cdk-iam-floyd 0.242.0 → 0.246.0

package/.jsii

@@ -199,7 +199,7 @@
   },
   "name": "cdk-iam-floyd",
   "readme": {
-    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Twitter](https://badgen.net/twitter/follow/heyiamfloyd?icon=twitter)][twitter]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n[![Maintainability](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/maintainability)](https://codeclimate.com/github/udondan/iam-floyd/maintainability)\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 277 Services\n- 10648 Actions\n- 1122 Resource Types\n- 1121 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n[![NuGet](https://img.shields.io/nuget/dt/IAM.Floyd?label=nuget&color=blueviolet)](https://www.nuget.org/packages/IAM.Floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n[![NuGet](https://img.shields.io/nuget/dt/CDK.IAM.Floyd?label=nuget&color=orange)](https://www.nuget.org/packages/CDK.IAM.Floyd/)\n\n  If you need compatibility with CDK v2, you can use:<br>\n  [![npm CDK v2](https://img.shields.io/badge/npm-0.207.1--pre.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.207.1-pre.0)\n  [![PyPI CDK v2](https://img.shields.io/badge/pypi-0.207.1.dev0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.207.1.dev0/)\n\nFind them all on [libraries.io].\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [Maven]: https://github.com/udondan/iam-floyd/packages/258358\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [twitter]: https://twitter.com/heyiamfloyd\n"
+    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Twitter](https://badgen.net/twitter/follow/heyiamfloyd?icon=twitter)][twitter]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n[![Maintainability](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/maintainability)](https://codeclimate.com/github/udondan/iam-floyd/maintainability)\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 279 Services\n- 10678 Actions\n- 1127 Resource Types\n- 1124 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n[![NuGet](https://img.shields.io/nuget/dt/IAM.Floyd?label=nuget&color=blueviolet)](https://www.nuget.org/packages/IAM.Floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n[![NuGet](https://img.shields.io/nuget/dt/CDK.IAM.Floyd?label=nuget&color=orange)](https://www.nuget.org/packages/CDK.IAM.Floyd/)\n\n  If you need compatibility with CDK v2, you can use:<br>\n  [![npm CDK v2](https://img.shields.io/badge/npm-0.207.1--pre.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.207.1-pre.0)\n  [![PyPI CDK v2](https://img.shields.io/badge/pypi-0.207.1.dev0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.207.1.dev0/)\n\nFind them all on [libraries.io].\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [Maven]: https://github.com/udondan/iam-floyd/packages/258358\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [twitter]: https://twitter.com/heyiamfloyd\n"
   },
   "repository": {
     "type": "git",
@@ -50799,7 +50799,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/codecommit.ts",
-          "line": 1186
+          "line": 1188
         },
         "parameters": [
           {
@@ -50825,7 +50825,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/codecommit.ts",
-            "line": 1178
+            "line": 1180
           },
           "name": "ifReferences",
           "parameters": [
@@ -50886,7 +50886,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/codecommit.ts",
-            "line": 1145
+            "line": 1147
           },
           "name": "onRepository",
           "parameters": [
@@ -52165,7 +52165,7 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifAwsResourceTag()\n- .ifAwsRequestTag()\n- .ifAwsTagKeys()\n\nhttps://docs.aws.amazon.com/codecommit/latest/APIReference/API_TagResource.html",
+            "remarks": "Access Level: Tagging\n\nPossible conditions:\n- .ifAwsResourceTag()\n- .ifAwsRequestTag()\n- .ifAwsTagKeys()\n\nhttps://docs.aws.amazon.com/codecommit/latest/APIReference/API_TagResource.html",
             "stability": "experimental",
             "summary": "Grants permission to attach resource tags to a CodeCommit resource ARN."
           },
@@ -52199,7 +52199,7 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifAwsTagKeys()\n\nhttps://docs.aws.amazon.com/codecommit/latest/APIReference/API_UntagResource.html",
+            "remarks": "Access Level: Tagging\n\nPossible conditions:\n- .ifAwsTagKeys()\n\nhttps://docs.aws.amazon.com/codecommit/latest/APIReference/API_UntagResource.html",
             "stability": "experimental",
             "summary": "Grants permission to disassociate resource tags from a CodeCommit resource ARN."
           },
@@ -112031,7 +112031,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/elasticbeanstalk.ts",
-          "line": 952
+          "line": 968
         },
         "parameters": [
           {
@@ -112057,7 +112057,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticbeanstalk.ts",
-            "line": 809
+            "line": 825
           },
           "name": "ifFromApplication",
           "parameters": [
@@ -112118,7 +112118,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticbeanstalk.ts",
-            "line": 827
+            "line": 843
           },
           "name": "ifFromApplicationVersion",
           "parameters": [
@@ -112179,7 +112179,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticbeanstalk.ts",
-            "line": 845
+            "line": 861
           },
           "name": "ifFromConfigurationTemplate",
           "parameters": [
@@ -112240,7 +112240,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticbeanstalk.ts",
-            "line": 862
+            "line": 878
           },
           "name": "ifFromEnvironment",
           "parameters": [
@@ -112301,7 +112301,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticbeanstalk.ts",
-            "line": 880
+            "line": 896
           },
           "name": "ifFromPlatform",
           "parameters": [
@@ -112362,7 +112362,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticbeanstalk.ts",
-            "line": 898
+            "line": 914
           },
           "name": "ifFromSolutionStack",
           "parameters": [
@@ -112423,7 +112423,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticbeanstalk.ts",
-            "line": 944
+            "line": 960
           },
           "name": "ifInApplication",
           "parameters": [
@@ -112484,7 +112484,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticbeanstalk.ts",
-            "line": 679
+            "line": 695
           },
           "name": "onApplication",
           "parameters": [
@@ -112545,7 +112545,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticbeanstalk.ts",
-            "line": 703
+            "line": 719
           },
           "name": "onApplicationversion",
           "parameters": [
@@ -112615,7 +112615,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticbeanstalk.ts",
-            "line": 728
+            "line": 744
           },
           "name": "onConfigurationtemplate",
           "parameters": [
@@ -112685,7 +112685,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticbeanstalk.ts",
-            "line": 753
+            "line": 769
           },
           "name": "onEnvironment",
           "parameters": [
@@ -112755,7 +112755,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticbeanstalk.ts",
-            "line": 789
+            "line": 805
           },
           "name": "onPlatform",
           "parameters": [
@@ -112805,7 +112805,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticbeanstalk.ts",
-            "line": 772
+            "line": 788
           },
           "name": "onSolutionstack",
           "parameters": [
@@ -113663,6 +113663,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Tagging\n\nPossible conditions:\n- .ifAwsRequestTag()\n- .ifAwsTagKeys()\n\nhttps://docs.aws.amazon.com/elasticbeanstalk/latest/api/API_UpdateTagsForResource.html",
+            "stability": "experimental",
+            "summary": "Grants permission to add tags to an Elastic Beanstalk resource, remove tags, and to update tag values."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/elasticbeanstalk.ts",
+            "line": 606
+          },
+          "name": "toUpdateTagsForResource",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Elasticbeanstalk"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/elasticbeanstalk/latest/api/API_ValidateConfigurationSettings.html",
@@ -113671,7 +113688,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticbeanstalk.ts",
-            "line": 602
+            "line": 617
           },
           "name": "toValidateConfigurationSettings",
           "returns": {
@@ -113689,7 +113706,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticbeanstalk.ts",
-            "line": 606
+            "line": 621
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -113730,7 +113747,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/elasticfilesystem.ts",
-          "line": 527
+          "line": 529
         },
         "parameters": [
           {
@@ -113756,7 +113773,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticfilesystem.ts",
-            "line": 505
+            "line": 507
           },
           "name": "ifAccessedViaMountTarget",
           "parameters": [
@@ -113786,7 +113803,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticfilesystem.ts",
-            "line": 489
+            "line": 491
           },
           "name": "ifAccessPointArn",
           "parameters": [
@@ -113847,7 +113864,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticfilesystem.ts",
-            "line": 519
+            "line": 521
           },
           "name": "ifEncrypted",
           "parameters": [
@@ -113877,7 +113894,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticfilesystem.ts",
-            "line": 467
+            "line": 469
           },
           "name": "onAccessPoint",
           "parameters": [
@@ -113938,7 +113955,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/elasticfilesystem.ts",
-            "line": 445
+            "line": 447
           },
           "name": "onFileSystem",
           "parameters": [
@@ -114163,7 +114180,7 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/efs/latest/ug/API_DeleteFileSystemPolicy.html",
+            "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/efs/latest/ug/API_DeleteFileSystemPolicy.html",
             "stability": "experimental",
             "summary": "Grants permission to delete the resource-level policy for a file system."
           },
@@ -114435,7 +114452,7 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/efs/latest/ug/API_PutFileSystemPolicy.html",
+            "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/efs/latest/ug/API_PutFileSystemPolicy.html",
             "stability": "experimental",
             "summary": "Grants permission to apply a resource-level policy that defines the actions allowed or denied from given actors for the specified file system."
           },
@@ -123572,6 +123589,434 @@
         }
       ]
     },
+    "cdk-iam-floyd.Finspace": {
+      "assembly": "cdk-iam-floyd",
+      "base": "cdk-iam-floyd.PolicyStatement",
+      "docs": {
+        "stability": "experimental",
+        "summary": "Statement provider for service [finspace](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonfinspace.html)."
+      },
+      "fqn": "cdk-iam-floyd.Finspace",
+      "initializer": {
+        "docs": {
+          "stability": "experimental",
+          "summary": "Statement provider for service [finspace](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonfinspace.html)."
+        },
+        "locationInModule": {
+          "filename": "lib/generated/finspace.ts",
+          "line": 240
+        },
+        "parameters": [
+          {
+            "name": "props",
+            "optional": true,
+            "type": {
+              "fqn": "@aws-cdk/aws-iam.PolicyStatementProps"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "lib/generated/finspace.ts",
+        "line": 10
+      },
+      "methods": [
+        {
+          "docs": {
+            "remarks": "https://docs.aws.amazon.com/finspace/latest/userguide/finspace-example-policies.html",
+            "stability": "experimental",
+            "summary": "Adds a resource of type environment to the statement."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/finspace.ts",
+            "line": 205
+          },
+          "name": "onEnvironment",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- Identifier for the environmentId."
+              },
+              "name": "environmentId",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "defaults to empty string: all accounts.",
+                "summary": "- Account of the resource;"
+              },
+              "name": "account",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "defaults to empty string: all regions.",
+                "summary": "- Region of the resource;"
+              },
+              "name": "region",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "Possible conditions:\n- .ifAwsResourceTag()",
+                "summary": "- Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`."
+              },
+              "name": "partition",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Finspace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "https://docs.aws.amazon.com/finspace/latest/userguide/finspace-example-policies.html",
+            "stability": "experimental",
+            "summary": "Adds a resource of type user to the statement."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/finspace.ts",
+            "line": 227
+          },
+          "name": "onUser",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- Identifier for the userId."
+              },
+              "name": "userId",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "defaults to empty string: all accounts.",
+                "summary": "- Account of the resource;"
+              },
+              "name": "account",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "defaults to empty string: all regions.",
+                "summary": "- Region of the resource;"
+              },
+              "name": "region",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "Possible conditions:\n- .ifAwsResourceTag()",
+                "summary": "- Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`."
+              },
+              "name": "partition",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Finspace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/finspace/latest/management-api/API_CreateEnvironment.html",
+            "stability": "experimental",
+            "summary": "Grants permissions to create a FinSpace environment."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/finspace.ts",
+            "line": 20
+          },
+          "name": "toCreateEnvironment",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Finspace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/finspace/latest/management-api/API_CreateUser.html",
+            "stability": "experimental",
+            "summary": "Grants permissions to create a FinSpace user."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/finspace.ts",
+            "line": 31
+          },
+          "name": "toCreateUser",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Finspace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/finspace/latest/management-api/API_DeleteEnvironment.html",
+            "stability": "experimental",
+            "summary": "Grants permissions to delete a FinSpace environment."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/finspace.ts",
+            "line": 42
+          },
+          "name": "toDeleteEnvironment",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Finspace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/finspace/latest/management-api/API_DeleteUser.html",
+            "stability": "experimental",
+            "summary": "Grants permissions to delete a FinSpace user."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/finspace.ts",
+            "line": 53
+          },
+          "name": "toDeleteUser",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Finspace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/finspace/latest/management-api/API_GetEnvironment.html",
+            "stability": "experimental",
+            "summary": "Grants permissions to describe a FinSpace environment."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/finspace.ts",
+            "line": 64
+          },
+          "name": "toGetEnvironment",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Finspace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/finspace/latest/management-api/API_GetLoadSampleDataSetGroupIntoEnvironmentStatus.html",
+            "stability": "experimental",
+            "summary": "Grants permissions to request status of the loading of sample data bundle."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/finspace.ts",
+            "line": 75
+          },
+          "name": "toGetLoadSampleDataSetGroupIntoEnvironmentStatus",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Finspace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/finspace/latest/management-api/API_GetUser.html",
+            "stability": "experimental",
+            "summary": "Grants permissions to describe a FinSpace user."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/finspace.ts",
+            "line": 86
+          },
+          "name": "toGetUser",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Finspace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/finspace/latest/management-api/API_ListEnvironments.html",
+            "stability": "experimental",
+            "summary": "Grants permissions to list FinSpace environments in the AWS account."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/finspace.ts",
+            "line": 97
+          },
+          "name": "toListEnvironments",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Finspace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/finspace/latest/management-api/API_ListTagsForResource.html",
+            "stability": "experimental",
+            "summary": "Grants permissions to return a list of tags for a resource."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/finspace.ts",
+            "line": 108
+          },
+          "name": "toListTagsForResource",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Finspace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/finspace/latest/management-api/API_ListUsers.html",
+            "stability": "experimental",
+            "summary": "Grants permissions to list FinSpace users in an environment."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/finspace.ts",
+            "line": 119
+          },
+          "name": "toListUsers",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Finspace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/finspace/latest/management-api/API_LoadSampleDataSetGroupIntoEnvironment.html",
+            "stability": "experimental",
+            "summary": "Grants permissions to load sample data bundle into your FinSpace environment."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/finspace.ts",
+            "line": 130
+          },
+          "name": "toLoadSampleDataSetGroupIntoEnvironment",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Finspace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Tagging\n\nhttps://docs.aws.amazon.com/finspace/latest/management-api/API_TagResource.html",
+            "stability": "experimental",
+            "summary": "Grants permissions to tag a resource."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/finspace.ts",
+            "line": 141
+          },
+          "name": "toTagResource",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Finspace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Tagging\n\nhttps://docs.aws.amazon.com/finspace/latest/management-api/API_UntagResource.html",
+            "stability": "experimental",
+            "summary": "Grants permissions to untag a resource."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/finspace.ts",
+            "line": 152
+          },
+          "name": "toUntagResource",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Finspace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/finspace/latest/management-api/API_UpdateEnvironment.html",
+            "stability": "experimental",
+            "summary": "Grants permissions to update a FinSpace environment."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/finspace.ts",
+            "line": 163
+          },
+          "name": "toUpdateEnvironment",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Finspace"
+            }
+          }
+        }
+      ],
+      "name": "Finspace",
+      "properties": [
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "locationInModule": {
+            "filename": "lib/generated/finspace.ts",
+            "line": 167
+          },
+          "name": "accessLevelList",
+          "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
+          "protected": true,
+          "type": {
+            "fqn": "cdk-iam-floyd.AccessLevelList"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Holds the prefix of the service actions, e.g. `ec2`."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/finspace.ts",
+            "line": 11
+          },
+          "name": "servicePrefix",
+          "overrides": "cdk-iam-floyd.PolicyStatementBase",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ]
+    },
     "cdk-iam-floyd.Firehose": {
       "assembly": "cdk-iam-floyd",
       "base": "cdk-iam-floyd.PolicyStatement",
@@ -168963,7 +169408,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/managedstreamingforapachekafka.ts",
-          "line": 440
+          "line": 455
         },
         "parameters": [
           {
@@ -168989,7 +169434,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/managedstreamingforapachekafka.ts",
-            "line": 426
+            "line": 441
           },
           "name": "onCluster",
           "parameters": [
@@ -169560,6 +170005,23 @@
               "fqn": "cdk-iam-floyd.Kafka"
             }
           }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nDependent actions:\n- kms:RetireGrant\n\nhttps://docs.aws.amazon.com/msk/1.0/apireference/clusters-clusterarn-security.html#UpdateSecurity",
+            "stability": "experimental",
+            "summary": "Grants permission to update the security settings for the MSK cluster."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/managedstreamingforapachekafka.ts",
+            "line": 381
+          },
+          "name": "toUpdateSecurity",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Kafka"
+            }
+          }
         }
       ],
       "name": "Kafka",
@@ -169570,7 +170032,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/managedstreamingforapachekafka.ts",
-            "line": 371
+            "line": 385
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -169932,343 +170394,808 @@
           ],
           "returns": {
             "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:DescribeCluster\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
-            "stability": "experimental",
-            "summary": "Grants permission to alter various aspects of the cluster, equivalent to Apache Kafka's ALTER CLUSTER ACL."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 24
-          },
-          "name": "toAlterCluster",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:DescribeClusterDynamicConfiguration\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
-            "stability": "experimental",
-            "summary": "Grants permission to alter the dynamic configuration of a cluster, equivalent to Apache Kafka's ALTER_CONFIGS CLUSTER ACL."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 39
-          },
-          "name": "toAlterClusterDynamicConfiguration",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:DescribeGroup\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
-            "stability": "experimental",
-            "summary": "Grants permission to join groups on a cluster, equivalent to Apache Kafka's READ GROUP ACL."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 54
-          },
-          "name": "toAlterGroup",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:DescribeTopic\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
-            "stability": "experimental",
-            "summary": "Grants permission to alter topics on a cluster, equivalent to Apache Kafka's ALTER TOPIC ACL."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 69
-          },
-          "name": "toAlterTopic",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:DescribeTopicDynamicConfiguration\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
-            "stability": "experimental",
-            "summary": "Grants permission to alter the dynamic configuration of topics on a cluster, equivalent to Apache Kafka's ALTER_CONFIGS TOPIC ACL."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 84
-          },
-          "name": "toAlterTopicDynamicConfiguration",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:DescribeCluster\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "stability": "experimental",
+            "summary": "Grants permission to alter various aspects of the cluster, equivalent to Apache Kafka's ALTER CLUSTER ACL."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 24
+          },
+          "name": "toAlterCluster",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:DescribeClusterDynamicConfiguration\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "stability": "experimental",
+            "summary": "Grants permission to alter the dynamic configuration of a cluster, equivalent to Apache Kafka's ALTER_CONFIGS CLUSTER ACL."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 39
+          },
+          "name": "toAlterClusterDynamicConfiguration",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:DescribeGroup\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "stability": "experimental",
+            "summary": "Grants permission to join groups on a cluster, equivalent to Apache Kafka's READ GROUP ACL."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 54
+          },
+          "name": "toAlterGroup",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:DescribeTopic\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "stability": "experimental",
+            "summary": "Grants permission to alter topics on a cluster, equivalent to Apache Kafka's ALTER TOPIC ACL."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 69
+          },
+          "name": "toAlterTopic",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:DescribeTopicDynamicConfiguration\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "stability": "experimental",
+            "summary": "Grants permission to alter the dynamic configuration of topics on a cluster, equivalent to Apache Kafka's ALTER_CONFIGS TOPIC ACL."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 84
+          },
+          "name": "toAlterTopicDynamicConfiguration",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:DescribeTransactionalId\n- kafka-cluster:WriteData\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "stability": "experimental",
+            "summary": "Grants permission to alter transactional IDs on a cluster, equivalent to Apache Kafka's WRITE TRANSACTIONAL_ID ACL."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 100
+          },
+          "name": "toAlterTransactionalId",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "stability": "experimental",
+            "summary": "Grants permission to connect and authenticate to the cluster."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 111
+          },
+          "name": "toConnect",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "stability": "experimental",
+            "summary": "Grants permission to create topics on a cluster, equivalent to Apache Kafka's CREATE CLUSTER/TOPIC ACL."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 125
+          },
+          "name": "toCreateTopic",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:DescribeGroup\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "stability": "experimental",
+            "summary": "Grants permission to delete groups on a cluster, equivalent to Apache Kafka's DELETE GROUP ACL."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 140
+          },
+          "name": "toDeleteGroup",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:DescribeTopic\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "stability": "experimental",
+            "summary": "Grants permission to delete topics on a cluster, equivalent to Apache Kafka's DELETE TOPIC ACL."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 155
+          },
+          "name": "toDeleteTopic",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nDependent actions:\n- kafka-cluster:Connect\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "stability": "experimental",
+            "summary": "Grants permission to describe various aspects of the cluster, equivalent to Apache Kafka's DESCRIBE CLUSTER ACL."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 169
+          },
+          "name": "toDescribeCluster",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nDependent actions:\n- kafka-cluster:Connect\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "stability": "experimental",
+            "summary": "Grants permission to describe the dynamic configuration of a cluster, equivalent to Apache Kafka's DESCRIBE_CONFIGS CLUSTER ACL."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 183
+          },
+          "name": "toDescribeClusterDynamicConfiguration",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nDependent actions:\n- kafka-cluster:Connect\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "stability": "experimental",
+            "summary": "Grants permission to describe groups on a cluster, equivalent to Apache Kafka's DESCRIBE GROUP ACL."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 197
+          },
+          "name": "toDescribeGroup",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nDependent actions:\n- kafka-cluster:Connect\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "stability": "experimental",
+            "summary": "Grants permission to describe topics on a cluster, equivalent to Apache Kafka's DESCRIBE TOPIC ACL."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 211
+          },
+          "name": "toDescribeTopic",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nDependent actions:\n- kafka-cluster:Connect\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "stability": "experimental",
+            "summary": "Grants permission to describe the dynamic configuration of topics on a cluster, equivalent to Apache Kafka's DESCRIBE_CONFIGS TOPIC ACL."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 225
+          },
+          "name": "toDescribeTopicDynamicConfiguration",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nDependent actions:\n- kafka-cluster:Connect\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "stability": "experimental",
+            "summary": "Grants permission to describe transactional IDs on a cluster, equivalent to Apache Kafka's DESCRIBE TRANSACTIONAL_ID ACL."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 239
+          },
+          "name": "toDescribeTransactionalId",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nDependent actions:\n- kafka-cluster:AlterGroup\n- kafka-cluster:Connect\n- kafka-cluster:DescribeTopic\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "stability": "experimental",
+            "summary": "Grants permission to read data from topics on a cluster, equivalent to Apache Kafka's READ TOPIC ACL."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 255
+          },
+          "name": "toReadData",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:DescribeTopic\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "stability": "experimental",
+            "summary": "Grants permission to write data to topics on a cluster, equivalent to Apache Kafka's WRITE TOPIC ACL."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 270
+          },
+          "name": "toWriteData",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:WriteData\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "stability": "experimental",
+            "summary": "Grants permission to write data idempotently on a cluster, equivalent to Apache Kafka's IDEMPOTENT_WRITE CLUSTER ACL."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 285
+          },
+          "name": "toWriteDataIdempotently",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.KafkaCluster"
+            }
+          }
+        }
+      ],
+      "name": "KafkaCluster",
+      "properties": [
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 289
+          },
+          "name": "accessLevelList",
+          "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
+          "protected": true,
+          "type": {
+            "fqn": "cdk-iam-floyd.AccessLevelList"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Holds the prefix of the service actions, e.g. `ec2`."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "line": 11
+          },
+          "name": "servicePrefix",
+          "overrides": "cdk-iam-floyd.PolicyStatementBase",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ]
+    },
+    "cdk-iam-floyd.Kafkaconnect": {
+      "assembly": "cdk-iam-floyd",
+      "base": "cdk-iam-floyd.PolicyStatement",
+      "docs": {
+        "stability": "experimental",
+        "summary": "Statement provider for service [kafkaconnect](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmanagedstreamingforkafkaconnect.html)."
+      },
+      "fqn": "cdk-iam-floyd.Kafkaconnect",
+      "initializer": {
+        "docs": {
+          "stability": "experimental",
+          "summary": "Statement provider for service [kafkaconnect](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmanagedstreamingforkafkaconnect.html)."
+        },
+        "locationInModule": {
+          "filename": "lib/generated/managedstreamingforkafkaconnect.ts",
+          "line": 245
+        },
+        "parameters": [
+          {
+            "name": "props",
+            "optional": true,
+            "type": {
+              "fqn": "@aws-cdk/aws-iam.PolicyStatementProps"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "lib/generated/managedstreamingforkafkaconnect.ts",
+        "line": 10
+      },
+      "methods": [
+        {
+          "docs": {
+            "remarks": "https://docs.aws.amazon.com/MSKC/1.0/APIReference/connectors-connectorarn.html",
+            "stability": "experimental",
+            "summary": "Adds a resource of type connector to the statement."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/managedstreamingforkafkaconnect.ts",
+            "line": 189
+          },
+          "name": "onConnector",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- Identifier for the connectorName."
+              },
+              "name": "connectorName",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "- Identifier for the uUID."
+              },
+              "name": "uUID",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "defaults to empty string: all accounts.",
+                "summary": "- Account of the resource;"
+              },
+              "name": "account",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "defaults to empty string: all regions.",
+                "summary": "- Region of the resource;"
+              },
+              "name": "region",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "defaults to `aws`.",
+                "summary": "- Partition of the AWS account [aws, aws-cn, aws-us-gov];"
+              },
+              "name": "partition",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Kafkaconnect"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "https://docs.aws.amazon.com/MSKC/1.0/APIReference/custom-plugins-custompluginarn.html",
+            "stability": "experimental",
+            "summary": "Adds a resource of type custom plugin to the statement."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/managedstreamingforkafkaconnect.ts",
+            "line": 210
+          },
+          "name": "onCustomPlugin",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- Identifier for the customPluginName."
+              },
+              "name": "customPluginName",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "- Identifier for the uUID."
+              },
+              "name": "uUID",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "defaults to empty string: all accounts.",
+                "summary": "- Account of the resource;"
+              },
+              "name": "account",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "defaults to empty string: all regions.",
+                "summary": "- Region of the resource;"
+              },
+              "name": "region",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "defaults to `aws`.",
+                "summary": "- Partition of the AWS account [aws, aws-cn, aws-us-gov];"
+              },
+              "name": "partition",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Kafkaconnect"
             }
           }
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:DescribeTransactionalId\n- kafka-cluster:WriteData\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "remarks": "https://docs.aws.amazon.com/MSKC/1.0/APIReference/worker-configurations-workerconfigurationarn.html",
             "stability": "experimental",
-            "summary": "Grants permission to alter transactional IDs on a cluster, equivalent to Apache Kafka's WRITE TRANSACTIONAL_ID ACL."
+            "summary": "Adds a resource of type worker configuration to the statement."
           },
           "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 100
-          },
-          "name": "toAlterTransactionalId",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
-            "stability": "experimental",
-            "summary": "Grants permission to connect and authenticate to the cluster."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 111
+            "filename": "lib/generated/managedstreamingforkafkaconnect.ts",
+            "line": 231
           },
-          "name": "toConnect",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
+          "name": "onWorkerConfiguration",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- Identifier for the workerConfigurationName."
+              },
+              "name": "workerConfigurationName",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "- Identifier for the uUID."
+              },
+              "name": "uUID",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "defaults to empty string: all accounts.",
+                "summary": "- Account of the resource;"
+              },
+              "name": "account",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "defaults to empty string: all regions.",
+                "summary": "- Region of the resource;"
+              },
+              "name": "region",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "defaults to `aws`.",
+                "summary": "- Partition of the AWS account [aws, aws-cn, aws-us-gov];"
+              },
+              "name": "partition",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
             }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
-            "stability": "experimental",
-            "summary": "Grants permission to create topics on a cluster, equivalent to Apache Kafka's CREATE CLUSTER/TOPIC ACL."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 125
-          },
-          "name": "toCreateTopic",
+          ],
           "returns": {
             "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
+              "fqn": "cdk-iam-floyd.Kafkaconnect"
             }
           }
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:DescribeGroup\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "remarks": "Access Level: Write\n\nDependent actions:\n- ec2:CreateNetworkInterface\n- ec2:DescribeSecurityGroups\n- ec2:DescribeSubnets\n- ec2:DescribeVpcs\n- firehose:TagDeliveryStream\n- iam:AttachRolePolicy\n- iam:CreateServiceLinkedRole\n- iam:PassRole\n- iam:PutRolePolicy\n- logs:CreateLogDelivery\n- logs:DescribeLogGroups\n- logs:DescribeResourcePolicies\n- logs:GetLogDelivery\n- logs:ListLogDeliveries\n- logs:PutResourcePolicy\n- s3:GetBucketPolicy\n- s3:PutBucketPolicy\n\nhttps://docs.aws.amazon.com/MSKC/1.0/APIReference/connectors.html#CreateConnector",
             "stability": "experimental",
-            "summary": "Grants permission to delete groups on a cluster, equivalent to Apache Kafka's DELETE GROUP ACL."
+            "summary": "Grants permission to create an MSK Connect connector."
           },
           "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 140
+            "filename": "lib/generated/managedstreamingforkafkaconnect.ts",
+            "line": 39
           },
-          "name": "toDeleteGroup",
+          "name": "toCreateConnector",
           "returns": {
             "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
+              "fqn": "cdk-iam-floyd.Kafkaconnect"
             }
           }
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:DescribeTopic\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "remarks": "Access Level: Write\n\nDependent actions:\n- s3:GetObject\n\nhttps://docs.aws.amazon.com/MSKC/1.0/APIReference/custom-plugins.html#CreateCustomPlugin",
             "stability": "experimental",
-            "summary": "Grants permission to delete topics on a cluster, equivalent to Apache Kafka's DELETE TOPIC ACL."
+            "summary": "Grants permission to create an MSK Connect custom plugin."
           },
           "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 155
+            "filename": "lib/generated/managedstreamingforkafkaconnect.ts",
+            "line": 53
           },
-          "name": "toDeleteTopic",
+          "name": "toCreateCustomPlugin",
           "returns": {
             "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
+              "fqn": "cdk-iam-floyd.Kafkaconnect"
             }
           }
         },
         {
           "docs": {
-            "remarks": "Access Level: List\n\nDependent actions:\n- kafka-cluster:Connect\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/MSKC/1.0/APIReference/worker-configurations.html#CreateWorkerConfiguration",
             "stability": "experimental",
-            "summary": "Grants permission to describe various aspects of the cluster, equivalent to Apache Kafka's DESCRIBE CLUSTER ACL."
+            "summary": "Grants permission to create an MSK Connect worker configuration."
           },
           "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 169
+            "filename": "lib/generated/managedstreamingforkafkaconnect.ts",
+            "line": 64
           },
-          "name": "toDescribeCluster",
+          "name": "toCreateWorkerConfiguration",
           "returns": {
             "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
+              "fqn": "cdk-iam-floyd.Kafkaconnect"
             }
           }
         },
         {
           "docs": {
-            "remarks": "Access Level: List\n\nDependent actions:\n- kafka-cluster:Connect\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "remarks": "Access Level: Write\n\nDependent actions:\n- logs:DeleteLogDelivery\n- logs:ListLogDeliveries\n\nhttps://docs.aws.amazon.com/MSKC/1.0/APIReference/connectors-connectorarn.html#DeleteConnector",
             "stability": "experimental",
-            "summary": "Grants permission to describe the dynamic configuration of a cluster, equivalent to Apache Kafka's DESCRIBE_CONFIGS CLUSTER ACL."
+            "summary": "Grants permission to delete an MSK Connect connector."
           },
           "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 183
+            "filename": "lib/generated/managedstreamingforkafkaconnect.ts",
+            "line": 79
           },
-          "name": "toDescribeClusterDynamicConfiguration",
+          "name": "toDeleteConnector",
           "returns": {
             "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
+              "fqn": "cdk-iam-floyd.Kafkaconnect"
             }
           }
         },
         {
           "docs": {
-            "remarks": "Access Level: List\n\nDependent actions:\n- kafka-cluster:Connect\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/MSKC/1.0/APIReference/connectors-connectorarn.html#DescribeConnector",
             "stability": "experimental",
-            "summary": "Grants permission to describe groups on a cluster, equivalent to Apache Kafka's DESCRIBE GROUP ACL."
+            "summary": "Grants permission to describe an MSK Connect connector."
           },
           "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 197
+            "filename": "lib/generated/managedstreamingforkafkaconnect.ts",
+            "line": 90
           },
-          "name": "toDescribeGroup",
+          "name": "toDescribeConnector",
           "returns": {
             "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
+              "fqn": "cdk-iam-floyd.Kafkaconnect"
             }
           }
         },
         {
           "docs": {
-            "remarks": "Access Level: List\n\nDependent actions:\n- kafka-cluster:Connect\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/MSKC/1.0/APIReference/custom-plugins-custompluginarn.html#DescribeCustomPlugin",
             "stability": "experimental",
-            "summary": "Grants permission to describe topics on a cluster, equivalent to Apache Kafka's DESCRIBE TOPIC ACL."
+            "summary": "Grants permission to describe an MSK Connect custom plugin."
           },
           "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 211
+            "filename": "lib/generated/managedstreamingforkafkaconnect.ts",
+            "line": 101
           },
-          "name": "toDescribeTopic",
+          "name": "toDescribeCustomPlugin",
           "returns": {
             "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
+              "fqn": "cdk-iam-floyd.Kafkaconnect"
             }
           }
         },
         {
           "docs": {
-            "remarks": "Access Level: List\n\nDependent actions:\n- kafka-cluster:Connect\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/MSKC/1.0/APIReference/worker-configurations-workerconfigurationarn.html#DescribeWorkerConfiguration",
             "stability": "experimental",
-            "summary": "Grants permission to describe the dynamic configuration of topics on a cluster, equivalent to Apache Kafka's DESCRIBE_CONFIGS TOPIC ACL."
+            "summary": "Grants permission to describe an MSK Connect worker configuration."
           },
           "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 225
+            "filename": "lib/generated/managedstreamingforkafkaconnect.ts",
+            "line": 112
           },
-          "name": "toDescribeTopicDynamicConfiguration",
+          "name": "toDescribeWorkerConfiguration",
           "returns": {
             "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
+              "fqn": "cdk-iam-floyd.Kafkaconnect"
             }
           }
         },
         {
           "docs": {
-            "remarks": "Access Level: List\n\nDependent actions:\n- kafka-cluster:Connect\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/MSKC/1.0/APIReference/connectors.html#ListConnectors",
             "stability": "experimental",
-            "summary": "Grants permission to describe transactional IDs on a cluster, equivalent to Apache Kafka's DESCRIBE TRANSACTIONAL_ID ACL."
+            "summary": "Grants permission to list all MSK Connect connectors in this account."
           },
           "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 239
+            "filename": "lib/generated/managedstreamingforkafkaconnect.ts",
+            "line": 123
           },
-          "name": "toDescribeTransactionalId",
+          "name": "toListConnectors",
           "returns": {
             "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
+              "fqn": "cdk-iam-floyd.Kafkaconnect"
             }
           }
         },
         {
           "docs": {
-            "remarks": "Access Level: Read\n\nDependent actions:\n- kafka-cluster:AlterGroup\n- kafka-cluster:Connect\n- kafka-cluster:DescribeTopic\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/MSKC/1.0/APIReference/custom-plugins.html#ListCustomPlugins",
             "stability": "experimental",
-            "summary": "Grants permission to read data from topics on a cluster, equivalent to Apache Kafka's READ TOPIC ACL."
+            "summary": "Grants permission to list all MSK Connect custom plugins in this account."
           },
           "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 255
+            "filename": "lib/generated/managedstreamingforkafkaconnect.ts",
+            "line": 134
           },
-          "name": "toReadData",
+          "name": "toListCustomPlugins",
           "returns": {
             "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
+              "fqn": "cdk-iam-floyd.Kafkaconnect"
             }
           }
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:DescribeTopic\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/MSKC/1.0/APIReference/worker-configurations.html#ListWorkerConfigurations",
             "stability": "experimental",
-            "summary": "Grants permission to write data to topics on a cluster, equivalent to Apache Kafka's WRITE TOPIC ACL."
+            "summary": "Grants permission to list all MSK Connect worker configurations in this account."
           },
           "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 270
+            "filename": "lib/generated/managedstreamingforkafkaconnect.ts",
+            "line": 145
           },
-          "name": "toWriteData",
+          "name": "toListWorkerConfigurations",
           "returns": {
             "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
+              "fqn": "cdk-iam-floyd.Kafkaconnect"
             }
           }
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nDependent actions:\n- kafka-cluster:Connect\n- kafka-cluster:WriteData\n\nhttps://docs.aws.amazon.com/msk/latest/developerguide/iam-access-control.html#actions",
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/MSKC/1.0/APIReference/connectors-connectorarn.html#UpdateConnector",
             "stability": "experimental",
-            "summary": "Grants permission to write data idempotently on a cluster, equivalent to Apache Kafka's IDEMPOTENT_WRITE CLUSTER ACL."
+            "summary": "Grants permission to update an MSK Connect connector."
           },
           "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 285
+            "filename": "lib/generated/managedstreamingforkafkaconnect.ts",
+            "line": 156
           },
-          "name": "toWriteDataIdempotently",
+          "name": "toUpdateConnector",
           "returns": {
             "type": {
-              "fqn": "cdk-iam-floyd.KafkaCluster"
+              "fqn": "cdk-iam-floyd.Kafkaconnect"
             }
           }
         }
       ],
-      "name": "KafkaCluster",
+      "name": "Kafkaconnect",
       "properties": [
         {
           "docs": {
             "stability": "experimental"
           },
           "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
-            "line": 289
+            "filename": "lib/generated/managedstreamingforkafkaconnect.ts",
+            "line": 160
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -170283,7 +171210,7 @@
             "summary": "Holds the prefix of the service actions, e.g. `ec2`."
           },
           "locationInModule": {
-            "filename": "lib/generated/apachekafkaapisforamazonmskclusters.ts",
+            "filename": "lib/generated/managedstreamingforkafkaconnect.ts",
             "line": 11
           },
           "name": "servicePrefix",
@@ -170309,7 +171236,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/kendra.ts",
-          "line": 677
+          "line": 689
         },
         "parameters": [
           {
@@ -170335,7 +171262,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 591
+            "line": 603
           },
           "name": "onDataSource",
           "parameters": [
@@ -170405,7 +171332,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 615
+            "line": 627
           },
           "name": "onFaq",
           "parameters": [
@@ -170475,7 +171402,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 568
+            "line": 580
           },
           "name": "onIndex",
           "parameters": [
@@ -170536,7 +171463,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 663
+            "line": 675
           },
           "name": "onQuerySuggestionsBlockList",
           "parameters": [
@@ -170606,7 +171533,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 639
+            "line": 651
           },
           "name": "onThesaurus",
           "parameters": [
@@ -170685,6 +171612,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/kendra/latest/dg/API_BatchGetDocumentStatus.html",
+            "stability": "experimental",
+            "summary": "Grants permission to do batch get document status."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/kendra.ts",
+            "line": 31
+          },
+          "name": "toBatchGetDocumentStatus",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Kendra"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/kendra/latest/dg/API_BatchPutDocument.html",
@@ -170693,7 +171637,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 31
+            "line": 42
           },
           "name": "toBatchPutDocument",
           "returns": {
@@ -170710,7 +171654,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 42
+            "line": 53
           },
           "name": "toClearQuerySuggestions",
           "returns": {
@@ -170727,7 +171671,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 57
+            "line": 68
           },
           "name": "toCreateDataSource",
           "returns": {
@@ -170744,7 +171688,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 72
+            "line": 83
           },
           "name": "toCreateFaq",
           "returns": {
@@ -170761,7 +171705,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 87
+            "line": 98
           },
           "name": "toCreateIndex",
           "returns": {
@@ -170778,7 +171722,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 102
+            "line": 113
           },
           "name": "toCreateQuerySuggestionsBlockList",
           "returns": {
@@ -170795,7 +171739,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 117
+            "line": 128
           },
           "name": "toCreateThesaurus",
           "returns": {
@@ -170812,7 +171756,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 128
+            "line": 139
           },
           "name": "toDeleteDataSource",
           "returns": {
@@ -170829,7 +171773,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 139
+            "line": 150
           },
           "name": "toDeleteFaq",
           "returns": {
@@ -170846,7 +171790,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 150
+            "line": 161
           },
           "name": "toDeleteIndex",
           "returns": {
@@ -170863,7 +171807,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 161
+            "line": 172
           },
           "name": "toDeletePrincipalMapping",
           "returns": {
@@ -170880,7 +171824,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 172
+            "line": 183
           },
           "name": "toDeleteQuerySuggestionsBlockList",
           "returns": {
@@ -170897,7 +171841,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 183
+            "line": 194
           },
           "name": "toDeleteThesaurus",
           "returns": {
@@ -170914,7 +171858,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 194
+            "line": 205
           },
           "name": "toDescribeDataSource",
           "returns": {
@@ -170931,7 +171875,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 205
+            "line": 216
           },
           "name": "toDescribeFaq",
           "returns": {
@@ -170948,7 +171892,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 216
+            "line": 227
           },
           "name": "toDescribeIndex",
           "returns": {
@@ -170965,7 +171909,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 227
+            "line": 238
           },
           "name": "toDescribePrincipalMapping",
           "returns": {
@@ -170982,7 +171926,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 238
+            "line": 249
           },
           "name": "toDescribeQuerySuggestionsBlockList",
           "returns": {
@@ -170999,7 +171943,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 249
+            "line": 260
           },
           "name": "toDescribeQuerySuggestionsConfig",
           "returns": {
@@ -171016,7 +171960,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 260
+            "line": 271
           },
           "name": "toDescribeThesaurus",
           "returns": {
@@ -171033,7 +171977,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 271
+            "line": 282
           },
           "name": "toGetQuerySuggestions",
           "returns": {
@@ -171050,7 +171994,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 293
+            "line": 304
           },
           "name": "toListDataSources",
           "returns": {
@@ -171067,7 +172011,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 282
+            "line": 293
           },
           "name": "toListDataSourceSyncJobs",
           "returns": {
@@ -171084,7 +172028,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 304
+            "line": 315
           },
           "name": "toListFaqs",
           "returns": {
@@ -171101,7 +172045,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 315
+            "line": 326
           },
           "name": "toListGroupsOlderThanOrderingId",
           "returns": {
@@ -171118,7 +172062,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 326
+            "line": 337
           },
           "name": "toListIndices",
           "returns": {
@@ -171135,7 +172079,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 337
+            "line": 348
           },
           "name": "toListQuerySuggestionsBlockLists",
           "returns": {
@@ -171152,7 +172096,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 348
+            "line": 359
           },
           "name": "toListTagsForResource",
           "returns": {
@@ -171169,7 +172113,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 359
+            "line": 370
           },
           "name": "toListThesauri",
           "returns": {
@@ -171186,7 +172130,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 370
+            "line": 381
           },
           "name": "toPutPrincipalMapping",
           "returns": {
@@ -171203,7 +172147,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 381
+            "line": 392
           },
           "name": "toQuery",
           "returns": {
@@ -171220,7 +172164,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 392
+            "line": 403
           },
           "name": "toStartDataSourceSyncJob",
           "returns": {
@@ -171237,7 +172181,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 403
+            "line": 414
           },
           "name": "toStopDataSourceSyncJob",
           "returns": {
@@ -171254,7 +172198,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 414
+            "line": 425
           },
           "name": "toSubmitFeedback",
           "returns": {
@@ -171271,7 +172215,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 429
+            "line": 440
           },
           "name": "toTagResource",
           "returns": {
@@ -171288,7 +172232,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 443
+            "line": 454
           },
           "name": "toUntagResource",
           "returns": {
@@ -171305,7 +172249,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 454
+            "line": 465
           },
           "name": "toUpdateDataSource",
           "returns": {
@@ -171322,7 +172266,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 465
+            "line": 476
           },
           "name": "toUpdateIndex",
           "returns": {
@@ -171339,7 +172283,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 476
+            "line": 487
           },
           "name": "toUpdateQuerySuggestionsBlockList",
           "returns": {
@@ -171356,7 +172300,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 487
+            "line": 498
           },
           "name": "toUpdateQuerySuggestionsConfig",
           "returns": {
@@ -171373,7 +172317,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 498
+            "line": 509
           },
           "name": "toUpdateThesaurus",
           "returns": {
@@ -171391,7 +172335,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kendra.ts",
-            "line": 502
+            "line": 513
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -190825,7 +191769,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/macie.ts",
-          "line": 819
+          "line": 831
         },
         "parameters": [
           {
@@ -190851,7 +191795,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/macie.ts",
-            "line": 740
+            "line": 752
           },
           "name": "onClassificationJob",
           "parameters": [
@@ -190912,7 +191856,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/macie.ts",
-            "line": 762
+            "line": 774
           },
           "name": "onCustomDataIdentifier",
           "parameters": [
@@ -190973,7 +191917,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/macie.ts",
-            "line": 784
+            "line": 796
           },
           "name": "onFindingsFilter",
           "parameters": [
@@ -191034,7 +191978,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/macie.ts",
-            "line": 806
+            "line": 818
           },
           "name": "onMember",
           "parameters": [
@@ -191801,6 +192745,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/macie/latest/APIReference/managed-data-identifiers-list.html",
+            "stability": "experimental",
+            "summary": "Grants permission to retrieve information about managed data identifiers."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/macie.ts",
+            "line": 498
+          },
+          "name": "toListManagedDataIdentifiers",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Macie2"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/macie/latest/APIReference/members.html",
@@ -191809,7 +192770,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/macie.ts",
-            "line": 498
+            "line": 509
           },
           "name": "toListMembers",
           "returns": {
@@ -191826,7 +192787,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/macie.ts",
-            "line": 509
+            "line": 520
           },
           "name": "toListOrganizationAdminAccounts",
           "returns": {
@@ -191843,7 +192804,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/macie.ts",
-            "line": 520
+            "line": 531
           },
           "name": "toListTagsForResource",
           "returns": {
@@ -191860,7 +192821,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/macie.ts",
-            "line": 531
+            "line": 542
           },
           "name": "toPutClassificationExportConfiguration",
           "returns": {
@@ -191877,7 +192838,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/macie.ts",
-            "line": 542
+            "line": 553
           },
           "name": "toPutFindingsPublicationConfiguration",
           "returns": {
@@ -191894,7 +192855,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/macie.ts",
-            "line": 553
+            "line": 564
           },
           "name": "toSearchResources",
           "returns": {
@@ -191911,7 +192872,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/macie.ts",
-            "line": 568
+            "line": 579
           },
           "name": "toTagResource",
           "returns": {
@@ -191928,7 +192889,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/macie.ts",
-            "line": 579
+            "line": 590
           },
           "name": "toTestCustomDataIdentifier",
           "returns": {
@@ -191945,7 +192906,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/macie.ts",
-            "line": 593
+            "line": 604
           },
           "name": "toUntagResource",
           "returns": {
@@ -191962,7 +192923,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/macie.ts",
-            "line": 608
+            "line": 619
           },
           "name": "toUpdateClassificationJob",
           "returns": {
@@ -191979,7 +192940,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/macie.ts",
-            "line": 623
+            "line": 634
           },
           "name": "toUpdateFindingsFilter",
           "returns": {
@@ -191996,7 +192957,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/macie.ts",
-            "line": 634
+            "line": 645
           },
           "name": "toUpdateMacieSession",
           "returns": {
@@ -192013,7 +192974,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/macie.ts",
-            "line": 645
+            "line": 656
           },
           "name": "toUpdateMemberSession",
           "returns": {
@@ -192030,7 +192991,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/macie.ts",
-            "line": 656
+            "line": 667
           },
           "name": "toUpdateOrganizationConfiguration",
           "returns": {
@@ -192048,7 +193009,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/macie.ts",
-            "line": 660
+            "line": 671
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -279799,7 +280760,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/snowball.ts",
-          "line": 290
+          "line": 326
         },
         "parameters": [
           {
@@ -279902,6 +280863,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/snowball/latest/api-reference/API_CreateLongTermPricing.html",
+            "stability": "experimental",
+            "summary": "Grants permission to creates a LongTermPricingListEntry for allowing customers to add an upfront billing contract for a job."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/snowball.ts",
+            "line": 75
+          },
+          "name": "toCreateLongTermPricing",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Snowball"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/snowball/latest/api-reference/API_CreateReturnShippingLabel.html",
@@ -279910,7 +280888,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/snowball.ts",
-            "line": 75
+            "line": 86
           },
           "name": "toCreateReturnShippingLabel",
           "returns": {
@@ -279927,7 +280905,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/snowball.ts",
-            "line": 86
+            "line": 97
           },
           "name": "toDescribeAddress",
           "returns": {
@@ -279944,7 +280922,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/snowball.ts",
-            "line": 97
+            "line": 108
           },
           "name": "toDescribeAddresses",
           "returns": {
@@ -279961,7 +280939,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/snowball.ts",
-            "line": 108
+            "line": 119
           },
           "name": "toDescribeCluster",
           "returns": {
@@ -279978,7 +280956,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/snowball.ts",
-            "line": 119
+            "line": 130
           },
           "name": "toDescribeJob",
           "returns": {
@@ -279995,7 +280973,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/snowball.ts",
-            "line": 130
+            "line": 141
           },
           "name": "toDescribeReturnShippingLabel",
           "returns": {
@@ -280012,7 +280990,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/snowball.ts",
-            "line": 141
+            "line": 152
           },
           "name": "toGetJobManifest",
           "returns": {
@@ -280029,7 +281007,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/snowball.ts",
-            "line": 152
+            "line": 163
           },
           "name": "toGetJobUnlockCode",
           "returns": {
@@ -280046,7 +281024,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/snowball.ts",
-            "line": 163
+            "line": 174
           },
           "name": "toGetSnowballUsage",
           "returns": {
@@ -280063,7 +281041,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/snowball.ts",
-            "line": 174
+            "line": 185
           },
           "name": "toGetSoftwareUpdates",
           "returns": {
@@ -280080,7 +281058,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/snowball.ts",
-            "line": 185
+            "line": 196
           },
           "name": "toListClusterJobs",
           "returns": {
@@ -280097,7 +281075,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/snowball.ts",
-            "line": 196
+            "line": 207
           },
           "name": "toListClusters",
           "returns": {
@@ -280114,7 +281092,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/snowball.ts",
-            "line": 207
+            "line": 218
           },
           "name": "toListCompatibleImages",
           "returns": {
@@ -280131,7 +281109,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/snowball.ts",
-            "line": 218
+            "line": 229
           },
           "name": "toListJobs",
           "returns": {
@@ -280140,6 +281118,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/snowball/latest/api-reference/API_ListLongTermPricing.html",
+            "stability": "experimental",
+            "summary": "Grants permission to list LongTermPricingListEntry objects for the account making the request."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/snowball.ts",
+            "line": 240
+          },
+          "name": "toListLongTermPricing",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Snowball"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/snowball/latest/api-reference/API_UpdateCluster.html",
@@ -280148,7 +281143,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/snowball.ts",
-            "line": 229
+            "line": 251
           },
           "name": "toUpdateCluster",
           "returns": {
@@ -280165,7 +281160,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/snowball.ts",
-            "line": 240
+            "line": 262
           },
           "name": "toUpdateJob",
           "returns": {
@@ -280182,7 +281177,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/snowball.ts",
-            "line": 251
+            "line": 273
           },
           "name": "toUpdateJobShipmentState",
           "returns": {
@@ -280190,6 +281185,23 @@
               "fqn": "cdk-iam-floyd.Snowball"
             }
           }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/snowball/latest/api-reference/API_UpdateLongTermPricing.html",
+            "stability": "experimental",
+            "summary": "Grants permission to update a specific upfront billing contract for a job."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/snowball.ts",
+            "line": 284
+          },
+          "name": "toUpdateLongTermPricing",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Snowball"
+            }
+          }
         }
       ],
       "name": "Snowball",
@@ -280200,7 +281212,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/snowball.ts",
-            "line": 255
+            "line": 288
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -281155,7 +282167,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/sqs.ts",
-          "line": 289
+          "line": 251
         },
         "parameters": [
           {
@@ -281181,7 +282193,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqs.ts",
-            "line": 276
+            "line": 238
           },
           "name": "onQueue",
           "parameters": [
@@ -281238,7 +282250,7 @@
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_AddPermission.html",
             "stability": "experimental",
-            "summary": "Adds a permission to a queue for a specific principal."
+            "summary": "Grants permission to a queue for a specific principal."
           },
           "locationInModule": {
             "filename": "lib/generated/sqs.ts",
@@ -281255,7 +282267,7 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ChangeMessageVisibility.html",
             "stability": "experimental",
-            "summary": "Changes the visibility timeout of a specified message in a queue to a new value."
+            "summary": "Grants permission to change the visibility timeout of a specified message in a queue to a new value."
           },
           "locationInModule": {
             "filename": "lib/generated/sqs.ts",
@@ -281268,32 +282280,15 @@
             }
           }
         },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ChangeMessageVisibilityBatch.html",
-            "stability": "experimental",
-            "summary": "Changes the visibility timeout of multiple messages."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/sqs.ts",
-            "line": 42
-          },
-          "name": "toChangeMessageVisibilityBatch",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Sqs"
-            }
-          }
-        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_CreateQueue.html",
             "stability": "experimental",
-            "summary": "Creates a new queue, or returns the URL of an existing one."
+            "summary": "Grants permission to create a new queue, or returns the URL of an existing one."
           },
           "locationInModule": {
             "filename": "lib/generated/sqs.ts",
-            "line": 53
+            "line": 42
           },
           "name": "toCreateQueue",
           "returns": {
@@ -281306,11 +282301,11 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_DeleteMessage.html",
             "stability": "experimental",
-            "summary": "Deletes the specified message from the specified queue."
+            "summary": "Grants permission to delete the specified message from the specified queue."
           },
           "locationInModule": {
             "filename": "lib/generated/sqs.ts",
-            "line": 64
+            "line": 53
           },
           "name": "toDeleteMessage",
           "returns": {
@@ -281319,32 +282314,15 @@
             }
           }
         },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_DeleteMessageBatch.html",
-            "stability": "experimental",
-            "summary": "Deletes up to ten messages from the specified queue."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/sqs.ts",
-            "line": 75
-          },
-          "name": "toDeleteMessageBatch",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Sqs"
-            }
-          }
-        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_DeleteQueue.html",
             "stability": "experimental",
-            "summary": "Deletes the queue specified by the queue URL, regardless of whether the queue is empty."
+            "summary": "Grants permission to delete the queue specified by the queue URL, regardless of whether the queue is empty."
           },
           "locationInModule": {
             "filename": "lib/generated/sqs.ts",
-            "line": 86
+            "line": 64
           },
           "name": "toDeleteQueue",
           "returns": {
@@ -281357,11 +282335,11 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_GetQueueAttributes.html",
             "stability": "experimental",
-            "summary": "Gets attributes for the specified queue."
+            "summary": "Grants permission to get attributes for the specified queue."
           },
           "locationInModule": {
             "filename": "lib/generated/sqs.ts",
-            "line": 97
+            "line": 75
           },
           "name": "toGetQueueAttributes",
           "returns": {
@@ -281374,11 +282352,11 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_GetQueueUrl.html",
             "stability": "experimental",
-            "summary": "Returns the URL of an existing queue."
+            "summary": "Grants permission to return the URL of an existing queue."
           },
           "locationInModule": {
             "filename": "lib/generated/sqs.ts",
-            "line": 108
+            "line": 86
           },
           "name": "toGetQueueUrl",
           "returns": {
@@ -281391,11 +282369,11 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ListDeadLetterSourceQueues.html",
             "stability": "experimental",
-            "summary": "Returns a list of your queues that have the RedrivePolicy queue attribute configured with a dead letter queue."
+            "summary": "Grants permission to return a list of your queues that have the RedrivePolicy queue attribute configured with a dead letter queue."
           },
           "locationInModule": {
             "filename": "lib/generated/sqs.ts",
-            "line": 119
+            "line": 97
           },
           "name": "toListDeadLetterSourceQueues",
           "returns": {
@@ -281406,13 +282384,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ListQueues.html",
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ListQueues.html",
             "stability": "experimental",
-            "summary": "Returns a list of your queues."
+            "summary": "Grants permission to return a list of your queues."
           },
           "locationInModule": {
             "filename": "lib/generated/sqs.ts",
-            "line": 141
+            "line": 119
           },
           "name": "toListQueues",
           "returns": {
@@ -281425,11 +282403,11 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ListQueueTags.html",
             "stability": "experimental",
-            "summary": "Lists tags added to an SQS queue."
+            "summary": "Grants permission to list tags added to an SQS queue."
           },
           "locationInModule": {
             "filename": "lib/generated/sqs.ts",
-            "line": 130
+            "line": 108
           },
           "name": "toListQueueTags",
           "returns": {
@@ -281442,11 +282420,11 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_PurgeQueue.html",
             "stability": "experimental",
-            "summary": "Deletes the messages in a queue specified by the queue URL."
+            "summary": "Grants permission to delete the messages in a queue specified by the queue URL."
           },
           "locationInModule": {
             "filename": "lib/generated/sqs.ts",
-            "line": 152
+            "line": 130
           },
           "name": "toPurgeQueue",
           "returns": {
@@ -281459,11 +282437,11 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ReceiveMessage.html",
             "stability": "experimental",
-            "summary": "Retrieves one or more messages, with a maximum limit of 10 messages, from the specified queue."
+            "summary": "Grants permission to retrieve one or more messages, with a maximum limit of 10 messages, from the specified queue."
           },
           "locationInModule": {
             "filename": "lib/generated/sqs.ts",
-            "line": 163
+            "line": 141
           },
           "name": "toReceiveMessage",
           "returns": {
@@ -281476,11 +282454,11 @@
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_RemovePermission.html",
             "stability": "experimental",
-            "summary": "Revokes any permissions in the queue policy that matches the specified Label parameter."
+            "summary": "Grants permission to revoke any permissions in the queue policy that matches the specified Label parameter."
           },
           "locationInModule": {
             "filename": "lib/generated/sqs.ts",
-            "line": 174
+            "line": 152
           },
           "name": "toRemovePermission",
           "returns": {
@@ -281493,11 +282471,11 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_SendMessage.html",
             "stability": "experimental",
-            "summary": "Delivers a message to the specified queue."
+            "summary": "Grants permission to deliver a message to the specified queue."
           },
           "locationInModule": {
             "filename": "lib/generated/sqs.ts",
-            "line": 185
+            "line": 163
           },
           "name": "toSendMessage",
           "returns": {
@@ -281506,32 +282484,15 @@
             }
           }
         },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_SendMessageBatch.html",
-            "stability": "experimental",
-            "summary": "Delivers up to ten messages to the specified queue."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/sqs.ts",
-            "line": 196
-          },
-          "name": "toSendMessageBatch",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Sqs"
-            }
-          }
-        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_SetQueueAttributes.html",
             "stability": "experimental",
-            "summary": "Sets the value of one or more queue attributes."
+            "summary": "Grants permission to set the value of one or more queue attributes."
           },
           "locationInModule": {
             "filename": "lib/generated/sqs.ts",
-            "line": 207
+            "line": 174
           },
           "name": "toSetQueueAttributes",
           "returns": {
@@ -281544,11 +282505,11 @@
           "docs": {
             "remarks": "Access Level: Tagging\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_TagQueue.html",
             "stability": "experimental",
-            "summary": "Add tags to the specified SQS queue."
+            "summary": "Grants permission to add tags to the specified SQS queue."
           },
           "locationInModule": {
             "filename": "lib/generated/sqs.ts",
-            "line": 218
+            "line": 185
           },
           "name": "toTagQueue",
           "returns": {
@@ -281561,11 +282522,11 @@
           "docs": {
             "remarks": "Access Level: Tagging\n\nhttps://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_UntagQueue.html",
             "stability": "experimental",
-            "summary": "Remove tags from the specified SQS queue."
+            "summary": "Grants permission to remove tags from the specified SQS queue."
           },
           "locationInModule": {
             "filename": "lib/generated/sqs.ts",
-            "line": 229
+            "line": 196
           },
           "name": "toUntagQueue",
           "returns": {
@@ -281583,7 +282544,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqs.ts",
-            "line": 233
+            "line": 200
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -298290,7 +299251,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/cloudwatchsynthetics.ts",
-          "line": 202
+          "line": 204
         },
         "parameters": [
           {
@@ -298316,7 +299277,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudwatchsynthetics.ts",
-            "line": 189
+            "line": 191
           },
           "name": "onCanary",
           "parameters": [
@@ -298541,7 +299502,7 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_TagResource.html",
+            "remarks": "Access Level: Tagging\n\nhttps://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_TagResource.html",
             "stability": "experimental",
             "summary": "Grants permission to add one or more tags to a canary."
           },
@@ -298558,7 +299519,7 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_UntagResource.html",
+            "remarks": "Access Level: Tagging\n\nhttps://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_UntagResource.html",
             "stability": "experimental",
             "summary": "Grants permission to remove one or more tags from a canary."
           },
@@ -298844,7 +299805,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/textract.ts",
-          "line": 108
+          "line": 123
         },
         "parameters": [
           {
@@ -298866,7 +299827,7 @@
           "docs": {
             "remarks": "Access Level: Read\n\nDependent actions:\n- s3:GetObject\n\nhttps://docs.aws.amazon.com/textract/latest/dg/API_AnalyzeDocument.html",
             "stability": "experimental",
-            "summary": "Detects instances of real-world document entities within an image provided as input."
+            "summary": "Grants permission to detect instances of real-world document entities within an image provided as input."
           },
           "locationInModule": {
             "filename": "lib/generated/textract.ts",
@@ -298881,14 +299842,31 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Read\n\nDependent actions:\n- s3:GetObject\n\nhttps://docs.aws.amazon.com/textract/latest/dg/API_DetectDocumentText.html",
+            "remarks": "Access Level: Read\n\nDependent actions:\n- s3:GetObject\n\nhttps://docs.aws.amazon.com/textract/latest/dg/API_AnalyzeExpense.html",
             "stability": "experimental",
-            "summary": "Detects text in document images."
+            "summary": "Grants permission to detect instances of real-world document entities within an image provided as input."
           },
           "locationInModule": {
             "filename": "lib/generated/textract.ts",
             "line": 37
           },
+          "name": "toAnalyzeExpense",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Textract"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nDependent actions:\n- s3:GetObject\n\nhttps://docs.aws.amazon.com/textract/latest/dg/API_DetectDocumentText.html",
+            "stability": "experimental",
+            "summary": "Grants permission to detect text in document images."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/textract.ts",
+            "line": 51
+          },
           "name": "toDetectDocumentText",
           "returns": {
             "type": {
@@ -298900,11 +299878,11 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/textract/latest/dg/API_GetDocumentAnalysis.html",
             "stability": "experimental",
-            "summary": "Returns information about a document analysis job."
+            "summary": "Grants permission to return information about a document analysis job."
           },
           "locationInModule": {
             "filename": "lib/generated/textract.ts",
-            "line": 48
+            "line": 62
           },
           "name": "toGetDocumentAnalysis",
           "returns": {
@@ -298917,11 +299895,11 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/textract/latest/dg/API_GetDocumentTextDetection.html",
             "stability": "experimental",
-            "summary": "Returns information about a document text detection job."
+            "summary": "Grants permission to return information about a document text detection job."
           },
           "locationInModule": {
             "filename": "lib/generated/textract.ts",
-            "line": 59
+            "line": 73
           },
           "name": "toGetDocumentTextDetection",
           "returns": {
@@ -298934,11 +299912,11 @@
           "docs": {
             "remarks": "Access Level: Write\n\nDependent actions:\n- s3:GetObject\n\nhttps://docs.aws.amazon.com/textract/latest/dg/API_StartDocumentAnalysis.html",
             "stability": "experimental",
-            "summary": "Starts an asynchronous job to detect instances of real-world document entities within an image or pdf provided as input."
+            "summary": "Grants permission to start an asynchronous job to detect instances of real-world document entities within an image or pdf provided as input."
           },
           "locationInModule": {
             "filename": "lib/generated/textract.ts",
-            "line": 73
+            "line": 87
           },
           "name": "toStartDocumentAnalysis",
           "returns": {
@@ -298951,11 +299929,11 @@
           "docs": {
             "remarks": "Access Level: Write\n\nDependent actions:\n- s3:GetObject\n\nhttps://docs.aws.amazon.com/textract/latest/dg/API_StartDocumentTextDetection.html",
             "stability": "experimental",
-            "summary": "Starts an asynchronous job to detect text in document images or pdfs."
+            "summary": "Grants permission to start an asynchronous job to detect text in document images or pdfs."
           },
           "locationInModule": {
             "filename": "lib/generated/textract.ts",
-            "line": 87
+            "line": 101
           },
           "name": "toStartDocumentTextDetection",
           "returns": {
@@ -298973,7 +299951,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/textract.ts",
-            "line": 91
+            "line": 105
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -313912,6 +314890,6 @@
       ]
     }
   },
-  "version": "0.242.0",
-  "fingerprint": "70pTOoUuvL2ItmyH1ffOdqxT8yz4bVtoeaG6kirg3K4="
+  "version": "0.246.0",
+  "fingerprint": "W66afsuzgeJ9AYIo6IG0P7B2OTNLhsr4s9SyOutxLWc="
 }