aws-iam-data 0.0.88 → 0.0.90

package/dist/data/json/iam.json

@@ -22609,7 +22609,6 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "aws:RequestTag/${TagKey}",
                             "aws:TagKeys"
                         ],
                         "dependentActions": []
@@ -23646,6 +23645,38 @@
         "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html",
         "servicePrefix": "bedrock",
         "actions": [
+            {
+                "name": "AssociateAgentKnowledgeBase",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to associate a knowledge base with an agent",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "agent",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "AssociateThirdPartyKnowledgeBase",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": true,
+                "description": "Grants permission to use 3rd party platform to store knowledge data",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "bedrock:ThirdPartyKnowledgeBaseCredentialsSecretArn"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "CreateAgent",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
@@ -23712,6 +23743,36 @@
                     }
                 ]
             },
+            {
+                "name": "CreateDataSource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a data source",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "knowledge-base",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateKnowledgeBase",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a knowledge base",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "knowledge-base",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "CreateModelCustomizationJob",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateModelCustomizationJob.html",
@@ -23763,6 +23824,51 @@
                     }
                 ]
             },
+            {
+                "name": "DeleteDataSource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a data source",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "knowledge-base",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteKnowledgeBase",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a knowledge base",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "knowledge-base",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DisassociateAgentKnowledgeBase",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to disassociate a knowledge base from the agent",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "agent",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetAgent",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
@@ -23808,6 +23914,21 @@
                     }
                 ]
             },
+            {
+                "name": "GetAgentKnowledgeBase",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to describe a knowledge base associated with an agent",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "agent",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetAgentVersion",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
@@ -23838,6 +23959,66 @@
                     }
                 ]
             },
+            {
+                "name": "GetDataSource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve an existing data source",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "knowledge-base",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetFoundationModel",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetFoundationModel.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get the properties associated with a Bedrock foundation model",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "foundation-model",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetIngestionJob",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve an existing ingestion job",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "knowledge-base",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetKnowledgeBase",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve an existing knowledge base",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "knowledge-base",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "GetModelCustomizationJob",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetModelCustomizationJob.html",
@@ -23940,6 +24121,21 @@
                     }
                 ]
             },
+            {
+                "name": "ListAgentKnowledgeBases",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list knowledge bases associated with an agent",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "agent",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListAgentVersions",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
@@ -23985,6 +24181,21 @@
                     }
                 ]
             },
+            {
+                "name": "ListDataSources",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list existing data sources in an knowledge base",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "knowledge-base",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListFoundationModels",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListFoundationModels.html",
@@ -24000,6 +24211,36 @@
                     }
                 ]
             },
+            {
+                "name": "ListIngestionJobs",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list ingestion jobs in a data source",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "knowledge-base",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListKnowledgeBases",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list existing knowledge bases",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListModelCustomizationJobs",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListModelCustomizationJobs.html",
@@ -24036,6 +24277,36 @@
                     }
                 ]
             },
+            {
+                "name": "QueryKnowledgeBase",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": true,
+                "description": "Grants permission to retrieve ingested data from a knowledge base. ",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "knowledge-base",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "StartIngestionJob",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to start an ingestion job",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "knowledge-base",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "StopModelCustomizationJob",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/API_StopModelCustomizationJob.html",
@@ -24154,6 +24425,51 @@
                         "dependentActions": []
                     }
                 ]
+            },
+            {
+                "name": "UpdateAgentKnowledgeBase",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a knowledge base associated with an agent",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "agent",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateDataSource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a data source",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "knowledge-base",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateKnowledgeBase",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a knowledge base",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "knowledge-base",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
             }
         ],
         "resourceTypes": [
@@ -24190,6 +24506,12 @@
                 "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
                 "arnPattern": "arn:${Partition}:bedrock:${Region}:${Account}:agent-alias/${AgentId}/${AgentAliasId}",
                 "conditionKeys": []
+            },
+            {
+                "name": "knowledge-base",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html",
+                "arnPattern": "arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/${KnowledgeBaseId}",
+                "conditionKeys": []
             }
         ],
         "conditionKeys": [
@@ -24210,6 +24532,12 @@
                 "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available",
                 "description": "Filters access by creating requests based on the presence of mandatory tags in the request",
                 "type": "ArrayOfString"
+            },
+            {
+                "name": "bedrock:ThirdPartyKnowledgeBaseCredentialsSecretArn",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available",
+                "description": "Filters access by the secretArn containing the credentials of the third party platform",
+                "type": "ARN"
             }
         ]
     },
@@ -52991,6 +53319,7 @@
                         "required": false,
                         "conditionKeys": [
                             "aws:RequestTag/${TagKey}",
+                            "aws:ResourceTag/${TagKey}",
                             "aws:TagKeys",
                             "codestar-notifications:NotificationsForResource"
                         ],
@@ -53234,7 +53563,7 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "aws:RequestTag/${TagKey}",
+                            "aws:ResourceTag/${TagKey}",
                             "aws:TagKeys"
                         ],
                         "dependentActions": []
@@ -76856,11 +77185,11 @@
         "servicePrefix": "datazone",
         "actions": [
             {
-                "name": "GetProject",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve information about an Amazon DataZone project",
-                "accessLevel": "Read",
+                "name": "AcceptPredictions",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_AcceptPredictions.html",
+                "permissionOnly": false,
+                "description": "Grants permission to accept prediction",
+                "accessLevel": "Write",
                 "resourceTypes": [
                     {
                         "resourceType": "",
@@ -76871,11 +77200,11 @@
                 ]
             },
             {
-                "name": "GetProjectConfiguration",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve configuration information for an Amazon DataZone project",
-                "accessLevel": "Read",
+                "name": "AcceptSubscriptionRequest",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_AcceptSubscriptionRequest.html",
+                "permissionOnly": false,
+                "description": "Grants permission to approve a subscription request for a Data Asset",
+                "accessLevel": "Write",
                 "resourceTypes": [
                     {
                         "resourceType": "",
@@ -76886,11 +77215,11 @@
                 ]
             },
             {
-                "name": "GetProjectCredentials",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve credentials for an Amazon DataZone project",
-                "accessLevel": "Read",
+                "name": "CancelSubscription",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CancelSubscription.html",
+                "permissionOnly": false,
+                "description": "Grants permission to revoke or unsubscribe an approved subscription to Data Asset",
+                "accessLevel": "Write",
                 "resourceTypes": [
                     {
                         "resourceType": "",
@@ -76901,11 +77230,11 @@
                 ]
             },
             {
-                "name": "ListProjects",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve all Amazon DataZone projects",
-                "accessLevel": "List",
+                "name": "CreateAsset",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateAsset.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create asset",
+                "accessLevel": "Write",
                 "resourceTypes": [
                     {
                         "resourceType": "",
@@ -76916,11 +77245,11 @@
                 ]
             },
             {
-                "name": "ListUserProjects",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve all Amazon DataZone projects for a user",
-                "accessLevel": "List",
+                "name": "CreateAssetRevision",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateAssetRevision.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create new revision of an asset",
+                "accessLevel": "Write",
                 "resourceTypes": [
                     {
                         "resourceType": "",
@@ -76929,21 +77258,12 @@
                         "dependentActions": []
                     }
                 ]
-            }
-        ],
-        "resourceTypes": [],
-        "conditionKeys": []
-    },
-    {
-        "name": "Amazon DataZone Control",
-        "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazondatazonecontrol.html",
-        "servicePrefix": "datazonecontrol",
-        "actions": [
+            },
             {
-                "name": "CreateAccountAssociationInvitation",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to request association of an account with a given domain",
+                "name": "CreateAssetType",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateAssetType.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create an asset type",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
@@ -76956,9 +77276,24 @@
             },
             {
                 "name": "CreateDataSource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to create Amazon DataZone data sources used for publishing and subscribing to data",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateDataSource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a new DataSource",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateDomain",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateDomain.html",
+                "permissionOnly": false,
+                "description": "Grants permission to provision a domain which is a top level entity that contains other Amazon DataZone resources",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
@@ -76974,31 +77309,268 @@
             },
             {
                 "name": "CreateEnvironment",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to provision a root-domain which is a top level entity that contains other Amazon DataZone resources",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateEnvironment.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a collection of configurated resources used to publish and subscribe to data",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
                         "resourceType": "",
                         "required": false,
-                        "conditionKeys": [
-                            "aws:RequestTag/${TagKey}",
-                            "aws:TagKeys"
-                        ],
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateEnvironmentBlueprint",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateEnvironmentBlueprint.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a custom Environment Blueprint that allow user to add Environments to their Project",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateEnvironmentProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateEnvironmentProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a template from a Blueprint that can be used to create a Environment",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateFormType",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateFormType.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a form type or a new revision of it",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateGlossary",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateGlossary.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a business glossary",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateGlossaryTerm",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateGlossaryTerm.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a glossary term",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateGroupProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateGroupProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a DataZone group profile for an IAM Identity Center group",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateListingChangeSet",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateListingChangeSet.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create listing change set",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateProject",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateProject.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a Project to enable your team to publish and subscribe to data",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateProjectMembership",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateProjectMembership.html",
+                "permissionOnly": false,
+                "description": "Grants permission to add a user to a Project",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateSubscriptionGrant",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateSubscriptionGrant.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a grant for an approved subscription on a subscription target",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateSubscriptionRequest",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateSubscriptionRequest.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a subscription request for a Data Asset",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateSubscriptionTarget",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateSubscriptionTarget.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a subscription target for a Environment in the project",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateUserProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateUserProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a user profile for an existing user in the customers IAM Identity Center",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteAsset",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteAsset.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete an asset",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteAssetType",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteAssetType.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete an asset type",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
                         "dependentActions": []
                     }
                 ]
             },
             {
                 "name": "DeleteDataSource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to delete a data source",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteDataSource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update existing DataSource",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
-                        "resourceType": "data-source",
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteDomain",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteDomain.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a provisioned domain",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "domain",
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
@@ -77006,14 +77578,284 @@
                 ]
             },
             {
-                "name": "DeleteEnvironment",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
+                "name": "DeleteDomainSharingPolicy",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteDomainSharingPolicy.html",
                 "permissionOnly": true,
-                "description": "Grants permission to delete a provisioned root-domain",
+                "description": "Grants permission to delete a resource policy for a DataZone Domain",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteEnvironment",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteEnvironment.html",
+                "permissionOnly": false,
+                "description": "Grants permission to Delete Environment",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
-                        "resourceType": "environment",
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteEnvironmentBlueprint",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteEnvironmentBlueprint.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete Environment Blueprint",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteEnvironmentBlueprintConfiguration",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteEnvironmentBlueprintConfiguration.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete environment blueprint configuration",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteEnvironmentProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteEnvironmentProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete Environment Profile",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteFormType",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteFormType.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a form type",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteGlossary",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteGlossary.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a business glossary",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteGlossaryTerm",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteGlossaryTerm.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a glossary term",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteListing",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteListing.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete listing",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteProject",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteProject.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a Project that enables your team to publish and subscribe to data",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteProjectMembership",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteProjectMembership.html",
+                "permissionOnly": false,
+                "description": "Grants permission to remove a user from a project",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteSubscriptionGrant",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteSubscriptionGrant.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a subscription grant from a subscription target",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteSubscriptionRequest",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteSubscriptionRequest.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a pending subscription request for a Data Asset",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteSubscriptionTarget",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteSubscriptionTarget.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a subscription target from a Environment in the project",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetAsset",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetAsset.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve an asset",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetAssetType",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetAssetType.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get an asset type",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetDataSource",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetDataSource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to Get a existing DataSource in Amazon DataZone using its identifier",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetDataSourceRun",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetDataSourceRun.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get DataSource run job in Amazon DataZone using it's identifier",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetDomain",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetDomain.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve information about a domain",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "domain",
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
@@ -77021,11 +77863,221 @@
                 ]
             },
             {
-                "name": "DissociateAccount",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
+                "name": "GetDomainSharingPolicy",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetDomainSharingPolicy.html",
                 "permissionOnly": true,
-                "description": "Grants permission to disassociate an account with a given domain",
-                "accessLevel": "Write",
+                "description": "Grants permission to retrieve a resource policy for a DataZone Domain",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetEnvironment",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetEnvironment.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get Environment details",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetEnvironmentActionLink",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetEnvironmentActionLink.html",
+                "permissionOnly": true,
+                "description": "Grants permission to get environment action link",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetEnvironmentBlueprint",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetEnvironmentBlueprint.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get Environment Blueprint details",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetEnvironmentBlueprintConfiguration",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetEnvironmentBlueprintConfiguration.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get environment blueprint configuration",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetEnvironmentCredentials",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetEnvironmentCredentials.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get short term credentials that assume the Environment user role",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetEnvironmentProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetEnvironmentProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get Environment Profile details",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetFormType",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetFormType.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get a form type",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetGlossary",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetGlossary.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get a business glossary",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetGlossaryTerm",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetGlossaryTerm.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get a glossary term",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetGroupProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetGroupProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve an existing DataZone group profile",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetIamPortalLoginUrl",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetIamPortalLoginUrl.html",
+                "permissionOnly": true,
+                "description": "Grants permission to an IAM principal to log into the DataZone Portal",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetListing",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetListing.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get listing",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetProject",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetProject.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get Project details",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetSubscription",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetSubscription.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve a subscription",
+                "accessLevel": "Read",
                 "resourceTypes": [
                     {
                         "resourceType": "",
@@ -77036,10 +78088,10 @@
                 ]
             },
             {
-                "name": "GetAssociatedDomain",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
+                "name": "GetSubscriptionEligibility",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetSubscriptionEligibility.html",
                 "permissionOnly": true,
-                "description": "Grants permission to retrieve information about any associated domain in the associated account",
+                "description": "Grants permission to get subscription eligibilty",
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
@@ -77051,25 +78103,25 @@
                 ]
             },
             {
-                "name": "GetDataSourceByEnvironment",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve any data source under any domain for a given root-domain",
+                "name": "GetSubscriptionGrant",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetSubscriptionGrant.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retireve a subscription grant",
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
-                        "resourceType": "data-source",
-                        "required": true,
+                        "resourceType": "",
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     }
                 ]
             },
             {
-                "name": "GetDomain",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve information about any domain in the account",
+                "name": "GetSubscriptionRequestDetails",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetSubscriptionRequestDetails.html",
+                "permissionOnly": false,
+                "description": "Grants permission to reject a subscription request for a Data Asset",
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
@@ -77081,25 +78133,25 @@
                 ]
             },
             {
-                "name": "GetEnvironment",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve information about a root-domain",
+                "name": "GetSubscriptionTarget",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetSubscriptionTarget.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retireve details of subscription target",
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
-                        "resourceType": "environment",
-                        "required": true,
+                        "resourceType": "",
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     }
                 ]
             },
             {
-                "name": "GetMetadataCollector",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve a publishing job",
+                "name": "GetUserProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetUserProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve a user profile for an existing user in the DataZone Domain",
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
@@ -77111,11 +78163,11 @@
                 ]
             },
             {
-                "name": "GetUserPortalLoginAuthCode",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve credentials to log into Amazon DataZone data portal from AWS management console",
-                "accessLevel": "Read",
+                "name": "ListAccountEnvironments",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListAccountEnvironments.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list Environments across all domains in an AWS Account",
+                "accessLevel": "List",
                 "resourceTypes": [
                     {
                         "resourceType": "",
@@ -77126,10 +78178,10 @@
                 ]
             },
             {
-                "name": "ListAccountAssociationInvitations",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve all account-association invitations for a given associated account",
+                "name": "ListAssetRevisions",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListAssetRevisions.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list revisions of an asset",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77141,10 +78193,10 @@
                 ]
             },
             {
-                "name": "ListAllAssociatedAccountsForEnvironment",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to list all associated accounts under the given root-domain, including accounts associated to its sub-domains",
+                "name": "ListDataSourceRunActivities",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListDataSourceRunActivities.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list DataSource runs job's activities on Asset",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77156,10 +78208,10 @@
                 ]
             },
             {
-                "name": "ListAssociatedEnvironments",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to lists all the associated domains for a given associated account",
+                "name": "ListDataSourceRuns",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListDataSourceRuns.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list DataSource runs job",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77172,9 +78224,9 @@
             },
             {
                 "name": "ListDataSources",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve all data sources under any domain in the associated account",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListDataSources.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list existing DataSources",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77186,10 +78238,10 @@
                 ]
             },
             {
-                "name": "ListDataSourcesByEnvironment",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve all data sources under any domain for a given root-domain",
+                "name": "ListDomains",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListDomains.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve all domains",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77201,10 +78253,10 @@
                 ]
             },
             {
-                "name": "ListDomains",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to list all the sub-domains for a given domain or a root-domain",
+                "name": "ListEnvironmentBlueprintConfigurations",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListEnvironmentBlueprintConfigurations.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list environment blueprint configurations",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77216,10 +78268,10 @@
                 ]
             },
             {
-                "name": "ListEnvironment",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve all root-domains",
+                "name": "ListEnvironmentBlueprints",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListEnvironmentBlueprints.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list Domain for Environment Blueprints",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77231,10 +78283,10 @@
                 ]
             },
             {
-                "name": "ListMetadataCollectorRuns",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to list all runs for a given publishing job through Amazon DataZone console for a data source",
+                "name": "ListEnvironmentProfiles",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListEnvironmentProfiles.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list Domain for Environment Profiles",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77246,10 +78298,55 @@
                 ]
             },
             {
-                "name": "ListMetadataCollectors",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve all publishing jobs",
+                "name": "ListEnvironments",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListEnvironments.html",
+                "permissionOnly": false,
+                "description": "Grants permission to show Environments in the Domain",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListGroupsForUser",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListGroupsForUser.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list all the DataZone group profiles that the DataZone user profile is a member of",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListNotifications",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListNotifications.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list notifications and events for a datazone user",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListProjectMemberships",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListProjectMemberships.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list Project Members",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77262,9 +78359,69 @@
             },
             {
                 "name": "ListProjects",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve all Amazon DataZone projects",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListProjects.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list Projects",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListSubscriptionGrants",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListSubscriptionGrants.html",
+                "permissionOnly": false,
+                "description": "Grants permission to List subscription grants for a subscribed principal",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListSubscriptionRequests",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListSubscriptionRequests.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list subscription requests",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListSubscriptionTargets",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListSubscriptionTargets.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list subscription targets",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListSubscriptions",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListSubscriptions.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list subscriptions",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77277,19 +78434,28 @@
             },
             {
                 "name": "ListTagsForResource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListTagsForResource.html",
+                "permissionOnly": false,
                 "description": "Grants permission to retrieve all tags associated with a resource",
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
-                        "resourceType": "data-source",
+                        "resourceType": "domain",
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
-                    },
+                    }
+                ]
+            },
+            {
+                "name": "ListWarehouseMetadata",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListWarehouseMetadata.html",
+                "permissionOnly": true,
+                "description": "Grants permission to list available Manager Secrets",
+                "accessLevel": "List",
+                "resourceTypes": [
                     {
-                        "resourceType": "environment",
+                        "resourceType": "",
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
@@ -77297,10 +78463,10 @@
                 ]
             },
             {
-                "name": "ReviewAccountAssociationInvitation",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
+                "name": "ProvisionDomain",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ProvisionDomain.html",
                 "permissionOnly": true,
-                "description": "Grants permission to accept or reject the pending association requests for the given account",
+                "description": "Grants permission to provision domain with default project setup",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
@@ -77312,23 +78478,227 @@
                 ]
             },
             {
-                "name": "TagResource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
+                "name": "PutDomainSharingPolicy",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_PutDomainSharingPolicy.html",
                 "permissionOnly": true,
-                "description": "Grants permission to add or update tags to a resource",
-                "accessLevel": "Tagging",
+                "description": "Grants permission to add a resource policy for a DataZone Domain",
+                "accessLevel": "Permissions management",
                 "resourceTypes": [
                     {
-                        "resourceType": "data-source",
+                        "resourceType": "",
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
-                    },
+                    }
+                ]
+            },
+            {
+                "name": "PutEnvironmentBlueprintConfiguration",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_PutEnvironmentBlueprintConfiguration.html",
+                "permissionOnly": false,
+                "description": "Grants permission to put environment blueprint configuration",
+                "accessLevel": "Write",
+                "resourceTypes": [
                     {
-                        "resourceType": "environment",
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RefreshToken",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_RefreshToken.html",
+                "permissionOnly": true,
+                "description": "Grants permission to refresh token",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RejectPredictions",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_RejectPredictions.html",
+                "permissionOnly": false,
+                "description": "Grants permission to reject prediction",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RejectSubscriptionRequest",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_RejectSubscriptionRequest.html",
+                "permissionOnly": false,
+                "description": "Grants permission to reject a subscription request for a Data Asset",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RevokeSubscription",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_RevokeSubscription.html",
+                "permissionOnly": false,
+                "description": "Grants permission to revoke a subscription",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "Search",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_Search.html",
+                "permissionOnly": false,
+                "description": "Grants permission to search datazone entities",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "SearchGroupProfiles",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_SearchGroupProfiles.html",
+                "permissionOnly": false,
+                "description": "Grants permission to search DataZone group profiles and IAM Identity Center groups",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "SearchListings",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_SearchListings.html",
+                "permissionOnly": false,
+                "description": "Grants permission to search listings",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "SearchTypes",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_SearchTypes.html",
+                "permissionOnly": false,
+                "description": "Grants permission to search types such asset types and form types in a domain",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "SearchUserProfiles",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_SearchUserProfiles.html",
+                "permissionOnly": false,
+                "description": "Grants permission to search DataZone user profiles, IAM Identity Center users, and DataZone IAM principal profiles",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "SsoLogin",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_SsoLogin.html",
+                "permissionOnly": true,
+                "description": "Grants permission to login using SSO",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "SsoLogout",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_SsoLogout.html",
+                "permissionOnly": true,
+                "description": "Grants permission to logout as SSO user",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "StartDataSourceRun",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_StartDataSourceRun.html",
+                "permissionOnly": false,
+                "description": "Grants permission to start a DataSource run job",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "TagResource",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_TagResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to add or update tags to a resource",
+                "accessLevel": "Tagging",
+                "resourceTypes": [
+                    {
+                        "resourceType": "domain",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
                     },
                     {
                         "resourceType": "",
@@ -77343,20 +78713,14 @@
             },
             {
                 "name": "UntagResource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UntagResource.html",
+                "permissionOnly": false,
                 "description": "Grants permission to remove tags associated with a resource",
                 "accessLevel": "Tagging",
                 "resourceTypes": [
                     {
-                        "resourceType": "data-source",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "environment",
-                        "required": false,
+                        "resourceType": "domain",
+                        "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -77371,10 +78735,10 @@
                 ]
             },
             {
-                "name": "UpdateAccountAssociationDescription",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to update the description of the account association of the given associated account and given domain",
+                "name": "UpdateDataSource",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateDataSource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update existing DataSource",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
@@ -77386,14 +78750,14 @@
                 ]
             },
             {
-                "name": "UpdateDataSource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to update a data source",
+                "name": "UpdateDomain",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateDomain.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update information for a domain",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
-                        "resourceType": "data-source",
+                        "resourceType": "domain",
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
@@ -77402,14 +78766,209 @@
             },
             {
                 "name": "UpdateEnvironment",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateEnvironment.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update Environment settings",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateEnvironmentBlueprint",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateEnvironmentBlueprint.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update Environment Blueprint settings",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateEnvironmentConfiguration",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateEnvironmentConfiguration.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update environment configuration",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateEnvironmentDeploymentStatus",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateEnvironmentDeploymentStatus.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update status of the Environment deployment",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateEnvironmentProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateEnvironmentProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update EnvironmentProfile configuration",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateGlossary",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateGlossary.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a business glossary",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateGlossaryTerm",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateGlossaryTerm.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a glossary term",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateGroupProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateGroupProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a DataZone group profile",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateProject",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateProject.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a Project that enables your team to publish and subscribe to data",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateSubscriptionGrantStatus",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateSubscriptionGrantStatus.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a subscription grant status for custom grants",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateSubscriptionRequest",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateSubscriptionRequest.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update business reason for subscription request for a Data Asset",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateSubscriptionTarget",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateSubscriptionTarget.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a subscription target",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateUserProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateUserProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a DataZone user profile",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ValidatePassRole",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ValidatePassRole.html",
                 "permissionOnly": true,
-                "description": "Grants permission to update information for a root-domain",
+                "description": "Grants permission to validate pass role",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
-                        "resourceType": "environment",
-                        "required": true,
+                        "resourceType": "",
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     }
@@ -77418,17 +78977,9 @@
         ],
         "resourceTypes": [
             {
-                "name": "environment",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/create-root-domain.html",
-                "arnPattern": "arn:${Partition}:datazonecontrol:${Region}:${Account}:domain/${DomainId}",
-                "conditionKeys": [
-                    "aws:ResourceTag/${TagKey}"
-                ]
-            },
-            {
-                "name": "data-source",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/create-glue-data-source.html",
-                "arnPattern": "arn:${Partition}:datazonecontrol:${Region}:${Account}:data-source/${DomainId}",
+                "name": "domain",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/create-domain.html",
+                "arnPattern": "arn:${Partition}:datazone:${Region}:${Account}:domain/${DomainId}",
                 "conditionKeys": [
                     "aws:ResourceTag/${TagKey}"
                 ]
@@ -134281,8 +135832,7 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "aws:TagKeys",
-                            "aws:RequestTag/${TagKey}"
+                            "aws:TagKeys"
                         ],
                         "dependentActions": []
                     }
@@ -276038,7 +277588,8 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "sts:AWSServiceName"
+                            "sts:AWSServiceName",
+                            "sts:DurationSeconds"
                         ],
                         "dependentActions": []
                     }
@@ -276408,6 +277959,12 @@
                 "description": "Filters access by the service that is obtaining a bearer token",
                 "type": "String"
             },
+            {
+                "name": "sts:DurationSeconds",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#ck_durationseconds",
+                "description": "Filters access by the duration in seconds when getting a bearer token",
+                "type": "String"
+            },
             {
                 "name": "sts:ExternalId",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#ck_externalid",
@@ -293043,6 +294600,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "instance",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "maintenancewindow",
                         "required": false,
@@ -293079,6 +294642,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "task",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "",
                         "required": false,
@@ -293182,6 +294751,7 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}",
                             "aws:RequestTag/${TagKey}",
                             "aws:TagKeys"
                         ],
@@ -293213,6 +294783,16 @@
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}",
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -294916,265 +296496,286 @@
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "ModifyDocumentPermission",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ModifyDocumentPermission.html",
-                "permissionOnly": false,
-                "description": "Grants permission to share a custom SSM document publicly or privately with specified AWS accounts",
-                "accessLevel": "Permissions management",
-                "resourceTypes": [
-                    {
-                        "resourceType": "document",
-                        "required": true,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "PutCalendar",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-change-calendar-prereqs.html",
-                "permissionOnly": true,
-                "description": "Grants permission to create/edit a specific calendar",
-                "accessLevel": "Write",
-                "resourceTypes": [
-                    {
-                        "resourceType": "document",
-                        "required": true,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "PutComplianceItems",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutComplianceItems.html",
-                "permissionOnly": false,
-                "description": "Grants permission to register a compliance type and other compliance details on a specified resource",
-                "accessLevel": "Write",
-                "resourceTypes": [
-                    {
-                        "resourceType": "instance",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "managed-instance",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "PutConfigurePackageResult",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html",
-                "permissionOnly": true,
-                "description": "Grants permission to SSM Agent to generate a report of the results of specific agent requests (internal Systems Manager call)",
-                "accessLevel": "Read",
-                "resourceTypes": [
-                    {
-                        "resourceType": "",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "PutInventory",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutInventory.html",
-                "permissionOnly": false,
-                "description": "Grants permission to add or update inventory items on multiple specified managed instances",
-                "accessLevel": "Write",
-                "resourceTypes": [
-                    {
-                        "resourceType": "",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "PutParameter",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutParameter.html",
-                "permissionOnly": false,
-                "description": "Grants permission to create an SSM parameter",
-                "accessLevel": "Write",
-                "resourceTypes": [
-                    {
-                        "resourceType": "parameter",
-                        "required": true,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "",
-                        "required": false,
-                        "conditionKeys": [
-                            "aws:RequestTag/${TagKey}",
-                            "aws:TagKeys",
-                            "ssm:Overwrite"
-                        ],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "PutResourcePolicy",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutResourcePolicy.html",
-                "permissionOnly": false,
-                "description": "Grants permission to create or update a Systems Manager resource policy",
-                "accessLevel": "Permissions management",
-                "resourceTypes": [
-                    {
-                        "resourceType": "resourcearn",
-                        "required": true,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "RegisterDefaultPatchBaseline",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterDefaultPatchBaseline.html",
-                "permissionOnly": false,
-                "description": "Grants permission to specify the default patch baseline for an operating system type",
-                "accessLevel": "Write",
-                "resourceTypes": [
-                    {
-                        "resourceType": "patchbaseline",
-                        "required": true,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "RegisterManagedInstance",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html",
-                "permissionOnly": false,
-                "description": "Grants permission to register a Systems Manager Agent",
-                "accessLevel": "Write",
-                "resourceTypes": [
-                    {
-                        "resourceType": "",
-                        "required": false,
-                        "conditionKeys": [
-                            "aws:RequestTag/${TagKey}",
-                            "aws:TagKeys"
-                        ],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "RegisterPatchBaselineForPatchGroup",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterPatchBaselineForPatchGroup.html",
-                "permissionOnly": false,
-                "description": "Grants permission to specify the default patch baseline for a specified patch group",
-                "accessLevel": "Write",
-                "resourceTypes": [
-                    {
-                        "resourceType": "patchbaseline",
-                        "required": true,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "RegisterTargetWithMaintenanceWindow",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterTargetWithMaintenanceWindow.html",
-                "permissionOnly": false,
-                "description": "Grants permission to register a target with a specified maintenance window",
-                "accessLevel": "Write",
-                "resourceTypes": [
-                    {
-                        "resourceType": "maintenancewindow",
-                        "required": true,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "RegisterTaskWithMaintenanceWindow",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterTaskWithMaintenanceWindow.html",
-                "permissionOnly": false,
-                "description": "Grants permission to register a task with a specified maintenance window",
-                "accessLevel": "Write",
-                "resourceTypes": [
-                    {
-                        "resourceType": "maintenancewindow",
-                        "required": true,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "RemoveTagsFromResource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RemoveTagsFromResource.html",
-                "permissionOnly": false,
-                "description": "Grants permission to remove a specified tag key from a specified resource",
-                "accessLevel": "Tagging",
-                "resourceTypes": [
-                    {
-                        "resourceType": "association",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ModifyDocumentPermission",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ModifyDocumentPermission.html",
+                "permissionOnly": false,
+                "description": "Grants permission to share a custom SSM document publicly or privately with specified AWS accounts",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "document",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "PutCalendar",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-change-calendar-prereqs.html",
+                "permissionOnly": true,
+                "description": "Grants permission to create/edit a specific calendar",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "document",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "PutComplianceItems",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutComplianceItems.html",
+                "permissionOnly": false,
+                "description": "Grants permission to register a compliance type and other compliance details on a specified resource",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "instance",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "managed-instance",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "ssm:SourceInstanceARN",
+                            "ec2:SourceInstanceARN"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "PutConfigurePackageResult",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html",
+                "permissionOnly": true,
+                "description": "Grants permission to SSM Agent to generate a report of the results of specific agent requests (internal Systems Manager call)",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "PutInventory",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutInventory.html",
+                "permissionOnly": false,
+                "description": "Grants permission to add or update inventory items on multiple specified managed instances",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "PutParameter",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutParameter.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create an SSM parameter",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "parameter",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys",
+                            "ssm:Overwrite"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "PutResourcePolicy",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutResourcePolicy.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create or update a Systems Manager resource policy",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "resourcearn",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RegisterDefaultPatchBaseline",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterDefaultPatchBaseline.html",
+                "permissionOnly": false,
+                "description": "Grants permission to specify the default patch baseline for an operating system type",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "patchbaseline",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RegisterManagedInstance",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html",
+                "permissionOnly": false,
+                "description": "Grants permission to register a Systems Manager Agent",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RegisterPatchBaselineForPatchGroup",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterPatchBaselineForPatchGroup.html",
+                "permissionOnly": false,
+                "description": "Grants permission to specify the default patch baseline for a specified patch group",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "patchbaseline",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RegisterTargetWithMaintenanceWindow",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterTargetWithMaintenanceWindow.html",
+                "permissionOnly": false,
+                "description": "Grants permission to register a target with a specified maintenance window",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "maintenancewindow",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RegisterTaskWithMaintenanceWindow",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterTaskWithMaintenanceWindow.html",
+                "permissionOnly": false,
+                "description": "Grants permission to register a task with a specified maintenance window",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "maintenancewindow",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RemoveTagsFromResource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RemoveTagsFromResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to remove a specified tag key from a specified resource",
+                "accessLevel": "Tagging",
+                "resourceTypes": [
+                    {
+                        "resourceType": "association",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "automation-execution",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "document",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "instance",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "maintenancewindow",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "managed-instance",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "opsitem",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "opsmetadata",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "parameter",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "patchbaseline",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
                     },
                     {
-                        "resourceType": "automation-execution",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "document",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "maintenancewindow",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "managed-instance",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "opsitem",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "opsmetadata",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "parameter",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "patchbaseline",
+                        "resourceType": "task",
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
@@ -295503,6 +297104,15 @@
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "ssm:SourceInstanceARN",
+                            "ec2:SourceInstanceARN"
+                        ],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -295575,6 +297185,15 @@
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "ssm:SourceInstanceARN",
+                            "ec2:SourceInstanceARN"
+                        ],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -295596,6 +297215,15 @@
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "ssm:SourceInstanceARN",
+                            "ec2:SourceInstanceARN"
+                        ],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -295783,6 +297411,12 @@
                 "description": "Filters access by 'Create' requests based on whether mandatory tags are included in the request",
                 "type": "ArrayOfString"
             },
+            {
+                "name": "ec2:SourceInstanceARN",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policy-structure.html#amazon-ec2-keys",
+                "description": "Filters access by the ARN of the instance from which the request originated",
+                "type": "ARN"
+            },
             {
                 "name": "ssm:AutoApprove",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/change-manager-auto-approval-access.html",
@@ -295798,13 +297432,13 @@
             {
                 "name": "ssm:Overwrite",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions",
-                "description": "Controls whether Systems Manager parameters can be overwritten",
+                "description": "Filters access by controling whether Systems Manager parameters can be overwritten",
                 "type": "String"
             },
             {
                 "name": "ssm:Recursive",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions",
-                "description": "Filters access to Systems Manager parameters created in a hierarchical structure",
+                "description": "Filters access by Systems Manager parameters created in a hierarchical structure",
                 "type": "String"
             },
             {
@@ -295813,6 +297447,12 @@
                 "description": "Filters access by verifying that a user has permission to access either the default Session Manager configuration document or the custom configuration document specified in a request",
                 "type": "Bool"
             },
+            {
+                "name": "ssm:SourceInstanceARN",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-policy-keys",
+                "description": "Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made. This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile",
+                "type": "ARN"
+            },
             {
                 "name": "ssm:SyncType",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions",
@@ -295822,7 +297462,7 @@
             {
                 "name": "ssm:resourceTag/${TagKey}",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/security_iam_service-with-iam.html#policy-conditions",
-                "description": "Filters access based on a tag key-value pair assigned to the Systems Manager resource",
+                "description": "Filters access by a tag key-value pair assigned to the Systems Manager resource",
                 "type": "String"
             },
             {
@@ -312587,6 +314227,21 @@
                     }
                 ]
             },
+            {
+                "name": "DescribeEntity",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeEntity.html",
+                "permissionOnly": false,
+                "description": "Grants permission to read details of an entity",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "organization",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "DescribeGroup",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/workmail/latest/APIReference/API_DescribeGroup.html",
@@ -313202,6 +314857,21 @@
                     }
                 ]
             },
+            {
+                "name": "ListGroupsForEntity",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListGroupsForEntity.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list the groups to which an entity belongs",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "organization",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "ListImpersonationRoles",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/workmail/latest/APIReference/API_ListImpersonationRoles.html",
@@ -313844,6 +315514,21 @@
                     }
                 ]
             },
+            {
+                "name": "UpdateGroup",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateGroup.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update details of a group",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "organization",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "UpdateImpersonationRole",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateImpersonationRole.html",
@@ -313964,6 +315649,21 @@
                     }
                 ]
             },
+            {
+                "name": "UpdateUser",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateUser.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update details of a user",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "organization",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
             {
                 "name": "WipeMobileDevice",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/workmail/latest/adminguide/manage-devices.html#remote_wipe_device",