aws-iam-data 0.0.598 → 0.0.600

package/dist/data/json/iam.json

@@ -32062,6 +32062,21 @@
         "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html",
         "servicePrefix": "bedrock",
         "actions": [
+            {
+                "name": "AgenticRetrieveStream",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to perform agentic retrieve with streaming from retrievers",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "AllowVendedLogDeliveryForResource",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
@@ -32151,6 +32166,21 @@
                     }
                 ]
             },
+            {
+                "name": "BatchDeleteAdvancedPromptOptimizationJob",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_BatchDeleteAdvancedPromptOptimizationJob.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete one or more advanced prompt optimization jobs",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "advanced-prompt-optimization-job",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "BatchDeleteEvaluationJob",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_BatchDeleteEvaluationJob.html",
@@ -32228,6 +32258,24 @@
                     }
                 ]
             },
+            {
+                "name": "CreateAdvancedPromptOptimizationJob",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateAdvancedPromptOptimizationJob.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create an advanced prompt optimization job",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "CreateAgent",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreateAgent.html",
@@ -33488,6 +33536,12 @@
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "knowledge-base",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -33638,6 +33692,21 @@
                     }
                 ]
             },
+            {
+                "name": "GetAdvancedPromptOptimizationJob",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetAdvancedPromptOptimizationJob.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get information about an advanced prompt optimization job",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "advanced-prompt-optimization-job",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetAgent",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetAgent.html",
@@ -34046,6 +34115,21 @@
                     }
                 ]
             },
+            {
+                "name": "GetDocumentContent",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve a document",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetEvaluationJob",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetEvaluationJob.html",
@@ -34487,6 +34571,12 @@
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "knowledge-base",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -34733,6 +34823,21 @@
                     }
                 ]
             },
+            {
+                "name": "InvokeGuardrailChecks",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to invoke guardrail checks",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "InvokeInlineAgent",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_InvokeInlineAgent.html",
@@ -34933,6 +35038,21 @@
                     }
                 ]
             },
+            {
+                "name": "ListAdvancedPromptOptimizationJobs",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListAdvancedPromptOptimizationJobs.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list the advanced prompt optimization jobs in your account",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListAgentActionGroups",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListAgentActionGroups.html",
@@ -35654,6 +35774,12 @@
                 "description": "Grants permission to list tags for a Bedrock resource",
                 "accessLevel": "Read",
                 "resourceTypes": [
+                    {
+                        "resourceType": "advanced-prompt-optimization-job",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "agent",
                         "required": true,
@@ -35983,6 +36109,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "knowledge-base",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "",
                         "required": false,
@@ -36156,6 +36288,21 @@
                     }
                 ]
             },
+            {
+                "name": "StopAdvancedPromptOptimizationJob",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_StopAdvancedPromptOptimizationJob.html",
+                "permissionOnly": false,
+                "description": "Grants permission to stop an advanced prompt optimization job while in progress",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "advanced-prompt-optimization-job",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "StopEvaluationJob",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_StopEvaluationJob.html",
@@ -36250,6 +36397,12 @@
                 "description": "Grants permission to Tag a Bedrock resource",
                 "accessLevel": "Tagging",
                 "resourceTypes": [
+                    {
+                        "resourceType": "advanced-prompt-optimization-job",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "agent",
                         "required": false,
@@ -36448,6 +36601,12 @@
                 "description": "Grants permission to Untag a Bedrock resource",
                 "accessLevel": "Tagging",
                 "resourceTypes": [
+                    {
+                        "resourceType": "advanced-prompt-optimization-job",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "agent",
                         "required": false,
@@ -37311,6 +37470,14 @@
                 "conditionKeys": [
                     "aws:ResourceTag/${TagKey}"
                 ]
+            },
+            {
+                "name": "advanced-prompt-optimization-job",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "arnPattern": "arn:${Partition}:bedrock:${Region}:${Account}:advanced-prompt-optimization-job/${ResourceId}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             }
         ],
         "conditionKeys": [
@@ -37842,12 +38009,40 @@
                         ],
                         "dependentActions": [
                             "bedrock-agentcore:CreateAgentRuntime",
+                            "bedrock-agentcore:CreateMemory",
                             "bedrock-agentcore:GetAgentRuntime",
+                            "bedrock-agentcore:GetMemory",
                             "iam:PassRole"
                         ]
                     }
                 ]
             },
+            {
+                "name": "CreateHarnessEndpoint",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateHarnessEndpoint.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a new harness endpoint",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "harness",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": [
+                            "bedrock-agentcore:CreateAgentRuntimeEndpoint"
+                        ]
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "CreateMemory",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateMemory.html",
@@ -38352,12 +38547,37 @@
                         "conditionKeys": [],
                         "dependentActions": [
                             "bedrock-agentcore:DeleteAgentRuntime",
+                            "bedrock-agentcore:DeleteMemory",
                             "bedrock-agentcore:GetAgentRuntime",
+                            "bedrock-agentcore:GetMemory",
                             "iam:PassRole"
                         ]
                     }
                 ]
             },
+            {
+                "name": "DeleteHarnessEndpoint",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteHarnessEndpoint.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a harness endpoint",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "harness",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": [
+                            "bedrock-agentcore:DeleteAgentRuntimeEndpoint"
+                        ]
+                    },
+                    {
+                        "resourceType": "harness-endpoint",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DeleteMemory",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteMemory.html",
@@ -38649,6 +38869,66 @@
                     }
                 ]
             },
+            {
+                "name": "GatewayAssociateWebACL",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "permissionOnly": true,
+                "description": "Grants permission to associate an AWS WAF Web ACL with an AgentCore Gateway",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "gateway",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GatewayDisassociateWebACL",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "permissionOnly": true,
+                "description": "Grants permission to remove the AWS WAF Web ACL association from an AgentCore Gateway",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "gateway",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GatewayGetWebACLForResource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "permissionOnly": true,
+                "description": "Grants permission to retrieve the AWS WAF Web ACL ARN currently associated with an AgentCore Gateway",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "gateway",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GatewayListResourcesForWebACL",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
+                "permissionOnly": true,
+                "description": "Grants permission to list AgentCore Gateways associated with an AWS WAF Web ACL",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetABTest",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetABTest.html",
@@ -38973,6 +39253,27 @@
                     }
                 ]
             },
+            {
+                "name": "GetHarnessEndpoint",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetHarnessEndpoint.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get details of a harness endpoint",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "harness",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "harness-endpoint",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetMemory",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetMemory.html",
@@ -39715,6 +40016,12 @@
                         "dependentActions": [
                             "bedrock-agentcore:InvokeAgentRuntime"
                         ]
+                    },
+                    {
+                        "resourceType": "harness-endpoint",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -39733,6 +40040,21 @@
                     }
                 ]
             },
+            {
+                "name": "InvokeWebSearch",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html",
+                "permissionOnly": true,
+                "description": "Grants permission to invoke a web search target",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "web-search",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListABTests",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListABTests.html",
@@ -40039,6 +40361,21 @@
                     }
                 ]
             },
+            {
+                "name": "ListHarnessEndpoints",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListHarnessEndpoints.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list harness endpoints",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListHarnesses",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListHarnesses.html",
@@ -41389,13 +41726,39 @@
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": [
+                            "bedrock-agentcore:CreateMemory",
                             "bedrock-agentcore:GetAgentRuntime",
+                            "bedrock-agentcore:GetMemory",
                             "bedrock-agentcore:UpdateAgentRuntime",
+                            "bedrock-agentcore:UpdateMemory",
                             "iam:PassRole"
                         ]
                     }
                 ]
             },
+            {
+                "name": "UpdateHarnessEndpoint",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateHarnessEndpoint.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update harness endpoint",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "harness",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": [
+                            "bedrock-agentcore:UpdateAgentRuntimeEndpoint"
+                        ]
+                    },
+                    {
+                        "resourceType": "harness-endpoint",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "UpdateMemory",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateMemory.html",
@@ -41772,29 +42135,45 @@
                     "aws:ResourceTag/${TagKey}"
                 ]
             },
+            {
+                "name": "harness-endpoint",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/harness-endpoint.html",
+                "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:harness/${HarnessId}/harness-endpoint/${Name}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
+            },
             {
                 "name": "batch-evaluate",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/batchEvaluation.html",
                 "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:batch-evaluate/${BatchEvaluationId}",
-                "conditionKeys": []
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             },
             {
                 "name": "ab-test",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/abTest.html",
                 "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:ab-test/${ABTestId}",
-                "conditionKeys": []
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             },
             {
                 "name": "recommendation",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/recommendation.html",
                 "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:recommendation/${RecommendationId}",
-                "conditionKeys": []
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             },
             {
                 "name": "configuration-bundle",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/configurationBundle.html",
                 "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:configuration-bundle/${ConfigurationBundleId}",
-                "conditionKeys": []
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             },
             {
                 "name": "payment-manager",
@@ -41811,6 +42190,12 @@
                 "conditionKeys": [
                     "aws:ResourceTag/${TagKey}"
                 ]
+            },
+            {
+                "name": "web-search",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/webSearch.html",
+                "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:tool/web-search.v1",
+                "conditionKeys": []
             }
         ],
         "conditionKeys": [
@@ -68570,7 +68955,11 @@
                         "resourceType": "alarm",
                         "required": true,
                         "conditionKeys": [],
-                        "dependentActions": []
+                        "dependentActions": [
+                            "logs:CreateScheduledQuery",
+                            "logs:DeleteScheduledQuery",
+                            "logs:GetScheduledQuery"
+                        ]
                     }
                 ]
             },
@@ -68859,6 +69248,29 @@
                     }
                 ]
             },
+            {
+                "name": "GetDataset",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_GetDataset.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get a dataset",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "dataset",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetInsightRuleReport",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_GetInsightRuleReport.html",
@@ -68878,13 +69290,15 @@
                 "name": "GetMetricData",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_GetMetricData.html",
                 "permissionOnly": false,
-                "description": "Grants permission to retrieve batch amounts of CloudWatch metric data and perform metric math on retrieved data",
+                "description": "Grants permission to retrieve batch amounts of CloudWatch classic metric data and perform metric math on retrieved data; and grants permission to retrieve OTLP metric data using PromQL",
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
-                        "resourceType": "",
+                        "resourceType": "dataset",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     }
                 ]
@@ -69126,9 +69540,11 @@
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
-                        "resourceType": "",
+                        "resourceType": "dataset",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     }
                 ]
@@ -69173,31 +69589,65 @@
                     {
                         "resourceType": "alarm",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
                         "resourceType": "alarm-mute-rule",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
                         "resourceType": "dashboard",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "dataset",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
                         "resourceType": "insight-rule",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "metric-stream",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "service",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
                         "resourceType": "slo",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
@@ -69218,12 +69668,30 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "dataset",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "insight-rule",
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "metric-stream",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "service",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "slo",
                         "required": true,
@@ -69351,6 +69819,37 @@
                     }
                 ]
             },
+            {
+                "name": "PutLogAlarm",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutLogAlarm.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create or update a log-based alarm and associate it with a CloudWatch Logs Insights scheduled query",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "alarm",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": [
+                            "iam:PassRole",
+                            "logs:CreateScheduledQuery",
+                            "logs:DeleteScheduledQuery",
+                            "logs:GetScheduledQuery",
+                            "logs:UpdateScheduledQuery"
+                        ]
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys",
+                            "cloudwatch:AlarmActions"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "PutManagedInsightRules",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutManagedInsightRules.html",
@@ -69383,6 +69882,14 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "dataset",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "",
                         "required": false,
@@ -69399,9 +69906,17 @@
                 "name": "PutMetricData",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutMetricData.html",
                 "permissionOnly": false,
-                "description": "Grants permission to publish metric data points to Amazon CloudWatch",
+                "description": "Grants permission to publish metric data points to Amazon CloudWatch using CloudWatch and OTLP formats",
                 "accessLevel": "Write",
                 "resourceTypes": [
+                    {
+                        "resourceType": "dataset",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "",
                         "required": false,
@@ -69521,31 +70036,65 @@
                     {
                         "resourceType": "alarm",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
                         "resourceType": "alarm-mute-rule",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
                         "resourceType": "dashboard",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "dataset",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
                         "resourceType": "insight-rule",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "metric-stream",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "service",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
                         "resourceType": "slo",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
@@ -69575,12 +70124,30 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "dataset",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "insight-rule",
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "metric-stream",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "service",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "slo",
                         "required": true,
@@ -69599,31 +70166,65 @@
                     {
                         "resourceType": "alarm",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
                         "resourceType": "alarm-mute-rule",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
                         "resourceType": "dashboard",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "dataset",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
                         "resourceType": "insight-rule",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "metric-stream",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "service",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
                         "resourceType": "slo",
                         "required": false,
-                        "conditionKeys": [],
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}"
+                        ],
                         "dependentActions": []
                     },
                     {
@@ -69652,12 +70253,30 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "dataset",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "insight-rule",
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "metric-stream",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "service",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "slo",
                         "required": true,
@@ -69707,6 +70326,14 @@
                     "aws:ResourceTag/${TagKey}"
                 ]
             },
+            {
+                "name": "dataset",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/auth-and-access-control-cw.html",
+                "arnPattern": "arn:${Partition}:cloudwatch:${Region}:${Account}:dataset/${DatasetId}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
+            },
             {
                 "name": "insight-rule",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/auth-and-access-control-cw.html",
@@ -69744,37 +70371,37 @@
             {
                 "name": "aws:RequestTag/${TagKey}",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag",
-                "description": "Filters actions based on the allowed set of values for each of the tags",
+                "description": "Filters access by the presence of tags in the request",
                 "type": "String"
             },
             {
                 "name": "aws:ResourceTag/${TagKey}",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag",
-                "description": "Filters actions based on tag-value associated with the resource",
+                "description": "Filters access by tags associated with the resource",
                 "type": "String"
             },
             {
                 "name": "aws:TagKeys",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys",
-                "description": "Filters actions based on the presence of mandatory tags in the request",
+                "description": "Filters access by the presence of tags in the request",
                 "type": "ArrayOfString"
             },
             {
                 "name": "cloudwatch:AlarmActions",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/iam-cw-condition-keys-alarm-actions.html",
-                "description": "Filters actions based on defined alarm actions",
+                "description": "Filters access by defined alarm actions",
                 "type": "ArrayOfString"
             },
             {
                 "name": "cloudwatch:namespace",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/iam-cw-condition-keys-namespace.html",
-                "description": "Filters actions based on the presence of optional namespace values",
+                "description": "Filters access by the presence of optional namespace values",
                 "type": "String"
             },
             {
                 "name": "cloudwatch:requestInsightRuleLogGroups",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/iam-cw-condition-keys-contributor.html",
-                "description": "Filters actions based on the Log Groups specified in an Insight Rule",
+                "description": "Filters access by the Log Groups specified in an Insight Rule",
                 "type": "ArrayOfString"
             },
             {
@@ -103246,8 +103873,8 @@
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
-                        "resourceType": "contact",
-                        "required": true,
+                        "resourceType": "",
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     }
@@ -121206,6 +121833,21 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteLineageEvent",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteLineageEvent.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete lineage events",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DeleteListing",
                 "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteListing.html",
@@ -121506,6 +122148,21 @@
                     }
                 ]
             },
+            {
+                "name": "GetCompute",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetCompute.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get compute",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetConnection",
                 "apiReferenceUrl": "${APIReferenceDocPage}API_GetConnection.html",
@@ -123096,6 +123753,21 @@
                     }
                 ]
             },
+            {
+                "name": "StartCompute",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_StartCompute.html",
+                "permissionOnly": false,
+                "description": "Grants permission to start compute",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "StartConversation",
                 "apiReferenceUrl": "${APIReferenceDocPage}API_StartConversation.html",
@@ -123186,6 +123858,36 @@
                     }
                 ]
             },
+            {
+                "name": "StartNotebookSync",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_StartNotebookSync.html",
+                "permissionOnly": false,
+                "description": "Grants permission to start notebook sync",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "StopCompute",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_StopCompute.html",
+                "permissionOnly": false,
+                "description": "Grants permission to stop compute",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "StopMetadataGenerationRun",
                 "apiReferenceUrl": "${APIReferenceDocPage}API_StopMetadataGenerationRun.html",
@@ -173642,6 +174344,7 @@
                             "ecs:propagate-tags",
                             "ecs:subnet",
                             "ecs:task-cpu",
+                            "ecs:task-definition",
                             "ecs:task-memory"
                         ],
                         "dependentActions": []
@@ -176882,7 +177585,8 @@
                             "eks:deletionProtection",
                             "eks:controlPlaneScalingTier",
                             "eks:encryptionConfigProviderKeyArns",
-                            "eks:zonalShiftEnabled"
+                            "eks:zonalShiftEnabled",
+                            "eks:controlPlaneEgressMode"
                         ],
                         "dependentActions": []
                     }
@@ -177985,7 +178689,8 @@
                             "eks:endpointPrivateAccess",
                             "eks:deletionProtection",
                             "eks:controlPlaneScalingTier",
-                            "eks:zonalShiftEnabled"
+                            "eks:zonalShiftEnabled",
+                            "eks:controlPlaneEgressMode"
                         ],
                         "dependentActions": []
                     }
@@ -178241,6 +178946,12 @@
                 "description": "Filters access by the compute config enabled parameter in the create / update cluster request",
                 "type": "Bool"
             },
+            {
+                "name": "eks:controlPlaneEgressMode",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/eks/latest/userguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies",
+                "description": "Filters access by the control plane egress mode specified in the create / update cluster request",
+                "type": "String"
+            },
             {
                 "name": "eks:controlPlaneScalingTier",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/eks/latest/userguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies",
@@ -240296,14 +241007,6 @@
                 "conditionKeys": [
                     "aws:ResourceTag/${TagKey}"
                 ]
-            },
-            {
-                "name": "Connector",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html",
-                "arnPattern": "arn:${Partition}:inspector2:${Region}:${Account}:connector/${ConnectorId}",
-                "conditionKeys": [
-                    "aws:ResourceTag/${TagKey}"
-                ]
             }
         ],
         "conditionKeys": [
@@ -300806,6 +301509,21 @@
                     }
                 ]
             },
+            {
+                "name": "DescribeSharedResources",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/amazon-mq/latest/api-reference/brokers-broker-id-shared-resources.html",
+                "permissionOnly": false,
+                "description": "Grants permission to return the resources shared to a broker",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "brokers",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DescribeUser",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/amazon-mq/latest/api-reference/rest-api-username.html#rest-api-username-methods-get",
@@ -311724,6 +312442,21 @@
                     }
                 ]
             },
+            {
+                "name": "AttachDataSource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_AttachDataSource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to attach a data source to an OpenSearch Application",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "application",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "AuthorizeVpcEndpointAccess",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_AuthorizeVpcEndpointAccess.html",
@@ -312165,6 +312898,21 @@
                     }
                 ]
             },
+            {
+                "name": "DescribeDataSourceAttachment",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeDataSourceAttachment.html",
+                "permissionOnly": false,
+                "description": "Grants permission to describe the status of a data source attachment for an OpenSearch Application",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "application",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DescribeDomain",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DescribeDomain.html",
@@ -312525,6 +313273,21 @@
                     }
                 ]
             },
+            {
+                "name": "DetachDataSource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DetachDataSource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to detach a data source from an OpenSearch Application",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "application",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DissociatePackage",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_DissociatePackage.html",
@@ -312855,6 +313618,21 @@
                     }
                 ]
             },
+            {
+                "name": "ListDataSourceAttachments",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListDataSourceAttachments.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list data source attachments for an OpenSearch Application",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "application",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListDataSources",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_ListDataSources.html",
@@ -339805,6 +340583,21 @@
                     }
                 ]
             },
+            {
+                "name": "BatchAssignLimitsProfile",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_BatchAssignLimitsProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to assign a limits profile to targets",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "limitsProfile",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "BatchCreateTopicReviewedAnswer",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_BatchCreateTopicReviewedAnswer.html",
@@ -339883,6 +340676,21 @@
                     }
                 ]
             },
+            {
+                "name": "BatchUnassignLimitsProfile",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_BatchUnassignLimitsProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to unassign a limits profile from targets",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "limitsProfile",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "BatchUpdatePreferences",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/user/iam-actions.html",
@@ -340345,6 +341153,30 @@
                     }
                 ]
             },
+            {
+                "name": "CreateLimitsProfile",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateLimitsProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a limits profile",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "limitsProfile",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "CreateNamespace",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CreateNamespace.html",
@@ -341021,6 +341853,21 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteLimitsProfile",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteLimitsProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a limits profile",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "limitsProfile",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DeleteNamespace",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DeleteNamespace.html",
@@ -341472,6 +342319,36 @@
                     }
                 ]
             },
+            {
+                "name": "DescribeAutomationGroup",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeAutomationGroup.html",
+                "permissionOnly": false,
+                "description": "Grants permission to describe an automation group",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "automationGroup",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DescribeAutomationGroupPermissions",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeAutomationGroupPermissions.html",
+                "permissionOnly": false,
+                "description": "Grants permission to describe permissions for an automation group",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "automationGroup",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DescribeAutomationJob",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeAutomationJob.html",
@@ -341984,6 +342861,21 @@
                     }
                 ]
             },
+            {
+                "name": "DescribeLimitsProfile",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeLimitsProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to describe a limits profile",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "limitsProfile",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DescribeNamespace",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DescribeNamespace.html",
@@ -342650,6 +343542,36 @@
                     }
                 ]
             },
+            {
+                "name": "ListAssignmentsForPrincipal",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListAssignmentsForPrincipal.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list limits profile assignments for a principal",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "limitsProfile",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListAutomationGroups",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListAutomationGroups.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list all automation groups in an account",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListBrands",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListBrands.html",
@@ -342983,6 +343905,21 @@
                     }
                 ]
             },
+            {
+                "name": "ListLimitsProfiles",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListLimitsProfiles.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list limits profiles",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "limitsProfile",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListNamespaces",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListNamespaces.html",
@@ -343016,6 +343953,21 @@
                     }
                 ]
             },
+            {
+                "name": "ListProfileAssignments",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListProfileAssignments.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list assignments for a limits profile",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "limitsProfile",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListRefreshSchedules",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ListRefreshSchedules.html",
@@ -343643,6 +344595,21 @@
                     }
                 ]
             },
+            {
+                "name": "SearchAutomationGroups",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_SearchAutomationGroups.html",
+                "permissionOnly": false,
+                "description": "Grants permission to search for automation groups in an account",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "SearchDashboards",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_SearchDashboards.html",
@@ -344359,6 +345326,21 @@
                     }
                 ]
             },
+            {
+                "name": "UpdateAutomationGroupPermissions",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_UpdateAutomationGroupPermissions.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update permissions for an automation group",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "automationGroup",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "UpdateBrand",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_UpdateBrand.html",
@@ -344810,6 +345792,21 @@
                     }
                 ]
             },
+            {
+                "name": "UpdateLimitsProfile",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_UpdateLimitsProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a limits profile",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "limitsProfile",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "UpdateOAuthClientApplication",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_UpdateOAuthClientApplication.html",
@@ -345493,6 +346490,14 @@
                 "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ApprovalPolicy.html",
                 "arnPattern": "arn:${Partition}:quicksight:${Region}:${Account}:approval-policy/${ResourceId}",
                 "conditionKeys": []
+            },
+            {
+                "name": "limitsProfile",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/quicksight/latest/APIReference/API_LimitsProfile.html",
+                "arnPattern": "arn:${Partition}:quicksight:${Region}:${Account}:limits-profile/${ResourceId}",
+                "conditionKeys": [
+                    "aws:ResourceTag/${TagKey}"
+                ]
             }
         ],
         "conditionKeys": [
@@ -370485,6 +371490,42 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteObjectAnnotation",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectAnnotation.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete an annotation from an object",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "object",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "s3:authType",
+                            "s3:signatureAge",
+                            "s3:signatureversion",
+                            "s3:TlsVersion",
+                            "s3:x-amz-content-sha256",
+                            "s3:ResourceAccount",
+                            "s3:x-amz-object-if-match",
+                            "s3:ExistingObjectTag/<key>"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DeleteObjectTagging",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectTagging.html",
@@ -370556,6 +371597,43 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteObjectVersionAnnotation",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectAnnotation.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete an annotation from a specific version of an object",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "object",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "s3:authType",
+                            "s3:signatureAge",
+                            "s3:signatureversion",
+                            "s3:TlsVersion",
+                            "s3:x-amz-content-sha256",
+                            "s3:ResourceAccount",
+                            "s3:versionid",
+                            "s3:x-amz-object-if-match",
+                            "s3:ExistingObjectTag/<key>"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DeleteObjectVersionTagging",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectTagging.html",
@@ -372069,6 +373147,41 @@
                     }
                 ]
             },
+            {
+                "name": "GetObjectAnnotation",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAnnotation.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve an annotation from an object",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "object",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "s3:authType",
+                            "s3:signatureAge",
+                            "s3:signatureversion",
+                            "s3:TlsVersion",
+                            "s3:x-amz-content-sha256",
+                            "s3:ResourceAccount",
+                            "s3:ExistingObjectTag/<key>"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetObjectAttributes",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAttributes.html",
@@ -372309,6 +373422,70 @@
                     }
                 ]
             },
+            {
+                "name": "GetObjectVersionAnnotation",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAnnotation.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve an annotation from a specific version of an object",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "object",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "s3:authType",
+                            "s3:signatureAge",
+                            "s3:signatureversion",
+                            "s3:TlsVersion",
+                            "s3:x-amz-content-sha256",
+                            "s3:ResourceAccount",
+                            "s3:versionid",
+                            "s3:ExistingObjectTag/<key>"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetObjectVersionAnnotationForReplication",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get an object version annotation for replication",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "object",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "s3:authType",
+                            "s3:ResourceAccount",
+                            "s3:signatureAge",
+                            "s3:signatureversion",
+                            "s3:TlsVersion",
+                            "s3:x-amz-content-sha256"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetObjectVersionAttributes",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAttributes.html",
@@ -372786,14 +373963,86 @@
                 ]
             },
             {
-                "name": "ListBucketMultipartUploads",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListMultipartUploads.html",
+                "name": "ListBucketMultipartUploads",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListMultipartUploads.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list in-progress multipart uploads",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "bucket",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "s3:AccessGrantsInstanceArn",
+                            "s3:DataAccessPointAccount",
+                            "s3:DataAccessPointArn",
+                            "s3:AccessPointNetworkOrigin",
+                            "s3:authType",
+                            "s3:ResourceAccount",
+                            "s3:signatureAge",
+                            "s3:signatureversion",
+                            "s3:TlsVersion",
+                            "s3:x-amz-content-sha256",
+                            "s3:AccessPointTag/${TagKey}",
+                            "aws:ResourceTag/${TagKey}"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListBucketVersions",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectVersions.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list metadata about all the versions of objects in an Amazon S3 bucket",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "accesspoint",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "bucket",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "s3:AccessGrantsInstanceArn",
+                            "s3:authType",
+                            "s3:delimiter",
+                            "s3:max-keys",
+                            "s3:prefix",
+                            "s3:ResourceAccount",
+                            "s3:signatureAge",
+                            "s3:signatureversion",
+                            "s3:TlsVersion",
+                            "s3:x-amz-content-sha256"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListCallerAccessGrants",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListCallerAccessGrants.html",
                 "permissionOnly": false,
-                "description": "Grants permission to list in-progress multipart uploads",
+                "description": "Grants permission to list caller's Access Grant",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
-                        "resourceType": "bucket",
+                        "resourceType": "accessgrantsinstance",
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
@@ -372802,17 +374051,12 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "s3:AccessGrantsInstanceArn",
-                            "s3:DataAccessPointAccount",
-                            "s3:DataAccessPointArn",
-                            "s3:AccessPointNetworkOrigin",
                             "s3:authType",
                             "s3:ResourceAccount",
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
                             "s3:x-amz-content-sha256",
-                            "s3:AccessPointTag/${TagKey}",
                             "aws:ResourceTag/${TagKey}"
                         ],
                         "dependentActions": []
@@ -372820,33 +374064,17 @@
                 ]
             },
             {
-                "name": "ListBucketVersions",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectVersions.html",
+                "name": "ListJobs",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListJobs.html",
                 "permissionOnly": false,
-                "description": "Grants permission to list metadata about all the versions of objects in an Amazon S3 bucket",
+                "description": "Grants permission to list current jobs and jobs that have ended recently",
                 "accessLevel": "List",
                 "resourceTypes": [
-                    {
-                        "resourceType": "accesspoint",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "bucket",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
                     {
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "s3:AccessGrantsInstanceArn",
                             "s3:authType",
-                            "s3:delimiter",
-                            "s3:max-keys",
-                            "s3:prefix",
                             "s3:ResourceAccount",
                             "s3:signatureAge",
                             "s3:signatureversion",
@@ -372858,45 +374086,50 @@
                 ]
             },
             {
-                "name": "ListCallerAccessGrants",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListCallerAccessGrants.html",
+                "name": "ListMultiRegionAccessPoints",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListMultiRegionAccessPoints.html",
                 "permissionOnly": false,
-                "description": "Grants permission to list caller's Access Grant",
+                "description": "Grants permission to list Multi-Region Access Points",
                 "accessLevel": "List",
                 "resourceTypes": [
-                    {
-                        "resourceType": "accessgrantsinstance",
-                        "required": true,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
                     {
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
                             "s3:authType",
                             "s3:ResourceAccount",
-                            "s3:signatureAge",
                             "s3:signatureversion",
-                            "s3:TlsVersion",
-                            "s3:x-amz-content-sha256",
-                            "aws:ResourceTag/${TagKey}"
+                            "s3:signatureAge",
+                            "s3:TlsVersion"
                         ],
                         "dependentActions": []
                     }
                 ]
             },
             {
-                "name": "ListJobs",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListJobs.html",
+                "name": "ListMultipartUploadParts",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListParts.html",
                 "permissionOnly": false,
-                "description": "Grants permission to list current jobs and jobs that have ended recently",
+                "description": "Grants permission to list the parts that have been uploaded for a specific multipart upload",
                 "accessLevel": "List",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "object",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
+                            "s3:AccessGrantsInstanceArn",
                             "s3:authType",
                             "s3:ResourceAccount",
                             "s3:signatureAge",
@@ -372909,31 +374142,47 @@
                 ]
             },
             {
-                "name": "ListMultiRegionAccessPoints",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListMultiRegionAccessPoints.html",
+                "name": "ListObjectAnnotations",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectAnnotations.html",
                 "permissionOnly": false,
-                "description": "Grants permission to list Multi-Region Access Points",
+                "description": "Grants permission to list annotations on an object",
                 "accessLevel": "List",
                 "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "object",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
                             "s3:authType",
-                            "s3:ResourceAccount",
-                            "s3:signatureversion",
                             "s3:signatureAge",
-                            "s3:TlsVersion"
+                            "s3:signatureversion",
+                            "s3:TlsVersion",
+                            "s3:x-amz-content-sha256",
+                            "s3:ResourceAccount",
+                            "s3:annotation-prefix",
+                            "s3:max-annotation-results",
+                            "s3:ExistingObjectTag/<key>"
                         ],
                         "dependentActions": []
                     }
                 ]
             },
             {
-                "name": "ListMultipartUploadParts",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListParts.html",
+                "name": "ListObjectVersionAnnotations",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectAnnotations.html",
                 "permissionOnly": false,
-                "description": "Grants permission to list the parts that have been uploaded for a specific multipart upload",
+                "description": "Grants permission to list annotations on a specific version of an object",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -372952,13 +374201,16 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "s3:AccessGrantsInstanceArn",
                             "s3:authType",
-                            "s3:ResourceAccount",
                             "s3:signatureAge",
                             "s3:signatureversion",
                             "s3:TlsVersion",
-                            "s3:x-amz-content-sha256"
+                            "s3:x-amz-content-sha256",
+                            "s3:ResourceAccount",
+                            "s3:versionid",
+                            "s3:annotation-prefix",
+                            "s3:max-annotation-results",
+                            "s3:ExistingObjectTag/<key>"
                         ],
                         "dependentActions": []
                     }
@@ -373950,6 +375202,7 @@
                             "s3:x-amz-grant-write",
                             "s3:x-amz-grant-write-acp",
                             "s3:x-amz-metadata-directive",
+                            "s3:x-amz-object-annotation-directive",
                             "s3:x-amz-server-side-encryption",
                             "s3:x-amz-server-side-encryption-aws-kms-key-id",
                             "s3:x-amz-server-side-encryption-customer-algorithm",
@@ -374010,6 +375263,42 @@
                     }
                 ]
             },
+            {
+                "name": "PutObjectAnnotation",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectAnnotation.html",
+                "permissionOnly": false,
+                "description": "Grants permission to add or replace an annotation on an object",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "object",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "s3:authType",
+                            "s3:signatureAge",
+                            "s3:signatureversion",
+                            "s3:TlsVersion",
+                            "s3:x-amz-content-sha256",
+                            "s3:ResourceAccount",
+                            "s3:x-amz-object-if-match",
+                            "s3:ExistingObjectTag/<key>"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "PutObjectLegalHold",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectLegalHold.html",
@@ -374163,6 +375452,43 @@
                     }
                 ]
             },
+            {
+                "name": "PutObjectVersionAnnotation",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectAnnotation.html",
+                "permissionOnly": false,
+                "description": "Grants permission to add or replace an annotation on a specific version of an object",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "accesspointobject",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "object",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "s3:authType",
+                            "s3:signatureAge",
+                            "s3:signatureversion",
+                            "s3:TlsVersion",
+                            "s3:x-amz-content-sha256",
+                            "s3:ResourceAccount",
+                            "s3:versionid",
+                            "s3:x-amz-object-if-match",
+                            "s3:ExistingObjectTag/<key>"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "PutObjectVersionTagging",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectTagging.html",
@@ -374345,6 +375671,34 @@
                     }
                 ]
             },
+            {
+                "name": "ReplicateObjectAnnotation",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html",
+                "permissionOnly": false,
+                "description": "Grants permission to replicate annotations to the destination bucket",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "object",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "s3:authType",
+                            "s3:ResourceAccount",
+                            "s3:signatureAge",
+                            "s3:signatureversion",
+                            "s3:TlsVersion",
+                            "s3:x-amz-content-sha256"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ReplicateTags",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html",
@@ -374586,6 +375940,34 @@
                     }
                 ]
             },
+            {
+                "name": "UpdateBucketMetadataAnnotationTableConfiguration",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_UpdateBucketMetadataAnnotationTableConfiguration.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update the annotation table configuration for a bucket",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "bucket",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "s3:authType",
+                            "s3:ResourceAccount",
+                            "s3:signatureAge",
+                            "s3:signatureversion",
+                            "s3:TlsVersion",
+                            "s3:x-amz-content-sha256"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "UpdateBucketMetadataInventoryTableConfiguration",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_UpdateBucketMetadataInventoryTableConfiguration.html",
@@ -375040,6 +376422,12 @@
                 "description": "Filters access by the TLS version used by the client",
                 "type": "Numeric"
             },
+            {
+                "name": "s3:annotation-prefix",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-annotation-prefix-condition",
+                "description": "Filters access by the annotation name prefix specified in the request",
+                "type": "String"
+            },
             {
                 "name": "s3:authType",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/bucket-policy-s3-sigv4-conditions.html",
@@ -375094,6 +376482,12 @@
                 "description": "Filters access by specific log type, currently supports S3_SERVER_ACCESS_LOGS",
                 "type": "String"
             },
+            {
+                "name": "s3:max-annotation-results",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-annotation-max-results",
+                "description": "Filters access by the maximum number of annotation results requested",
+                "type": "Numeric"
+            },
             {
                 "name": "s3:max-keys",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-numeric-condition-operators",
@@ -375214,6 +376608,18 @@
                 "description": "Filters access by object metadata behavior (COPY or REPLACE) when objects are copied",
                 "type": "String"
             },
+            {
+                "name": "s3:x-amz-object-annotation-directive",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_CopyObject.html",
+                "description": "Filters access by the annotation copy directive specified in the request",
+                "type": "String"
+            },
+            {
+                "name": "s3:x-amz-object-if-match",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-annotation-conditional-writes",
+                "description": "Filters access by the ETag of the object version specified in the request",
+                "type": "String"
+            },
             {
                 "name": "s3:x-amz-object-ownership",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/userguide/ensure-object-ownership.html#object-ownership-requiring-bucket-owner-enforced",
@@ -452257,6 +453663,40 @@
         "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworkspacesagentaccessmcpserver.html",
         "servicePrefix": "agentaccess-mcp",
         "actions": [
+            {
+                "name": "CallForwardedTool",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/appstream2/latest/developerguide/",
+                "permissionOnly": false,
+                "description": "Grants permission to invoke a forwarded tool on a remote instance",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "agentaccess-mcp:StackArn"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CheckConnectionStatus",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/appstream2/latest/developerguide/",
+                "permissionOnly": false,
+                "description": "Grants permission to check the connection status of a streaming session",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "agentaccess-mcp:StackArn"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DoubleClick",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/appstream2/latest/developerguide/",