aws-iam-data 0.0.89 → 0.0.90

package/dist/data/json/iam.json

@@ -22609,7 +22609,6 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "aws:RequestTag/${TagKey}",
                             "aws:TagKeys"
                         ],
                         "dependentActions": []
@@ -53320,6 +53319,7 @@
                         "required": false,
                         "conditionKeys": [
                             "aws:RequestTag/${TagKey}",
+                            "aws:ResourceTag/${TagKey}",
                             "aws:TagKeys",
                             "codestar-notifications:NotificationsForResource"
                         ],
@@ -53563,7 +53563,7 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "aws:RequestTag/${TagKey}",
+                            "aws:ResourceTag/${TagKey}",
                             "aws:TagKeys"
                         ],
                         "dependentActions": []
@@ -77185,11 +77185,11 @@
         "servicePrefix": "datazone",
         "actions": [
             {
-                "name": "GetProject",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve information about an Amazon DataZone project",
-                "accessLevel": "Read",
+                "name": "AcceptPredictions",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_AcceptPredictions.html",
+                "permissionOnly": false,
+                "description": "Grants permission to accept prediction",
+                "accessLevel": "Write",
                 "resourceTypes": [
                     {
                         "resourceType": "",
@@ -77200,11 +77200,11 @@
                 ]
             },
             {
-                "name": "GetProjectConfiguration",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve configuration information for an Amazon DataZone project",
-                "accessLevel": "Read",
+                "name": "AcceptSubscriptionRequest",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_AcceptSubscriptionRequest.html",
+                "permissionOnly": false,
+                "description": "Grants permission to approve a subscription request for a Data Asset",
+                "accessLevel": "Write",
                 "resourceTypes": [
                     {
                         "resourceType": "",
@@ -77215,11 +77215,11 @@
                 ]
             },
             {
-                "name": "GetProjectCredentials",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve credentials for an Amazon DataZone project",
-                "accessLevel": "Read",
+                "name": "CancelSubscription",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CancelSubscription.html",
+                "permissionOnly": false,
+                "description": "Grants permission to revoke or unsubscribe an approved subscription to Data Asset",
+                "accessLevel": "Write",
                 "resourceTypes": [
                     {
                         "resourceType": "",
@@ -77230,11 +77230,11 @@
                 ]
             },
             {
-                "name": "ListProjects",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve all Amazon DataZone projects",
-                "accessLevel": "List",
+                "name": "CreateAsset",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateAsset.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create asset",
+                "accessLevel": "Write",
                 "resourceTypes": [
                     {
                         "resourceType": "",
@@ -77245,11 +77245,11 @@
                 ]
             },
             {
-                "name": "ListUserProjects",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve all Amazon DataZone projects for a user",
-                "accessLevel": "List",
+                "name": "CreateAssetRevision",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateAssetRevision.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create new revision of an asset",
+                "accessLevel": "Write",
                 "resourceTypes": [
                     {
                         "resourceType": "",
@@ -77258,21 +77258,12 @@
                         "dependentActions": []
                     }
                 ]
-            }
-        ],
-        "resourceTypes": [],
-        "conditionKeys": []
-    },
-    {
-        "name": "Amazon DataZone Control",
-        "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazondatazonecontrol.html",
-        "servicePrefix": "datazonecontrol",
-        "actions": [
+            },
             {
-                "name": "CreateAccountAssociationInvitation",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to request association of an account with a given domain",
+                "name": "CreateAssetType",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateAssetType.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create an asset type",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
@@ -77285,9 +77276,24 @@
             },
             {
                 "name": "CreateDataSource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to create Amazon DataZone data sources used for publishing and subscribing to data",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateDataSource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a new DataSource",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateDomain",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateDomain.html",
+                "permissionOnly": false,
+                "description": "Grants permission to provision a domain which is a top level entity that contains other Amazon DataZone resources",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
@@ -77303,31 +77309,268 @@
             },
             {
                 "name": "CreateEnvironment",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to provision a root-domain which is a top level entity that contains other Amazon DataZone resources",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateEnvironment.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a collection of configurated resources used to publish and subscribe to data",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
                         "resourceType": "",
                         "required": false,
-                        "conditionKeys": [
-                            "aws:RequestTag/${TagKey}",
-                            "aws:TagKeys"
-                        ],
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateEnvironmentBlueprint",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateEnvironmentBlueprint.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a custom Environment Blueprint that allow user to add Environments to their Project",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateEnvironmentProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateEnvironmentProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a template from a Blueprint that can be used to create a Environment",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateFormType",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateFormType.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a form type or a new revision of it",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateGlossary",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateGlossary.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a business glossary",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateGlossaryTerm",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateGlossaryTerm.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a glossary term",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateGroupProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateGroupProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a DataZone group profile for an IAM Identity Center group",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateListingChangeSet",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateListingChangeSet.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create listing change set",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateProject",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateProject.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a Project to enable your team to publish and subscribe to data",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateProjectMembership",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateProjectMembership.html",
+                "permissionOnly": false,
+                "description": "Grants permission to add a user to a Project",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateSubscriptionGrant",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateSubscriptionGrant.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a grant for an approved subscription on a subscription target",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateSubscriptionRequest",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateSubscriptionRequest.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a subscription request for a Data Asset",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateSubscriptionTarget",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateSubscriptionTarget.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a subscription target for a Environment in the project",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "CreateUserProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_CreateUserProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create a user profile for an existing user in the customers IAM Identity Center",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteAsset",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteAsset.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete an asset",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteAssetType",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteAssetType.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete an asset type",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
                         "dependentActions": []
                     }
                 ]
             },
             {
                 "name": "DeleteDataSource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to delete a data source",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteDataSource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update existing DataSource",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
-                        "resourceType": "data-source",
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteDomain",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteDomain.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a provisioned domain",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "domain",
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
@@ -77335,14 +77578,284 @@
                 ]
             },
             {
-                "name": "DeleteEnvironment",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
+                "name": "DeleteDomainSharingPolicy",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteDomainSharingPolicy.html",
                 "permissionOnly": true,
-                "description": "Grants permission to delete a provisioned root-domain",
+                "description": "Grants permission to delete a resource policy for a DataZone Domain",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteEnvironment",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteEnvironment.html",
+                "permissionOnly": false,
+                "description": "Grants permission to Delete Environment",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
-                        "resourceType": "environment",
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteEnvironmentBlueprint",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteEnvironmentBlueprint.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete Environment Blueprint",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteEnvironmentBlueprintConfiguration",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteEnvironmentBlueprintConfiguration.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete environment blueprint configuration",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteEnvironmentProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteEnvironmentProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete Environment Profile",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteFormType",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteFormType.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a form type",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteGlossary",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteGlossary.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a business glossary",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteGlossaryTerm",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteGlossaryTerm.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a glossary term",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteListing",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteListing.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete listing",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteProject",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteProject.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a Project that enables your team to publish and subscribe to data",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteProjectMembership",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteProjectMembership.html",
+                "permissionOnly": false,
+                "description": "Grants permission to remove a user from a project",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteSubscriptionGrant",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteSubscriptionGrant.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a subscription grant from a subscription target",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteSubscriptionRequest",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteSubscriptionRequest.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a pending subscription request for a Data Asset",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "DeleteSubscriptionTarget",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_DeleteSubscriptionTarget.html",
+                "permissionOnly": false,
+                "description": "Grants permission to delete a subscription target from a Environment in the project",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetAsset",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetAsset.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve an asset",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetAssetType",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetAssetType.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get an asset type",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetDataSource",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetDataSource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to Get a existing DataSource in Amazon DataZone using its identifier",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetDataSourceRun",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetDataSourceRun.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get DataSource run job in Amazon DataZone using it's identifier",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetDomain",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetDomain.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve information about a domain",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "domain",
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
@@ -77350,11 +77863,221 @@
                 ]
             },
             {
-                "name": "DissociateAccount",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
+                "name": "GetDomainSharingPolicy",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetDomainSharingPolicy.html",
                 "permissionOnly": true,
-                "description": "Grants permission to disassociate an account with a given domain",
-                "accessLevel": "Write",
+                "description": "Grants permission to retrieve a resource policy for a DataZone Domain",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetEnvironment",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetEnvironment.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get Environment details",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetEnvironmentActionLink",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetEnvironmentActionLink.html",
+                "permissionOnly": true,
+                "description": "Grants permission to get environment action link",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetEnvironmentBlueprint",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetEnvironmentBlueprint.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get Environment Blueprint details",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetEnvironmentBlueprintConfiguration",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetEnvironmentBlueprintConfiguration.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get environment blueprint configuration",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetEnvironmentCredentials",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetEnvironmentCredentials.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get short term credentials that assume the Environment user role",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetEnvironmentProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetEnvironmentProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get Environment Profile details",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetFormType",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetFormType.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get a form type",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetGlossary",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetGlossary.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get a business glossary",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetGlossaryTerm",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetGlossaryTerm.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get a glossary term",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetGroupProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetGroupProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve an existing DataZone group profile",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetIamPortalLoginUrl",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetIamPortalLoginUrl.html",
+                "permissionOnly": true,
+                "description": "Grants permission to an IAM principal to log into the DataZone Portal",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetListing",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetListing.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get listing",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetProject",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetProject.html",
+                "permissionOnly": false,
+                "description": "Grants permission to get Project details",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "GetSubscription",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetSubscription.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve a subscription",
+                "accessLevel": "Read",
                 "resourceTypes": [
                     {
                         "resourceType": "",
@@ -77365,10 +78088,10 @@
                 ]
             },
             {
-                "name": "GetAssociatedDomain",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
+                "name": "GetSubscriptionEligibility",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetSubscriptionEligibility.html",
                 "permissionOnly": true,
-                "description": "Grants permission to retrieve information about any associated domain in the associated account",
+                "description": "Grants permission to get subscription eligibilty",
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
@@ -77380,25 +78103,25 @@
                 ]
             },
             {
-                "name": "GetDataSourceByEnvironment",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve any data source under any domain for a given root-domain",
+                "name": "GetSubscriptionGrant",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetSubscriptionGrant.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retireve a subscription grant",
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
-                        "resourceType": "data-source",
-                        "required": true,
+                        "resourceType": "",
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     }
                 ]
             },
             {
-                "name": "GetDomain",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve information about any domain in the account",
+                "name": "GetSubscriptionRequestDetails",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetSubscriptionRequestDetails.html",
+                "permissionOnly": false,
+                "description": "Grants permission to reject a subscription request for a Data Asset",
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
@@ -77410,25 +78133,25 @@
                 ]
             },
             {
-                "name": "GetEnvironment",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve information about a root-domain",
+                "name": "GetSubscriptionTarget",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetSubscriptionTarget.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retireve details of subscription target",
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
-                        "resourceType": "environment",
-                        "required": true,
+                        "resourceType": "",
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     }
                 ]
             },
             {
-                "name": "GetMetadataCollector",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve a publishing job",
+                "name": "GetUserProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_GetUserProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve a user profile for an existing user in the DataZone Domain",
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
@@ -77440,11 +78163,11 @@
                 ]
             },
             {
-                "name": "GetUserPortalLoginAuthCode",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve credentials to log into Amazon DataZone data portal from AWS management console",
-                "accessLevel": "Read",
+                "name": "ListAccountEnvironments",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListAccountEnvironments.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list Environments across all domains in an AWS Account",
+                "accessLevel": "List",
                 "resourceTypes": [
                     {
                         "resourceType": "",
@@ -77455,10 +78178,10 @@
                 ]
             },
             {
-                "name": "ListAccountAssociationInvitations",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve all account-association invitations for a given associated account",
+                "name": "ListAssetRevisions",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListAssetRevisions.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list revisions of an asset",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77470,10 +78193,10 @@
                 ]
             },
             {
-                "name": "ListAllAssociatedAccountsForEnvironment",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to list all associated accounts under the given root-domain, including accounts associated to its sub-domains",
+                "name": "ListDataSourceRunActivities",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListDataSourceRunActivities.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list DataSource runs job's activities on Asset",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77485,10 +78208,10 @@
                 ]
             },
             {
-                "name": "ListAssociatedEnvironments",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to lists all the associated domains for a given associated account",
+                "name": "ListDataSourceRuns",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListDataSourceRuns.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list DataSource runs job",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77501,9 +78224,9 @@
             },
             {
                 "name": "ListDataSources",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve all data sources under any domain in the associated account",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListDataSources.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list existing DataSources",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77515,10 +78238,10 @@
                 ]
             },
             {
-                "name": "ListDataSourcesByEnvironment",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve all data sources under any domain for a given root-domain",
+                "name": "ListDomains",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListDomains.html",
+                "permissionOnly": false,
+                "description": "Grants permission to retrieve all domains",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77530,10 +78253,10 @@
                 ]
             },
             {
-                "name": "ListDomains",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to list all the sub-domains for a given domain or a root-domain",
+                "name": "ListEnvironmentBlueprintConfigurations",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListEnvironmentBlueprintConfigurations.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list environment blueprint configurations",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77545,10 +78268,10 @@
                 ]
             },
             {
-                "name": "ListEnvironment",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve all root-domains",
+                "name": "ListEnvironmentBlueprints",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListEnvironmentBlueprints.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list Domain for Environment Blueprints",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77560,10 +78283,10 @@
                 ]
             },
             {
-                "name": "ListMetadataCollectorRuns",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to list all runs for a given publishing job through Amazon DataZone console for a data source",
+                "name": "ListEnvironmentProfiles",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListEnvironmentProfiles.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list Domain for Environment Profiles",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77575,10 +78298,55 @@
                 ]
             },
             {
-                "name": "ListMetadataCollectors",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve all publishing jobs",
+                "name": "ListEnvironments",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListEnvironments.html",
+                "permissionOnly": false,
+                "description": "Grants permission to show Environments in the Domain",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListGroupsForUser",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListGroupsForUser.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list all the DataZone group profiles that the DataZone user profile is a member of",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListNotifications",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListNotifications.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list notifications and events for a datazone user",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListProjectMemberships",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListProjectMemberships.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list Project Members",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77591,9 +78359,69 @@
             },
             {
                 "name": "ListProjects",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to retrieve all Amazon DataZone projects",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListProjects.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list Projects",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListSubscriptionGrants",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListSubscriptionGrants.html",
+                "permissionOnly": false,
+                "description": "Grants permission to List subscription grants for a subscribed principal",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListSubscriptionRequests",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListSubscriptionRequests.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list subscription requests",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListSubscriptionTargets",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListSubscriptionTargets.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list subscription targets",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ListSubscriptions",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListSubscriptions.html",
+                "permissionOnly": false,
+                "description": "Grants permission to list subscriptions",
                 "accessLevel": "List",
                 "resourceTypes": [
                     {
@@ -77606,19 +78434,28 @@
             },
             {
                 "name": "ListTagsForResource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListTagsForResource.html",
+                "permissionOnly": false,
                 "description": "Grants permission to retrieve all tags associated with a resource",
                 "accessLevel": "Read",
                 "resourceTypes": [
                     {
-                        "resourceType": "data-source",
+                        "resourceType": "domain",
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
-                    },
+                    }
+                ]
+            },
+            {
+                "name": "ListWarehouseMetadata",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ListWarehouseMetadata.html",
+                "permissionOnly": true,
+                "description": "Grants permission to list available Manager Secrets",
+                "accessLevel": "List",
+                "resourceTypes": [
                     {
-                        "resourceType": "environment",
+                        "resourceType": "",
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
@@ -77626,10 +78463,10 @@
                 ]
             },
             {
-                "name": "ReviewAccountAssociationInvitation",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
+                "name": "ProvisionDomain",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ProvisionDomain.html",
                 "permissionOnly": true,
-                "description": "Grants permission to accept or reject the pending association requests for the given account",
+                "description": "Grants permission to provision domain with default project setup",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
@@ -77641,23 +78478,227 @@
                 ]
             },
             {
-                "name": "TagResource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
+                "name": "PutDomainSharingPolicy",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_PutDomainSharingPolicy.html",
                 "permissionOnly": true,
-                "description": "Grants permission to add or update tags to a resource",
-                "accessLevel": "Tagging",
+                "description": "Grants permission to add a resource policy for a DataZone Domain",
+                "accessLevel": "Permissions management",
                 "resourceTypes": [
                     {
-                        "resourceType": "data-source",
+                        "resourceType": "",
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
-                    },
+                    }
+                ]
+            },
+            {
+                "name": "PutEnvironmentBlueprintConfiguration",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_PutEnvironmentBlueprintConfiguration.html",
+                "permissionOnly": false,
+                "description": "Grants permission to put environment blueprint configuration",
+                "accessLevel": "Write",
+                "resourceTypes": [
                     {
-                        "resourceType": "environment",
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RefreshToken",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_RefreshToken.html",
+                "permissionOnly": true,
+                "description": "Grants permission to refresh token",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RejectPredictions",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_RejectPredictions.html",
+                "permissionOnly": false,
+                "description": "Grants permission to reject prediction",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RejectSubscriptionRequest",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_RejectSubscriptionRequest.html",
+                "permissionOnly": false,
+                "description": "Grants permission to reject a subscription request for a Data Asset",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RevokeSubscription",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_RevokeSubscription.html",
+                "permissionOnly": false,
+                "description": "Grants permission to revoke a subscription",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "Search",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_Search.html",
+                "permissionOnly": false,
+                "description": "Grants permission to search datazone entities",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "SearchGroupProfiles",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_SearchGroupProfiles.html",
+                "permissionOnly": false,
+                "description": "Grants permission to search DataZone group profiles and IAM Identity Center groups",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "SearchListings",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_SearchListings.html",
+                "permissionOnly": false,
+                "description": "Grants permission to search listings",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "SearchTypes",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_SearchTypes.html",
+                "permissionOnly": false,
+                "description": "Grants permission to search types such asset types and form types in a domain",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "SearchUserProfiles",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_SearchUserProfiles.html",
+                "permissionOnly": false,
+                "description": "Grants permission to search DataZone user profiles, IAM Identity Center users, and DataZone IAM principal profiles",
+                "accessLevel": "List",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "SsoLogin",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_SsoLogin.html",
+                "permissionOnly": true,
+                "description": "Grants permission to login using SSO",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "SsoLogout",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_SsoLogout.html",
+                "permissionOnly": true,
+                "description": "Grants permission to logout as SSO user",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "StartDataSourceRun",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_StartDataSourceRun.html",
+                "permissionOnly": false,
+                "description": "Grants permission to start a DataSource run job",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "TagResource",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_TagResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to add or update tags to a resource",
+                "accessLevel": "Tagging",
+                "resourceTypes": [
+                    {
+                        "resourceType": "domain",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
                     },
                     {
                         "resourceType": "",
@@ -77672,20 +78713,14 @@
             },
             {
                 "name": "UntagResource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UntagResource.html",
+                "permissionOnly": false,
                 "description": "Grants permission to remove tags associated with a resource",
                 "accessLevel": "Tagging",
                 "resourceTypes": [
                     {
-                        "resourceType": "data-source",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "environment",
-                        "required": false,
+                        "resourceType": "domain",
+                        "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
                     },
@@ -77700,10 +78735,10 @@
                 ]
             },
             {
-                "name": "UpdateAccountAssociationDescription",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to update the description of the account association of the given associated account and given domain",
+                "name": "UpdateDataSource",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateDataSource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update existing DataSource",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
@@ -77715,14 +78750,14 @@
                 ]
             },
             {
-                "name": "UpdateDataSource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
-                "permissionOnly": true,
-                "description": "Grants permission to update a data source",
+                "name": "UpdateDomain",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateDomain.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update information for a domain",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
-                        "resourceType": "data-source",
+                        "resourceType": "domain",
                         "required": true,
                         "conditionKeys": [],
                         "dependentActions": []
@@ -77731,14 +78766,209 @@
             },
             {
                 "name": "UpdateEnvironment",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/what-is-datazone.html#accessing-datazone",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateEnvironment.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update Environment settings",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateEnvironmentBlueprint",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateEnvironmentBlueprint.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update Environment Blueprint settings",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateEnvironmentConfiguration",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateEnvironmentConfiguration.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update environment configuration",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateEnvironmentDeploymentStatus",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateEnvironmentDeploymentStatus.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update status of the Environment deployment",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateEnvironmentProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateEnvironmentProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update EnvironmentProfile configuration",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateGlossary",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateGlossary.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a business glossary",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateGlossaryTerm",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateGlossaryTerm.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a glossary term",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateGroupProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateGroupProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a DataZone group profile",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateProject",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateProject.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a Project that enables your team to publish and subscribe to data",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateSubscriptionGrantStatus",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateSubscriptionGrantStatus.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a subscription grant status for custom grants",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateSubscriptionRequest",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateSubscriptionRequest.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update business reason for subscription request for a Data Asset",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateSubscriptionTarget",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateSubscriptionTarget.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a subscription target",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "UpdateUserProfile",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_UpdateUserProfile.html",
+                "permissionOnly": false,
+                "description": "Grants permission to update a DataZone user profile",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ValidatePassRole",
+                "apiReferenceUrl": "${APIReferenceDocPage}API_ValidatePassRole.html",
                 "permissionOnly": true,
-                "description": "Grants permission to update information for a root-domain",
+                "description": "Grants permission to validate pass role",
                 "accessLevel": "Write",
                 "resourceTypes": [
                     {
-                        "resourceType": "environment",
-                        "required": true,
+                        "resourceType": "",
+                        "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
                     }
@@ -77747,17 +78977,9 @@
         ],
         "resourceTypes": [
             {
-                "name": "environment",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/create-root-domain.html",
-                "arnPattern": "arn:${Partition}:datazonecontrol:${Region}:${Account}:domain/${DomainId}",
-                "conditionKeys": [
-                    "aws:ResourceTag/${TagKey}"
-                ]
-            },
-            {
-                "name": "data-source",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/create-glue-data-source.html",
-                "arnPattern": "arn:${Partition}:datazonecontrol:${Region}:${Account}:data-source/${DomainId}",
+                "name": "domain",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/datazone/latest/userguide/create-domain.html",
+                "arnPattern": "arn:${Partition}:datazone:${Region}:${Account}:domain/${DomainId}",
                 "conditionKeys": [
                     "aws:ResourceTag/${TagKey}"
                 ]
@@ -134610,8 +135832,7 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "aws:TagKeys",
-                            "aws:RequestTag/${TagKey}"
+                            "aws:TagKeys"
                         ],
                         "dependentActions": []
                     }
@@ -276367,7 +277588,8 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
-                            "sts:AWSServiceName"
+                            "sts:AWSServiceName",
+                            "sts:DurationSeconds"
                         ],
                         "dependentActions": []
                     }
@@ -276737,6 +277959,12 @@
                 "description": "Filters access by the service that is obtaining a bearer token",
                 "type": "String"
             },
+            {
+                "name": "sts:DurationSeconds",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#ck_durationseconds",
+                "description": "Filters access by the duration in seconds when getting a bearer token",
+                "type": "String"
+            },
             {
                 "name": "sts:ExternalId",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html#ck_externalid",
@@ -293372,6 +294600,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "instance",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "maintenancewindow",
                         "required": false,
@@ -293408,6 +294642,12 @@
                         "conditionKeys": [],
                         "dependentActions": []
                     },
+                    {
+                        "resourceType": "task",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
                     {
                         "resourceType": "",
                         "required": false,
@@ -293511,6 +294751,7 @@
                         "resourceType": "",
                         "required": false,
                         "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}",
                             "aws:RequestTag/${TagKey}",
                             "aws:TagKeys"
                         ],
@@ -293542,6 +294783,16 @@
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:ResourceTag/${TagKey}",
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -295245,265 +296496,286 @@
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "ModifyDocumentPermission",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ModifyDocumentPermission.html",
-                "permissionOnly": false,
-                "description": "Grants permission to share a custom SSM document publicly or privately with specified AWS accounts",
-                "accessLevel": "Permissions management",
-                "resourceTypes": [
-                    {
-                        "resourceType": "document",
-                        "required": true,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "PutCalendar",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-change-calendar-prereqs.html",
-                "permissionOnly": true,
-                "description": "Grants permission to create/edit a specific calendar",
-                "accessLevel": "Write",
-                "resourceTypes": [
-                    {
-                        "resourceType": "document",
-                        "required": true,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "PutComplianceItems",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutComplianceItems.html",
-                "permissionOnly": false,
-                "description": "Grants permission to register a compliance type and other compliance details on a specified resource",
-                "accessLevel": "Write",
-                "resourceTypes": [
-                    {
-                        "resourceType": "instance",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "ModifyDocumentPermission",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_ModifyDocumentPermission.html",
+                "permissionOnly": false,
+                "description": "Grants permission to share a custom SSM document publicly or privately with specified AWS accounts",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "document",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "PutCalendar",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-change-calendar-prereqs.html",
+                "permissionOnly": true,
+                "description": "Grants permission to create/edit a specific calendar",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "document",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "PutComplianceItems",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutComplianceItems.html",
+                "permissionOnly": false,
+                "description": "Grants permission to register a compliance type and other compliance details on a specified resource",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "instance",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "managed-instance",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "ssm:SourceInstanceARN",
+                            "ec2:SourceInstanceARN"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "PutConfigurePackageResult",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html",
+                "permissionOnly": true,
+                "description": "Grants permission to SSM Agent to generate a report of the results of specific agent requests (internal Systems Manager call)",
+                "accessLevel": "Read",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "PutInventory",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutInventory.html",
+                "permissionOnly": false,
+                "description": "Grants permission to add or update inventory items on multiple specified managed instances",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "PutParameter",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutParameter.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create an SSM parameter",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "parameter",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys",
+                            "ssm:Overwrite"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "PutResourcePolicy",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutResourcePolicy.html",
+                "permissionOnly": false,
+                "description": "Grants permission to create or update a Systems Manager resource policy",
+                "accessLevel": "Permissions management",
+                "resourceTypes": [
+                    {
+                        "resourceType": "resourcearn",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RegisterDefaultPatchBaseline",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterDefaultPatchBaseline.html",
+                "permissionOnly": false,
+                "description": "Grants permission to specify the default patch baseline for an operating system type",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "patchbaseline",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RegisterManagedInstance",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html",
+                "permissionOnly": false,
+                "description": "Grants permission to register a Systems Manager Agent",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "aws:RequestTag/${TagKey}",
+                            "aws:TagKeys"
+                        ],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RegisterPatchBaselineForPatchGroup",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterPatchBaselineForPatchGroup.html",
+                "permissionOnly": false,
+                "description": "Grants permission to specify the default patch baseline for a specified patch group",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "patchbaseline",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RegisterTargetWithMaintenanceWindow",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterTargetWithMaintenanceWindow.html",
+                "permissionOnly": false,
+                "description": "Grants permission to register a target with a specified maintenance window",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "maintenancewindow",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RegisterTaskWithMaintenanceWindow",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterTaskWithMaintenanceWindow.html",
+                "permissionOnly": false,
+                "description": "Grants permission to register a task with a specified maintenance window",
+                "accessLevel": "Write",
+                "resourceTypes": [
+                    {
+                        "resourceType": "maintenancewindow",
+                        "required": true,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    }
+                ]
+            },
+            {
+                "name": "RemoveTagsFromResource",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RemoveTagsFromResource.html",
+                "permissionOnly": false,
+                "description": "Grants permission to remove a specified tag key from a specified resource",
+                "accessLevel": "Tagging",
+                "resourceTypes": [
+                    {
+                        "resourceType": "association",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "automation-execution",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "document",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "instance",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "maintenancewindow",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "managed-instance",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "opsitem",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "opsmetadata",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "parameter",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
+                    },
+                    {
+                        "resourceType": "patchbaseline",
+                        "required": false,
+                        "conditionKeys": [],
+                        "dependentActions": []
                     },
                     {
-                        "resourceType": "managed-instance",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "PutConfigurePackageResult",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html",
-                "permissionOnly": true,
-                "description": "Grants permission to SSM Agent to generate a report of the results of specific agent requests (internal Systems Manager call)",
-                "accessLevel": "Read",
-                "resourceTypes": [
-                    {
-                        "resourceType": "",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "PutInventory",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutInventory.html",
-                "permissionOnly": false,
-                "description": "Grants permission to add or update inventory items on multiple specified managed instances",
-                "accessLevel": "Write",
-                "resourceTypes": [
-                    {
-                        "resourceType": "",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "PutParameter",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutParameter.html",
-                "permissionOnly": false,
-                "description": "Grants permission to create an SSM parameter",
-                "accessLevel": "Write",
-                "resourceTypes": [
-                    {
-                        "resourceType": "parameter",
-                        "required": true,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "",
-                        "required": false,
-                        "conditionKeys": [
-                            "aws:RequestTag/${TagKey}",
-                            "aws:TagKeys",
-                            "ssm:Overwrite"
-                        ],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "PutResourcePolicy",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutResourcePolicy.html",
-                "permissionOnly": false,
-                "description": "Grants permission to create or update a Systems Manager resource policy",
-                "accessLevel": "Permissions management",
-                "resourceTypes": [
-                    {
-                        "resourceType": "resourcearn",
-                        "required": true,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "RegisterDefaultPatchBaseline",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterDefaultPatchBaseline.html",
-                "permissionOnly": false,
-                "description": "Grants permission to specify the default patch baseline for an operating system type",
-                "accessLevel": "Write",
-                "resourceTypes": [
-                    {
-                        "resourceType": "patchbaseline",
-                        "required": true,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "RegisterManagedInstance",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html",
-                "permissionOnly": false,
-                "description": "Grants permission to register a Systems Manager Agent",
-                "accessLevel": "Write",
-                "resourceTypes": [
-                    {
-                        "resourceType": "",
-                        "required": false,
-                        "conditionKeys": [
-                            "aws:RequestTag/${TagKey}",
-                            "aws:TagKeys"
-                        ],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "RegisterPatchBaselineForPatchGroup",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterPatchBaselineForPatchGroup.html",
-                "permissionOnly": false,
-                "description": "Grants permission to specify the default patch baseline for a specified patch group",
-                "accessLevel": "Write",
-                "resourceTypes": [
-                    {
-                        "resourceType": "patchbaseline",
-                        "required": true,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "RegisterTargetWithMaintenanceWindow",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterTargetWithMaintenanceWindow.html",
-                "permissionOnly": false,
-                "description": "Grants permission to register a target with a specified maintenance window",
-                "accessLevel": "Write",
-                "resourceTypes": [
-                    {
-                        "resourceType": "maintenancewindow",
-                        "required": true,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "RegisterTaskWithMaintenanceWindow",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RegisterTaskWithMaintenanceWindow.html",
-                "permissionOnly": false,
-                "description": "Grants permission to register a task with a specified maintenance window",
-                "accessLevel": "Write",
-                "resourceTypes": [
-                    {
-                        "resourceType": "maintenancewindow",
-                        "required": true,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    }
-                ]
-            },
-            {
-                "name": "RemoveTagsFromResource",
-                "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_RemoveTagsFromResource.html",
-                "permissionOnly": false,
-                "description": "Grants permission to remove a specified tag key from a specified resource",
-                "accessLevel": "Tagging",
-                "resourceTypes": [
-                    {
-                        "resourceType": "association",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "automation-execution",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "document",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "maintenancewindow",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "managed-instance",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "opsitem",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "opsmetadata",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "parameter",
-                        "required": false,
-                        "conditionKeys": [],
-                        "dependentActions": []
-                    },
-                    {
-                        "resourceType": "patchbaseline",
+                        "resourceType": "task",
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
@@ -295832,6 +297104,15 @@
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "ssm:SourceInstanceARN",
+                            "ec2:SourceInstanceARN"
+                        ],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -295904,6 +297185,15 @@
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "ssm:SourceInstanceARN",
+                            "ec2:SourceInstanceARN"
+                        ],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -295925,6 +297215,15 @@
                         "required": false,
                         "conditionKeys": [],
                         "dependentActions": []
+                    },
+                    {
+                        "resourceType": "",
+                        "required": false,
+                        "conditionKeys": [
+                            "ssm:SourceInstanceARN",
+                            "ec2:SourceInstanceARN"
+                        ],
+                        "dependentActions": []
                     }
                 ]
             },
@@ -296112,6 +297411,12 @@
                 "description": "Filters access by 'Create' requests based on whether mandatory tags are included in the request",
                 "type": "ArrayOfString"
             },
+            {
+                "name": "ec2:SourceInstanceARN",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policy-structure.html#amazon-ec2-keys",
+                "description": "Filters access by the ARN of the instance from which the request originated",
+                "type": "ARN"
+            },
             {
                 "name": "ssm:AutoApprove",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/change-manager-auto-approval-access.html",
@@ -296127,13 +297432,13 @@
             {
                 "name": "ssm:Overwrite",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions",
-                "description": "Controls whether Systems Manager parameters can be overwritten",
+                "description": "Filters access by controling whether Systems Manager parameters can be overwritten",
                 "type": "String"
             },
             {
                 "name": "ssm:Recursive",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions",
-                "description": "Filters access to Systems Manager parameters created in a hierarchical structure",
+                "description": "Filters access by Systems Manager parameters created in a hierarchical structure",
                 "type": "String"
             },
             {
@@ -296142,6 +297447,12 @@
                 "description": "Filters access by verifying that a user has permission to access either the default Session Manager configuration document or the custom configuration document specified in a request",
                 "type": "Bool"
             },
+            {
+                "name": "ssm:SourceInstanceARN",
+                "apiReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-policy-keys",
+                "description": "Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made. This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile",
+                "type": "ARN"
+            },
             {
                 "name": "ssm:SyncType",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions",
@@ -296151,7 +297462,7 @@
             {
                 "name": "ssm:resourceTag/${TagKey}",
                 "apiReferenceUrl": "https://docs.aws.amazon.com/systems-manager/latest/userguide/security_iam_service-with-iam.html#policy-conditions",
-                "description": "Filters access based on a tag key-value pair assigned to the Systems Manager resource",
+                "description": "Filters access by a tag key-value pair assigned to the Systems Manager resource",
                 "type": "String"
             },
             {