35319,7 +35542,7 @@
             },
             {
                 "name": "DeleteCodeInterpreter",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteCodeInterpreter.html",
                 "permissionOnly": false,
                 "description": "Grants permission to delete a custom code interpreter",
                 "accessLevel": "Write",
@@ -35358,7 +35581,7 @@
             },
             {
                 "name": "DeleteGateway",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteGateway.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGateway.html",
                 "permissionOnly": false,
                 "description": "Grants permission to delete an existing gateway",
                 "accessLevel": "Write",
@@ -35373,7 +35596,7 @@
             },
             {
                 "name": "DeleteGatewayTarget",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteGatewayTarget.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGatewayTarget.html",
                 "permissionOnly": false,
                 "description": "Grants permission to delete an existing gateway target",
                 "accessLevel": "Write",
@@ -35388,7 +35611,7 @@
             },
             {
                 "name": "DeleteMemory",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteMemory.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteMemory.html",
                 "permissionOnly": false,
                 "description": "Grants permission to delete a Memory resource",
                 "accessLevel": "Write",
@@ -35418,7 +35641,7 @@
             },
             {
                 "name": "DeleteOauth2CredentialProvider",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteOauth2CredentialProvider.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteOauth2CredentialProvider.html",
                 "permissionOnly": false,
                 "description": "Grants permission to delete a registered OAuth2 Credential Provider",
                 "accessLevel": "Write",
@@ -35439,7 +35662,7 @@
             },
             {
                 "name": "DeleteWorkloadIdentity",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteWorkloadIdentity.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteWorkloadIdentity.html",
                 "permissionOnly": false,
                 "description": "Grants permission to delete a registered Workload Identity",
                 "accessLevel": "Write",
@@ -35458,9 +35681,30 @@
                     }
                 ]
             },
+            {
+                "name": "GetAgentCard",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetAgentCard.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve an agent card for A2A",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "runtime",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "runtime-endpoint",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetAgentRuntime",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetAgentRuntime.html",
                 "permissionOnly": false,
                 "description": "Grants permission to get details of an agent runtime",
                 "accessLevel": "Read",
@@ -35475,7 +35719,7 @@
             },
             {
                 "name": "GetAgentRuntimeEndpoint",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetAgentRuntimeEndpoint.html",
                 "permissionOnly": false,
                 "description": "Grants permission to get details of an agent runtime endpoint",
                 "accessLevel": "Read",
@@ -35496,7 +35740,7 @@
             },
             {
                 "name": "GetApiKeyCredentialProvider",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetApiKeyCredentialProvider.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetApiKeyCredentialProvider.html",
                 "permissionOnly": false,
                 "description": "Grants permission to fetch a registered API Key Credential Provider by its name",
                 "accessLevel": "Read",
@@ -35517,7 +35761,7 @@
             },
             {
                 "name": "GetBrowser",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetBrowser.html",
                 "permissionOnly": false,
                 "description": "Grants permission to get details of a browser",
                 "accessLevel": "Read",
@@ -35532,7 +35776,7 @@
             },
             {
                 "name": "GetBrowserSession",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetBrowserSession.html",
                 "permissionOnly": false,
                 "description": "Grants permission to get details of a browser session",
                 "accessLevel": "Read",
@@ -35553,7 +35797,7 @@
             },
             {
                 "name": "GetCodeInterpreter",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetCodeInterpreter.html",
                 "permissionOnly": false,
                 "description": "Grants permission to get details of a code interpreter",
                 "accessLevel": "Read",
@@ -35568,7 +35812,7 @@
             },
             {
                 "name": "GetCodeInterpreterSession",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetCodeInterpreterSession.html",
                 "permissionOnly": false,
                 "description": "Grants permission to get details of a code interpreter session",
                 "accessLevel": "Read",
@@ -35613,7 +35857,7 @@
             },
             {
                 "name": "GetGateway",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetGateway.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGateway.html",
                 "permissionOnly": false,
                 "description": "Grants permission to retrieve an existing gateway",
                 "accessLevel": "Read",
@@ -35628,7 +35872,7 @@
             },
             {
                 "name": "GetGatewayTarget",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetGatewayTarget.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGatewayTarget.html",
                 "permissionOnly": false,
                 "description": "Grants permission to retrieve an existing gateway target",
                 "accessLevel": "Read",
@@ -35643,7 +35887,7 @@
             },
             {
                 "name": "GetMemory",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetMemory.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetMemory.html",
                 "permissionOnly": false,
                 "description": "Grants permission to fetch details for a Memory resource",
                 "accessLevel": "Read",
@@ -35673,7 +35917,7 @@
             },
             {
                 "name": "GetOauth2CredentialProvider",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetOauth2CredentialProvider.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetOauth2CredentialProvider.html",
                 "permissionOnly": false,
                 "description": "Grants permission to fetch a registered OAuth2 Credential Provider by its name",
                 "accessLevel": "Read",
@@ -35760,7 +36004,7 @@
             },
             {
                 "name": "GetTokenVault",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetTokenVault.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetTokenVault.html",
                 "permissionOnly": false,
                 "description": "Grants permission to fetch the current configuration of the TokenVault, including encryption settings",
                 "accessLevel": "Read",
@@ -35838,7 +36082,7 @@
             },
             {
                 "name": "GetWorkloadIdentity",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadIdentity.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetWorkloadIdentity.html",
                 "permissionOnly": false,
                 "description": "Grants permission to fetch details for a specific Workload identity, including its name and allowed OAuth2 return URLs",
                 "accessLevel": "Read",
@@ -35859,7 +36103,7 @@
             },
             {
                 "name": "InvokeAgentRuntime",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntime.html",
                 "permissionOnly": false,
                 "description": "Grants permission to invoke an agent runtime endpoint",
                 "accessLevel": "Write",
@@ -35878,9 +36122,30 @@
                     }
                 ]
             },
+            {
+                "name": "InvokeAgentRuntimeForUser",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntime.html",
+                "permissionOnly": false,
+                "description": "Grants permission to invoke an agent runtime endpoint with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "runtime",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "runtime-endpoint",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "InvokeCodeInterpreter",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeCodeInterpreter.html",
                 "permissionOnly": false,
                 "description": "Grants permission to invoke a code interpreter session",
                 "accessLevel": "Write",
@@ -35899,6 +36164,21 @@
                     }
                 ]
             },
+            {
+                "name": "InvokeGateway",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html",
+                "permissionOnly": true,
+                "description": "Grants permission to invoke a gateway",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "gateway",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListActors",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListActors.html",
@@ -35916,7 +36196,7 @@
             },
             {
                 "name": "ListAgentRuntimeEndpoints",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimeEndpoints.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list agent runtime endpoints",
                 "accessLevel": "List",
@@ -35931,7 +36211,7 @@
             },
             {
                 "name": "ListAgentRuntimeVersions",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimeVersions.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list agent runtime versions",
                 "accessLevel": "List",
@@ -35946,7 +36226,7 @@
             },
             {
                 "name": "ListAgentRuntimes",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimes.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list agent runtimes",
                 "accessLevel": "List",
@@ -35961,7 +36241,7 @@
             },
             {
                 "name": "ListApiKeyCredentialProviders",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListApiKeyCredentialProviders.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListApiKeyCredentialProviders.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list all API Key Credential Providers in the Token Vault",
                 "accessLevel": "Read",
@@ -35982,7 +36262,7 @@
             },
             {
                 "name": "ListBrowserSessions",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListBrowserSessions.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list browser sessions",
                 "accessLevel": "List",
@@ -35997,7 +36277,7 @@
             },
             {
                 "name": "ListBrowsers",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListBrowsers.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list browsers",
                 "accessLevel": "List",
@@ -36012,7 +36292,7 @@
             },
             {
                 "name": "ListCodeInterpreterSessions",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListCodeInterpreterSessions.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list code interpreter sessions",
                 "accessLevel": "List",
@@ -36033,7 +36313,7 @@
             },
             {
                 "name": "ListCodeInterpreters",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListCodeInterpreters.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list code interpreters",
                 "accessLevel": "List",
@@ -36072,7 +36352,7 @@
             },
             {
                 "name": "ListGatewayTargets",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListGatewayTargets.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGatewayTargets.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list existing gateway targets",
                 "accessLevel": "List",
@@ -36087,7 +36367,7 @@
             },
             {
                 "name": "ListGateways",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListGateways.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGateways.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list existing gateways",
                 "accessLevel": "List",
@@ -36102,7 +36382,7 @@
             },
             {
                 "name": "ListMemories",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemories.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListMemories.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list memory resources",
                 "accessLevel": "List",
@@ -36141,7 +36421,7 @@
             },
             {
                 "name": "ListOauth2CredentialProviders",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListOauth2CredentialProviders.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListOauth2CredentialProviders.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list all OAuth2 Credential Providers in the Token Vault",
                 "accessLevel": "Read",
@@ -36185,7 +36465,7 @@
             },
             {
                 "name": "ListTagsForResource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListTagsForResource.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListTagsForResource.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list tags for a Bedrock-AgentCore resource",
                 "accessLevel": "List",
@@ -36208,6 +36488,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "memory",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "runtime",
                         "required": false,
@@ -36224,7 +36510,7 @@
             },
             {
                 "name": "ListWorkloadIdentities",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListWorkloadIdentities.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListWorkloadIdentities.html",
                 "permissionOnly": false,
                 "description": "Grants permission to list all Workload Identities in the caller's AWS account",
                 "accessLevel": "Read",
@@ -36269,7 +36555,7 @@
             },
             {
                 "name": "SetTokenVaultCMK",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_SetTokenVaultCMK.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_SetTokenVaultCMK.html",
                 "permissionOnly": false,
                 "description": "Grants permission to associate a Customer Managed Key (CMK) or a Service Managed Key with a specific TokenVault",
                 "accessLevel": "Read",
@@ -36284,7 +36570,7 @@
             },
             {
                 "name": "StartBrowserSession",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartBrowserSession.html",
                 "permissionOnly": false,
                 "description": "Grants permission to starts a new browser session",
                 "accessLevel": "Write",
@@ -36305,7 +36591,7 @@
             },
             {
                 "name": "StartCodeInterpreterSession",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartCodeInterpreterSession.html",
                 "permissionOnly": false,
                 "description": "Grants permission to start a new code interpreter session",
                 "accessLevel": "Write",
@@ -36326,7 +36612,7 @@
             },
             {
                 "name": "StopBrowserSession",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopBrowserSession.html",
                 "permissionOnly": false,
                 "description": "Grants permission to stop a browser session",
                 "accessLevel": "Write",
@@ -36347,7 +36633,7 @@
             },
             {
                 "name": "StopCodeInterpreterSession",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopCodeInterpreterSession.html",
                 "permissionOnly": false,
                 "description": "Grants permission to stop a code interpreter session",
                 "accessLevel": "Write",
@@ -36366,6 +36652,27 @@
                     }
                 ]
             },
+            {
+                "name": "StopRuntimeSession",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopRuntimeSession.html",
+                "permissionOnly": false,
+                "description": "Grants permission to stop a runtime session",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "runtime",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "runtime-endpoint",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "SynchronizeGatewayTargets",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html",
@@ -36383,7 +36690,7 @@
             },
             {
                 "name": "TagResource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_TagResource.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_TagResource.html",
                 "permissionOnly": false,
                 "description": "Grants permission to Tag a Bedrock-AgentCore resource",
                 "accessLevel": "Tagging",
@@ -36406,6 +36713,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "memory",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "runtime",
                         "required": false,
@@ -36431,7 +36744,7 @@
             },
             {
                 "name": "UntagResource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UntagResource.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UntagResource.html",
                 "permissionOnly": false,
                 "description": "Grants permission to Untag a Bedrock-AgentCore resource",
                 "accessLevel": "Tagging",
@@ -36454,6 +36767,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "memory",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "runtime",
                         "required": false,
@@ -36478,7 +36797,7 @@
             },
             {
                 "name": "UpdateAgentRuntime",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateAgentRuntime.html",
                 "permissionOnly": false,
                 "description": "Grants permission to update an agent runtime",
                 "accessLevel": "Write",
@@ -36495,7 +36814,7 @@
             },
             {
                 "name": "UpdateAgentRuntimeEndpoint",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateAgentRuntimeEndpoint.html",
                 "permissionOnly": false,
                 "description": "Grants permission to update an agent runtime endpoint",
                 "accessLevel": "Write",
@@ -36516,7 +36835,7 @@
             },
             {
                 "name": "UpdateApiKeyCredentialProvider",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateApiKeyCredentialProvider.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateApiKeyCredentialProvider.html",
                 "permissionOnly": false,
                 "description": "Grants permission to update an existing API Key Credential Provider",
                 "accessLevel": "Write",
@@ -36537,7 +36856,7 @@
             },
             {
                 "name": "UpdateBrowserStream",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateBrowserStream.html",
                 "permissionOnly": false,
                 "description": "Grants permission to update the status of browser session stream",
                 "accessLevel": "Write",
@@ -36558,7 +36877,7 @@
             },
             {
                 "name": "UpdateGateway",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateGateway.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateGateway.html",
                 "permissionOnly": false,
                 "description": "Grants permission to update an existing gateway",
                 "accessLevel": "Write",
@@ -36575,7 +36894,7 @@
             },
             {
                 "name": "UpdateGatewayTarget",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateGatewayTarget.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateGatewayTarget.html",
                 "permissionOnly": false,
                 "description": "Grants permission to update an existing gateway target",
                 "accessLevel": "Write",
@@ -36590,7 +36909,7 @@
             },
             {
                 "name": "UpdateMemory",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateMemory.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateMemory.html",
                 "permissionOnly": false,
                 "description": "Grants permission to update a Memory resource",
                 "accessLevel": "Write",
@@ -36607,7 +36926,7 @@
             },
             {
                 "name": "UpdateOauth2CredentialProvider",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateOauth2CredentialProvider.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateOauth2CredentialProvider.html",
                 "permissionOnly": false,
                 "description": "Grants permission to update an existing OAuth2 Credential Provider",
                 "accessLevel": "Write",
@@ -36628,7 +36947,7 @@
             },
             {
                 "name": "UpdateWorkloadIdentity",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateWorkloadIdentity.html",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateWorkloadIdentity.html",
                 "permissionOnly": false,
                 "description": "Grants permission to update the metadata of an existing Workload Identity",
                 "accessLevel": "Write",
@@ -36653,7 +36972,9 @@
                 "name": "memory",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/memory.html",
                 "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/${MemoryId}",
-                "conditionKeys": []
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             },
             {
                 "name": "gateway",
@@ -36757,6 +37078,12 @@
                 "description": "Filters access by creating requests based on the presence of mandatory tags in the request",
                 "type": "ArrayOfString"
             },
+            {
+                "name": "bedrock-agentcore:GatewayAuthorizerType",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-gatewayAuthorizerType",
+                "description": "Filters access by the authorizerType attribute on a Gateway",
+                "type": "String"
+            },
             {
                 "name": "bedrock-agentcore:actorId",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-actorId",
@@ -151047,8 +151374,18 @@
                         "conditionKeys": [],
                         "dependentActions": [
                             "iam:CreateServiceLinkedRole",
-                            "imagebuilder:GetImagePipeline"
+                            "imagebuilder:GetImagePipeline",
+                            "imagebuilder:TagResource"
                         ]
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -309206,6 +309543,30 @@
                     }
                 ]
             },
+            {
+                "name": "CreateActionConnector",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateActionConnector.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create an action connector",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "actionconnector",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "CreateAdmin",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
@@ -309378,6 +309739,21 @@
                     }
                 ]
             },
+            {
+                "name": "CreateExtensionAccess",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
+                "permissionOnly": true,
+                "description": "Grants permission to create an extension access",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "extensionaccess",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "CreateFolder",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateFolder.html",
@@ -309796,6 +310172,21 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteActionConnector",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteActionConnector.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete an action connector",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "actionconnector",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DeleteAnalysis",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteAnalysis.html",
@@ -309964,6 +310355,21 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteExtensionAccess",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
+                "permissionOnly": true,
+                "description": "Grants permission to delete an extension access",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "extensionaccess",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DeleteFolder",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteFolder.html",
@@ -310366,6 +310772,66 @@
                     }
                 ]
             },
+            {
+                "name": "DescribeActionConnector",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeActionConnector.html",
+                "permissionOnly": false,
+                "description": "Grants permission to describe an action connector",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "actionconnector",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DescribeActionConnectorPermissions",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeActionConnectorPermissions.html",
+                "permissionOnly": false,
+                "description": "Grants permission to describe permissions for an action connector",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "actionconnector",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DescribeAgent",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
+                "permissionOnly": true,
+                "description": "Grants permission to describe an agent",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "agent",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DescribeAgentPermissions",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
+                "permissionOnly": true,
+                "description": "Grants permission to describe agent's permissions",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "agent",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DescribeAnalysis",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeAnalysis.html",
@@ -310471,6 +310937,21 @@
                     }
                 ]
             },
+            {
+                "name": "DescribeChatConfiguration",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
+                "permissionOnly": true,
+                "description": "Grants permission to describe chat configuration",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DescribeCustomPermissions",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeCustomPermissions.html",
@@ -310702,6 +311183,21 @@
                     }
                 ]
             },
+            {
+                "name": "DescribeExtensionAccess",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
+                "permissionOnly": true,
+                "description": "Grants permission to describe an extension access",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "extensionaccess",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DescribeFolder",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeFolder.html",
@@ -310878,6 +311374,21 @@
                     }
                 ]
             },
+            {
+                "name": "DescribeQuickIndexCapacity",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
+                "permissionOnly": true,
+                "description": "Grants permission to describe index capacity",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DescribeQuickSightQSearchConfiguration",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeQuickSightQSearchConfiguration.html",
@@ -311250,6 +311761,21 @@
                     }
                 ]
             },
+            {
+                "name": "GetCustomPermissionsSummary",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
+                "permissionOnly": true,
+                "description": "Grants permission to get information about the custom permissions in an account",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetDashboardEmbedUrl",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_GetDashboardEmbedUrl.html",
@@ -311265,6 +311791,36 @@
                     }
                 ]
             },
+            {
+                "name": "GetFlowMetadata",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_GetFlowMetadata.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get metadata for a flow",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "flow",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetFlowPermissions",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_GetFlowPermissions.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get permissions for a flow",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "flow",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetGroupMapping",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
@@ -311295,6 +311851,36 @@
                     }
                 ]
             },
+            {
+                "name": "ListActionConnectors",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListActionConnectors.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list action connectors",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListAgents",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
+                "permissionOnly": true,
+                "description": "Grants permission to list agents",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "agent",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListAnalyses",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListAnalyses.html",
@@ -311451,6 +312037,36 @@
                     }
                 ]
             },
+            {
+                "name": "ListExtensionAccesses",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
+                "permissionOnly": true,
+                "description": "Grants permission to list extension accesses",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListFlows",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListFlows.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list all flows in an Amazon QuickSight account",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListFolderMembers",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListFolderMembers.html",
@@ -311680,6 +312296,12 @@
                 "description": "Grants permission to list tags of a QuickSight resource",
                 "accessLevel": "Read",
                 "resourceTypes": [
+                    {
+                        "resourceType": "actionconnector",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "analysis",
                         "required": false,
@@ -311722,6 +312344,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "flow",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "folder",
                         "required": false,
@@ -312027,6 +312655,21 @@
                     }
                 ]
             },
+            {
+                "name": "QuickSuiteUsageMetrics",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
+                "permissionOnly": true,
+                "description": "Grants permission to get QuickSuite usage metrics",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "RegisterCustomerManagedKey",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/key-management.html",
@@ -312105,6 +312748,36 @@
                     }
                 ]
             },
+            {
+                "name": "SearchActionConnectors",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_SearchActionConnectors.html",
+                "permissionOnly": false,
+                "description": "Grants permission to search action connectors",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "actionconnector",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "SearchAgents",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
+                "permissionOnly": true,
+                "description": "Grants permission to search agents",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "agent",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "SearchAnalyses",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_SearchAnalyses.html",
@@ -312180,6 +312853,21 @@
                     }
                 ]
             },
+            {
+                "name": "SearchFlows",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_SearchFlows.html",
+                "permissionOnly": false,
+                "description": "Grants permission to search flows in an Amazon QuickSight account",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "SearchFolders",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_SearchFolders.html",
@@ -312340,6 +313028,12 @@
                 "description": "Grants permission to add tags to a QuickSight resource",
                 "accessLevel": "Tagging",
                 "resourceTypes": [
+                    {
+                        "resourceType": "actionconnector",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "analysis",
                         "required": false,
@@ -312382,6 +313076,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "flow",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "folder",
                         "required": false,
@@ -312429,6 +313129,21 @@
                     }
                 ]
             },
+            {
+                "name": "UnpublishFlow",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
+                "permissionOnly": true,
+                "description": "Grants permission to unpublish a flow",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "flow",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "Unsubscribe",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
@@ -312451,6 +313166,12 @@
                 "description": "Grants permission to remove tags from a QuickSight resource",
                 "accessLevel": "Tagging",
                 "resourceTypes": [
+                    {
+                        "resourceType": "actionconnector",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "analysis",
                         "required": false,
@@ -312493,6 +313214,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "flow",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "folder",
                         "required": false,
@@ -312584,6 +313311,51 @@
                     }
                 ]
             },
+            {
+                "name": "UpdateActionConnector",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_UpdateActionConnector.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update an action connector",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "actionconnector",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateActionConnectorPermissions",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_UpdateActionConnectorPermissions.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update permissions for an action connector",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "actionconnector",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateAgentPermissions",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
+                "permissionOnly": true,
+                "description": "Grants permission to update agent permissions",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "agent",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "UpdateAnalysis",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_UpdateAnalysis.html",
@@ -312674,6 +313446,21 @@
                     }
                 ]
             },
+            {
+                "name": "UpdateChatConfiguration",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
+                "permissionOnly": true,
+                "description": "Grants permission to update chat configuration",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "UpdateCustomPermissions",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_UpdateCustomPermissions.html",
@@ -312900,6 +313687,36 @@
                     }
                 ]
             },
+            {
+                "name": "UpdateExtensionAccess",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
+                "permissionOnly": true,
+                "description": "Grants permission to update an extension access",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "extensionaccess",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateFlowPermissions",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_UpdateFlowPermissions.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update permissions for a flow",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "flow",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "UpdateFolder",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_UpdateFolder.html",
@@ -313035,6 +313852,21 @@
                     }
                 ]
             },
+            {
+                "name": "UpdateQuickIndexCapacity",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
+                "permissionOnly": true,
+                "description": "Grants permission to update index capacity",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "UpdateQuickSightQSearchConfiguration",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_UpdateQuickSightQSearchConfiguration.html",
@@ -313494,6 +314326,34 @@
                 "conditionKeys": [
                     "aws:ResourceTag/${TagKey}"
                 ]
+            },
+            {
+                "name": "actionconnector",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ActionConnectorDetail.html",
+                "arnPattern": "arn:${Partition}:quicksight:${Region}:${Account}:action-connector/${ResourceId}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
+            },
+            {
+                "name": "agent",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
+                "arnPattern": "arn:${Partition}:quicksight:${Region}:${Account}:agent/${ResourceId}",
+                "conditionKeys": []
+            },
+            {
+                "name": "extensionaccess",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
+                "arnPattern": "arn:${Partition}:quicksight:${Region}:${Account}:extension-access/${ResourceId}",
+                "conditionKeys": []
+            },
+            {
+                "name": "flow",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_Flow.html",
+                "arnPattern": "arn:${Partition}:quicksight:${Region}:${Account}:flow/${ResourceId}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             }
         ],
         "conditionKeys": [
@@ -409293,7 +410153,8 @@
                             "kms:CreateGrant",
                             "kms:Decrypt",
                             "kms:DescribeKey",
-                            "kms:GenerateDataKey"
+                            "kms:GenerateDataKey",
+                            "workspaces-web:TagResource"
                         ]
                     }
                 ]
@@ -409312,7 +410173,9 @@
                             "aws:TagKeys",
                             "aws:RequestTag/${TagKey}"
                         ],
-                        "dependentActions": []
+                        "dependentActions": [
+                            "workspaces-web:TagResource"
+                        ]
                     }
                 ]
             },
@@ -409360,7 +410223,9 @@
                             "aws:TagKeys",
                             "aws:RequestTag/${TagKey}"
                         ],
-                        "dependentActions": []
+                        "dependentActions": [
+                            "workspaces-web:TagResource"
+                        ]
                     }
                 ]
             },
@@ -409379,7 +410244,8 @@
                             "aws:RequestTag/${TagKey}"
                         ],
                         "dependentActions": [
-                            "iam:CreateServiceLinkedRole"
+                            "iam:CreateServiceLinkedRole",
+                            "workspaces-web:TagResource"
                         ]
                     }
                 ]
@@ -409403,7 +410269,8 @@
                             "kms:CreateGrant",
                             "kms:Decrypt",
                             "kms:DescribeKey",
-                            "kms:GenerateDataKey"
+                            "kms:GenerateDataKey",
+                            "workspaces-web:TagResource"
                         ]
                     }
                 ]
@@ -409422,7 +410289,10 @@
                             "aws:TagKeys",
                             "aws:RequestTag/${TagKey}"
                         ],
-                        "dependentActions": []
+                        "dependentActions": [
+                            "s3:PutObject",
+                            "workspaces-web:TagResource"
+                        ]
                     }
                 ]
             },
@@ -409440,7 +410310,9 @@
                             "aws:TagKeys",
                             "aws:RequestTag/${TagKey}"
                         ],
-                        "dependentActions": []
+                        "dependentActions": [
+                            "workspaces-web:TagResource"
+                        ]
                     }
                 ]
             },
@@ -409458,7 +410330,9 @@
                             "aws:TagKeys",
                             "aws:RequestTag/${TagKey}"
                         ],
-                        "dependentActions": []
+                        "dependentActions": [
+                            "workspaces-web:TagResource"
+                        ]
                     }
                 ]
             },
@@ -409476,7 +410350,9 @@
                             "aws:TagKeys",
                             "aws:RequestTag/${TagKey}"
                         ],
-                        "dependentActions": []
+                        "dependentActions": [
+                            "workspaces-web:TagResource"
+                        ]
                     }
                 ]
             },