cdk-iam-floyd 0.360.0 → 0.361.0

package/.jsii

@@ -2994,7 +2994,7 @@
   },
   "name": "cdk-iam-floyd",
   "readme": {
-    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Twitter](https://badgen.net/twitter/follow/heyiamfloyd?icon=twitter)][twitter]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n[![Maintainability](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/maintainability)](https://codeclimate.com/github/udondan/iam-floyd/maintainability)\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 309 Services\n- 12241 Actions\n- 1291 Resource Types\n- 1299 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n\n  **Starting with version 0.300.0, the packages are compatible with CDK v2.** For CDK v1 you can use any version up to:<br>\n  [![npm CDK v1](https://img.shields.io/badge/npm-0.286.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.286.0)\n  [![PyPI CDK v1](https://img.shields.io/badge/pypi-0.286.0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.286.0/)\n\n  Starting with CDK v1.152.0 you have to use cdk-iam-floyd v0.286.0.<br>\n  Starting with CDK v2.20.0 you have to use cdk-iam-floyd >= v0.351.0.\n\nFind them all on [libraries.io].\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [twitter]: https://twitter.com/heyiamfloyd\n"
+    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Twitter](https://badgen.net/twitter/follow/heyiamfloyd?icon=twitter)][twitter]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n[![Maintainability](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/maintainability)](https://codeclimate.com/github/udondan/iam-floyd/maintainability)\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 309 Services\n- 12244 Actions\n- 1291 Resource Types\n- 1302 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n\n  **Starting with version 0.300.0, the packages are compatible with CDK v2.** For CDK v1 you can use any version up to:<br>\n  [![npm CDK v1](https://img.shields.io/badge/npm-0.286.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.286.0)\n  [![PyPI CDK v1](https://img.shields.io/badge/pypi-0.286.0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.286.0/)\n\n  Starting with CDK v1.152.0 you have to use cdk-iam-floyd v0.286.0.<br>\n  Starting with CDK v2.20.0 you have to use cdk-iam-floyd >= v0.351.0.\n\nFind them all on [libraries.io].\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [twitter]: https://twitter.com/heyiamfloyd\n"
   },
   "repository": {
     "type": "git",
@@ -76294,7 +76294,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/connect.ts",
-          "line": 2987
+          "line": 3023
         },
         "parameters": [
           {
@@ -76320,7 +76320,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2827
+            "line": 2846
           },
           "name": "ifAttributeType",
           "parameters": [
@@ -76375,13 +76375,13 @@
         },
         {
           "docs": {
-            "remarks": "https://docs.aws.amazon.com/connect/latest/adminguide/security_iam_service-with-iam.html\n\nApplies to actions:\n- .toAssociateApprovedOrigin()\n- .toAssociateBot()\n- .toAssociateDefaultVocabulary()\n- .toAssociateInstanceStorageConfig()\n- .toAssociateLambdaFunction()\n- .toAssociateLexBot()\n- .toAssociatePhoneNumberContactFlow()\n- .toAssociateQueueQuickConnects()\n- .toAssociateRoutingProfileQueues()\n- .toAssociateSecurityKey()\n- .toBatchAssociateAnalyticsDataSet()\n- .toBatchDisassociateAnalyticsDataSet()\n- .toCreateAgentStatus()\n- .toCreateContactFlow()\n- .toCreateContactFlowModule()\n- .toCreateHoursOfOperation()\n- .toCreateIntegrationAssociation()\n- .toCreateQueue()\n- .toCreateQuickConnect()\n- .toCreateRoutingProfile()\n- .toCreateSecurityProfile()\n- .toCreateUseCase()\n- .toCreateUser()\n- .toCreateUserHierarchyGroup()\n- .toCreateVocabulary()\n- .toDeleteContactFlow()\n- .toDeleteContactFlowModule()\n- .toDeleteHoursOfOperation()\n- .toDeleteInstance()\n- .toDeleteIntegrationAssociation()\n- .toDeleteQuickConnect()\n- .toDeleteSecurityProfile()\n- .toDeleteUseCase()\n- .toDeleteUser()\n- .toDeleteUserHierarchyGroup()\n- .toDeleteVocabulary()\n- .toDescribeAgentStatus()\n- .toDescribeContact()\n- .toDescribeContactFlow()\n- .toDescribeContactFlowModule()\n- .toDescribeHoursOfOperation()\n- .toDescribeInstance()\n- .toDescribeInstanceAttribute()\n- .toDescribeInstanceStorageConfig()\n- .toDescribeQueue()\n- .toDescribeQuickConnect()\n- .toDescribeRoutingProfile()\n- .toDescribeSecurityProfile()\n- .toDescribeUser()\n- .toDescribeUserHierarchyGroup()\n- .toDescribeUserHierarchyStructure()\n- .toDescribeVocabulary()\n- .toDisassociateApprovedOrigin()\n- .toDisassociateBot()\n- .toDisassociateInstanceStorageConfig()\n- .toDisassociateLambdaFunction()\n- .toDisassociateLexBot()\n- .toDisassociatePhoneNumberContactFlow()\n- .toDisassociateQueueQuickConnects()\n- .toDisassociateRoutingProfileQueues()\n- .toDisassociateSecurityKey()\n- .toGetContactAttributes()\n- .toGetCurrentMetricData()\n- .toGetFederationToken()\n- .toGetMetricData()\n- .toListApprovedOrigins()\n- .toListBots()\n- .toListContactReferences()\n- .toListDefaultVocabularies()\n- .toListHoursOfOperations()\n- .toListInstanceAttributes()\n- .toListInstanceStorageConfigs()\n- .toListIntegrationAssociations()\n- .toListLambdaFunctions()\n- .toListLexBots()\n- .toListPrompts()\n- .toListQueueQuickConnects()\n- .toListRoutingProfileQueues()\n- .toListRoutingProfiles()\n- .toListSecurityKeys()\n- .toListSecurityProfilePermissions()\n- .toListSecurityProfiles()\n- .toListUseCases()\n- .toListUserHierarchyGroups()\n- .toListUsers()\n- .toSearchVocabularies()\n- .toStartTaskContact()\n- .toStopContact()\n- .toUpdateAgentStatus()\n- .toUpdateContact()\n- .toUpdateContactAttributes()\n- .toUpdateContactFlowContent()\n- .toUpdateContactFlowMetadata()\n- .toUpdateContactFlowModuleContent()\n- .toUpdateContactFlowModuleMetadata()\n- .toUpdateContactFlowName()\n- .toUpdateContactSchedule()\n- .toUpdateHoursOfOperation()\n- .toUpdateInstanceAttribute()\n- .toUpdateInstanceStorageConfig()\n- .toUpdateQueueHoursOfOperation()\n- .toUpdateQueueMaxContacts()\n- .toUpdateQueueName()\n- .toUpdateQueueOutboundCallerConfig()\n- .toUpdateQueueStatus()\n- .toUpdateQuickConnectConfig()\n- .toUpdateQuickConnectName()\n- .toUpdateRoutingProfileConcurrency()\n- .toUpdateRoutingProfileDefaultOutboundQueue()\n- .toUpdateRoutingProfileName()\n- .toUpdateRoutingProfileQueues()\n- .toUpdateSecurityProfile()\n- .toUpdateUserHierarchy()\n- .toUpdateUserHierarchyGroupName()\n- .toUpdateUserHierarchyStructure()\n- .toUpdateUserIdentityInfo()\n- .toUpdateUserPhoneConfig()\n- .toUpdateUserRoutingProfile()\n- .toUpdateUserSecurityProfiles()\n- .toUpdatedescribeContent()",
+            "remarks": "https://docs.aws.amazon.com/connect/latest/adminguide/security_iam_service-with-iam.html\n\nApplies to actions:\n- .toAssociateApprovedOrigin()\n- .toAssociateBot()\n- .toAssociateDefaultVocabulary()\n- .toAssociateInstanceStorageConfig()\n- .toAssociateLambdaFunction()\n- .toAssociateLexBot()\n- .toAssociatePhoneNumberContactFlow()\n- .toAssociateQueueQuickConnects()\n- .toAssociateRoutingProfileQueues()\n- .toAssociateSecurityKey()\n- .toBatchAssociateAnalyticsDataSet()\n- .toBatchDisassociateAnalyticsDataSet()\n- .toCreateAgentStatus()\n- .toCreateContactFlow()\n- .toCreateContactFlowModule()\n- .toCreateHoursOfOperation()\n- .toCreateIntegrationAssociation()\n- .toCreateQueue()\n- .toCreateQuickConnect()\n- .toCreateRoutingProfile()\n- .toCreateSecurityProfile()\n- .toCreateUseCase()\n- .toCreateUser()\n- .toCreateUserHierarchyGroup()\n- .toCreateVocabulary()\n- .toDeleteContactFlow()\n- .toDeleteContactFlowModule()\n- .toDeleteHoursOfOperation()\n- .toDeleteInstance()\n- .toDeleteIntegrationAssociation()\n- .toDeleteQuickConnect()\n- .toDeleteSecurityProfile()\n- .toDeleteUseCase()\n- .toDeleteUser()\n- .toDeleteUserHierarchyGroup()\n- .toDeleteVocabulary()\n- .toDescribeAgentStatus()\n- .toDescribeContact()\n- .toDescribeContactFlow()\n- .toDescribeContactFlowModule()\n- .toDescribeHoursOfOperation()\n- .toDescribeInstance()\n- .toDescribeInstanceAttribute()\n- .toDescribeInstanceStorageConfig()\n- .toDescribeQueue()\n- .toDescribeQuickConnect()\n- .toDescribeRoutingProfile()\n- .toDescribeSecurityProfile()\n- .toDescribeUser()\n- .toDescribeUserHierarchyGroup()\n- .toDescribeUserHierarchyStructure()\n- .toDescribeVocabulary()\n- .toDisassociateApprovedOrigin()\n- .toDisassociateBot()\n- .toDisassociateInstanceStorageConfig()\n- .toDisassociateLambdaFunction()\n- .toDisassociateLexBot()\n- .toDisassociatePhoneNumberContactFlow()\n- .toDisassociateQueueQuickConnects()\n- .toDisassociateRoutingProfileQueues()\n- .toDisassociateSecurityKey()\n- .toGetContactAttributes()\n- .toGetCurrentMetricData()\n- .toGetFederationToken()\n- .toGetMetricData()\n- .toListApprovedOrigins()\n- .toListBots()\n- .toListContactReferences()\n- .toListDefaultVocabularies()\n- .toListHoursOfOperations()\n- .toListInstanceAttributes()\n- .toListInstanceStorageConfigs()\n- .toListIntegrationAssociations()\n- .toListLambdaFunctions()\n- .toListLexBots()\n- .toListPrompts()\n- .toListQueueQuickConnects()\n- .toListRoutingProfileQueues()\n- .toListRoutingProfiles()\n- .toListSecurityKeys()\n- .toListSecurityProfilePermissions()\n- .toListSecurityProfiles()\n- .toListUseCases()\n- .toListUserHierarchyGroups()\n- .toListUsers()\n- .toSearchUsers()\n- .toSearchVocabularies()\n- .toStartTaskContact()\n- .toStopContact()\n- .toUpdateAgentStatus()\n- .toUpdateContact()\n- .toUpdateContactAttributes()\n- .toUpdateContactFlowContent()\n- .toUpdateContactFlowMetadata()\n- .toUpdateContactFlowModuleContent()\n- .toUpdateContactFlowModuleMetadata()\n- .toUpdateContactFlowName()\n- .toUpdateContactSchedule()\n- .toUpdateHoursOfOperation()\n- .toUpdateInstanceAttribute()\n- .toUpdateInstanceStorageConfig()\n- .toUpdateQueueHoursOfOperation()\n- .toUpdateQueueMaxContacts()\n- .toUpdateQueueName()\n- .toUpdateQueueOutboundCallerConfig()\n- .toUpdateQueueStatus()\n- .toUpdateQuickConnectConfig()\n- .toUpdateQuickConnectName()\n- .toUpdateRoutingProfileConcurrency()\n- .toUpdateRoutingProfileDefaultOutboundQueue()\n- .toUpdateRoutingProfileName()\n- .toUpdateRoutingProfileQueues()\n- .toUpdateSecurityProfile()\n- .toUpdateUserHierarchy()\n- .toUpdateUserHierarchyGroupName()\n- .toUpdateUserHierarchyStructure()\n- .toUpdateUserIdentityInfo()\n- .toUpdateUserPhoneConfig()\n- .toUpdateUserRoutingProfile()\n- .toUpdateUserSecurityProfiles()\n- .toUpdatedescribeContent()",
             "stability": "experimental",
             "summary": "Filters access by restricting federation into specified Amazon Connect instances."
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2961
+            "line": 2981
           },
           "name": "ifInstanceId",
           "parameters": [
@@ -76434,6 +76434,76 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "https://docs.aws.amazon.com/connect/latest/adminguide/security_iam_service-with-iam.html\n\nApplies to actions:\n- .toSearchUsers()",
+            "stability": "experimental",
+            "summary": "Filters access by TagFilter condition passed in the search request."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/connect.ts",
+            "line": 2997
+          },
+          "name": "ifSearchTag",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The tag key to check."
+              },
+              "name": "tagKey",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "The value(s) to check."
+              },
+              "name": "value",
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+              },
+              "name": "operator",
+              "optional": true,
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "cdk-iam-floyd.Operator"
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Connect"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "https://docs.aws.amazon.com/connect/latest/adminguide/security_iam_service-with-iam.html\n\nApplies to actions:\n- .toAssociateInstanceStorageConfig()\n- .toDescribeInstanceStorageConfig()\n- .toDisassociateInstanceStorageConfig()\n- .toUpdateInstanceStorageConfig()",
@@ -76442,7 +76512,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2979
+            "line": 3015
           },
           "name": "ifStorageResourceType",
           "parameters": [
@@ -76503,7 +76573,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2678
+            "line": 2697
           },
           "name": "onAgentStatus",
           "parameters": [
@@ -76573,7 +76643,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2453
+            "line": 2472
           },
           "name": "onContact",
           "parameters": [
@@ -76643,7 +76713,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2609
+            "line": 2628
           },
           "name": "onContactFlow",
           "parameters": [
@@ -76713,7 +76783,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2627
+            "line": 2646
           },
           "name": "onContactFlowModule",
           "parameters": [
@@ -76783,7 +76853,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2525
+            "line": 2544
           },
           "name": "onHierarchyGroup",
           "parameters": [
@@ -76853,7 +76923,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2660
+            "line": 2679
           },
           "name": "onHoursOfOperation",
           "parameters": [
@@ -76923,7 +76993,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2438
+            "line": 2457
           },
           "name": "onInstance",
           "parameters": [
@@ -76984,7 +77054,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2775
+            "line": 2794
           },
           "name": "onIntegrationAssociation",
           "parameters": [
@@ -77054,7 +77124,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2708
+            "line": 2727
           },
           "name": "onLegacyPhoneNumber",
           "parameters": [
@@ -77124,7 +77194,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2740
+            "line": 2759
           },
           "name": "onPhoneNumber",
           "parameters": [
@@ -77185,7 +77255,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2543
+            "line": 2562
           },
           "name": "onQueue",
           "parameters": [
@@ -77255,7 +77325,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2576
+            "line": 2595
           },
           "name": "onQuickConnect",
           "parameters": [
@@ -77325,7 +77395,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2489
+            "line": 2508
           },
           "name": "onRoutingProfile",
           "parameters": [
@@ -77395,7 +77465,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2507
+            "line": 2526
           },
           "name": "onSecurityProfile",
           "parameters": [
@@ -77465,7 +77535,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2793
+            "line": 2812
           },
           "name": "onUseCase",
           "parameters": [
@@ -77535,7 +77605,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2471
+            "line": 2490
           },
           "name": "onUser",
           "parameters": [
@@ -77605,7 +77675,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2811
+            "line": 2830
           },
           "name": "onVocabulary",
           "parameters": [
@@ -77675,7 +77745,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2693
+            "line": 2712
           },
           "name": "onWildcardAgentStatus",
           "parameters": [
@@ -77745,7 +77815,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2642
+            "line": 2661
           },
           "name": "onWildcardContactFlow",
           "parameters": [
@@ -77815,7 +77885,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2723
+            "line": 2742
           },
           "name": "onWildcardLegacyPhoneNumber",
           "parameters": [
@@ -77885,7 +77955,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2757
+            "line": 2776
           },
           "name": "onWildcardPhoneNumber",
           "parameters": [
@@ -77946,7 +78016,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2558
+            "line": 2577
           },
           "name": "onWildcardQueue",
           "parameters": [
@@ -78016,7 +78086,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2591
+            "line": 2610
           },
           "name": "onWildcardQuickConnect",
           "parameters": [
@@ -79846,6 +79916,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nPossible conditions:\n- .ifInstanceId()\n- .ifSearchTag()\n\nDependent actions:\n- connect:DescribeUser\n\nhttps://docs.aws.amazon.com/connect/latest/APIReference/API_SearchUsers.html",
+            "stability": "experimental",
+            "summary": "Grants permission to search user resources in an Amazon Connect instance."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/connect.ts",
+            "line": 1622
+          },
+          "name": "toSearchUsers",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Connect"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: List\n\nPossible conditions:\n- .ifInstanceId()\n\nhttps://docs.aws.amazon.com/connect/latest/APIReference/API_SearchVocabularies.html",
@@ -79854,7 +79941,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1618
+            "line": 1636
           },
           "name": "toSearchVocabularies",
           "returns": {
@@ -79871,7 +79958,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1629
+            "line": 1647
           },
           "name": "toStartChatContact",
           "returns": {
@@ -79888,7 +79975,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1640
+            "line": 1658
           },
           "name": "toStartContactRecording",
           "returns": {
@@ -79905,7 +79992,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1651
+            "line": 1669
           },
           "name": "toStartContactStreaming",
           "returns": {
@@ -79922,7 +80009,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1662
+            "line": 1680
           },
           "name": "toStartOutboundVoiceContact",
           "returns": {
@@ -79939,7 +80026,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1676
+            "line": 1694
           },
           "name": "toStartTaskContact",
           "returns": {
@@ -79956,7 +80043,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1690
+            "line": 1708
           },
           "name": "toStopContact",
           "returns": {
@@ -79973,7 +80060,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1701
+            "line": 1719
           },
           "name": "toStopContactRecording",
           "returns": {
@@ -79990,7 +80077,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1712
+            "line": 1730
           },
           "name": "toStopContactStreaming",
           "returns": {
@@ -80007,7 +80094,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1723
+            "line": 1741
           },
           "name": "toSuspendContactRecording",
           "returns": {
@@ -80024,7 +80111,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1738
+            "line": 1756
           },
           "name": "toTagResource",
           "returns": {
@@ -80041,7 +80128,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1753
+            "line": 1771
           },
           "name": "toUntagResource",
           "returns": {
@@ -80058,7 +80145,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1768
+            "line": 1786
           },
           "name": "toUpdateAgentStatus",
           "returns": {
@@ -80075,7 +80162,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1782
+            "line": 1800
           },
           "name": "toUpdateContact",
           "returns": {
@@ -80092,7 +80179,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1796
+            "line": 1814
           },
           "name": "toUpdateContactAttributes",
           "returns": {
@@ -80109,7 +80196,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1811
+            "line": 1829
           },
           "name": "toUpdateContactFlowContent",
           "returns": {
@@ -80126,7 +80213,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1826
+            "line": 1844
           },
           "name": "toUpdateContactFlowMetadata",
           "returns": {
@@ -80143,7 +80230,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1841
+            "line": 1859
           },
           "name": "toUpdateContactFlowModuleContent",
           "returns": {
@@ -80160,7 +80247,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1856
+            "line": 1874
           },
           "name": "toUpdateContactFlowModuleMetadata",
           "returns": {
@@ -80177,7 +80264,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1871
+            "line": 1889
           },
           "name": "toUpdateContactFlowName",
           "returns": {
@@ -80194,7 +80281,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1885
+            "line": 1903
           },
           "name": "toUpdateContactSchedule",
           "returns": {
@@ -80211,7 +80298,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2261
+            "line": 2279
           },
           "name": "toUpdatedescribeContent",
           "returns": {
@@ -80228,7 +80315,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1900
+            "line": 1918
           },
           "name": "toUpdateHoursOfOperation",
           "returns": {
@@ -80245,7 +80332,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1922
+            "line": 1940
           },
           "name": "toUpdateInstanceAttribute",
           "returns": {
@@ -80262,7 +80349,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1949
+            "line": 1967
           },
           "name": "toUpdateInstanceStorageConfig",
           "returns": {
@@ -80279,7 +80366,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1963
+            "line": 1981
           },
           "name": "toUpdatePhoneNumber",
           "returns": {
@@ -80296,7 +80383,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1978
+            "line": 1996
           },
           "name": "toUpdateQueueHoursOfOperation",
           "returns": {
@@ -80313,7 +80400,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 1993
+            "line": 2011
           },
           "name": "toUpdateQueueMaxContacts",
           "returns": {
@@ -80330,7 +80417,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2008
+            "line": 2026
           },
           "name": "toUpdateQueueName",
           "returns": {
@@ -80347,7 +80434,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2023
+            "line": 2041
           },
           "name": "toUpdateQueueOutboundCallerConfig",
           "returns": {
@@ -80364,7 +80451,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2038
+            "line": 2056
           },
           "name": "toUpdateQueueStatus",
           "returns": {
@@ -80381,7 +80468,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2053
+            "line": 2071
           },
           "name": "toUpdateQuickConnectConfig",
           "returns": {
@@ -80398,7 +80485,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2068
+            "line": 2086
           },
           "name": "toUpdateQuickConnectName",
           "returns": {
@@ -80415,7 +80502,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2083
+            "line": 2101
           },
           "name": "toUpdateRoutingProfileConcurrency",
           "returns": {
@@ -80432,7 +80519,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2098
+            "line": 2116
           },
           "name": "toUpdateRoutingProfileDefaultOutboundQueue",
           "returns": {
@@ -80449,7 +80536,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2113
+            "line": 2131
           },
           "name": "toUpdateRoutingProfileName",
           "returns": {
@@ -80466,7 +80553,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2128
+            "line": 2146
           },
           "name": "toUpdateRoutingProfileQueues",
           "returns": {
@@ -80483,7 +80570,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2143
+            "line": 2161
           },
           "name": "toUpdateSecurityProfile",
           "returns": {
@@ -80500,7 +80587,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2158
+            "line": 2176
           },
           "name": "toUpdateUserHierarchy",
           "returns": {
@@ -80517,7 +80604,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2172
+            "line": 2190
           },
           "name": "toUpdateUserHierarchyGroupName",
           "returns": {
@@ -80534,7 +80621,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2186
+            "line": 2204
           },
           "name": "toUpdateUserHierarchyStructure",
           "returns": {
@@ -80551,7 +80638,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2201
+            "line": 2219
           },
           "name": "toUpdateUserIdentityInfo",
           "returns": {
@@ -80568,7 +80655,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2216
+            "line": 2234
           },
           "name": "toUpdateUserPhoneConfig",
           "returns": {
@@ -80585,7 +80672,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2231
+            "line": 2249
           },
           "name": "toUpdateUserRoutingProfile",
           "returns": {
@@ -80602,7 +80689,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2246
+            "line": 2264
           },
           "name": "toUpdateUserSecurityProfiles",
           "returns": {
@@ -80620,7 +80707,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/connect.ts",
-            "line": 2265
+            "line": 2283
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -154758,17 +154845,17 @@
       "base": "cdk-iam-floyd.PolicyStatement",
       "docs": {
         "stability": "experimental",
-        "summary": "Statement provider for service [glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonglacier.html)."
+        "summary": "Statement provider for service [glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html)."
       },
       "fqn": "cdk-iam-floyd.Glacier",
       "initializer": {
         "docs": {
           "stability": "experimental",
-          "summary": "Statement provider for service [glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonglacier.html)."
+          "summary": "Statement provider for service [glacier](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3glacier.html)."
         },
         "locationInModule": {
-          "filename": "lib/generated/glacier.ts",
-          "line": 474
+          "filename": "lib/generated/s3glacier.ts",
+          "line": 478
         },
         "parameters": [
           {
@@ -154782,7 +154869,7 @@
       },
       "kind": "class",
       "locationInModule": {
-        "filename": "lib/generated/glacier.ts",
+        "filename": "lib/generated/s3glacier.ts",
         "line": 10
       },
       "methods": [
@@ -154790,11 +154877,11 @@
           "docs": {
             "remarks": "https://docs.aws.amazon.com/amazonglacier/latest/dev/access-control-overview.html#specifying-conditions\n\nApplies to actions:\n- .toDeleteArchive()\n- .toInitiateJob()",
             "stability": "experimental",
-            "summary": "How long an archive has been stored in the vault, in days."
+            "summary": "Filters access by how long an archive has been stored in the vault, in days."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 454
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 458
           },
           "name": "ifArchiveAgeInDays",
           "parameters": [
@@ -154851,11 +154938,11 @@
           "docs": {
             "remarks": "https://docs.aws.amazon.com/amazonglacier/latest/dev/access-control-overview.html#specifying-conditions",
             "stability": "experimental",
-            "summary": "A customer-defined tag."
+            "summary": "Filters access by a customer-defined tag."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 466
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 470
           },
           "name": "ifResourceTagExists",
           "parameters": [
@@ -154915,8 +155002,8 @@
             "summary": "Adds a resource of type vault to the statement."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 438
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 442
           },
           "name": "onVault",
           "parameters": [
@@ -154973,10 +155060,10 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-multipart-abort-upload.html",
             "stability": "experimental",
-            "summary": "Aborts a multipart upload identified by the upload ID."
+            "summary": "Grants permission to abort a multipart upload identified by the upload ID."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
+            "filename": "lib/generated/s3glacier.ts",
             "line": 20
           },
           "name": "toAbortMultipartUpload",
@@ -154990,10 +155077,10 @@
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-AbortVaultLock.html",
             "stability": "experimental",
-            "summary": "Aborts the vault locking process if the vault lock is not in the Locked state."
+            "summary": "Grants permission to abort the vault locking process if the vault lock is not in the Locked state."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
+            "filename": "lib/generated/s3glacier.ts",
             "line": 31
           },
           "name": "toAbortVaultLock",
@@ -155005,13 +155092,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Tagging\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-AddTagsToVault.html",
+            "remarks": "Access Level: Tagging\n\nPossible conditions:\n- .ifAwsTagKeys()\n- .ifAwsRequestTag()\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-AddTagsToVault.html",
             "stability": "experimental",
-            "summary": "Adds the specified tags to a vault."
+            "summary": "Grants permission to add the specified tags to a vault."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 42
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 46
           },
           "name": "toAddTagsToVault",
           "returns": {
@@ -155024,11 +155111,11 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-multipart-complete-upload.html",
             "stability": "experimental",
-            "summary": "Completes a multipart upload process."
+            "summary": "Grants permission to complete a multipart upload process."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 53
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 57
           },
           "name": "toCompleteMultipartUpload",
           "returns": {
@@ -155041,11 +155128,11 @@
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-CompleteVaultLock.html",
             "stability": "experimental",
-            "summary": "Completes the vault locking process."
+            "summary": "Grants permission to complete the vault locking process."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 64
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 68
           },
           "name": "toCompleteVaultLock",
           "returns": {
@@ -155058,11 +155145,11 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-vault-put.html",
             "stability": "experimental",
-            "summary": "Creates a new vault with the specified name."
+            "summary": "Grants permission to create a new vault with the specified name."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 75
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 79
           },
           "name": "toCreateVault",
           "returns": {
@@ -155075,11 +155162,11 @@
           "docs": {
             "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifArchiveAgeInDays()\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-archive-delete.html",
             "stability": "experimental",
-            "summary": "Deletes an archive from a vault."
+            "summary": "Grants permission to delete an archive from a vault."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 89
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 93
           },
           "name": "toDeleteArchive",
           "returns": {
@@ -155092,11 +155179,11 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-vault-delete.html",
             "stability": "experimental",
-            "summary": "Deletes a vault."
+            "summary": "Grants permission to delete a vault."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 100
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 104
           },
           "name": "toDeleteVault",
           "returns": {
@@ -155109,11 +155196,11 @@
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-DeleteVaultAccessPolicy.html",
             "stability": "experimental",
-            "summary": "Deletes the access policy associated with the specified vault."
+            "summary": "Grants permission to delete the access policy associated with the specified vault."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 111
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 115
           },
           "name": "toDeleteVaultAccessPolicy",
           "returns": {
@@ -155126,11 +155213,11 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-vault-notifications-delete.html",
             "stability": "experimental",
-            "summary": "Deletes the notification configuration set for a vault."
+            "summary": "Grants permission to delete the notification configuration set for a vault."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 122
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 126
           },
           "name": "toDeleteVaultNotifications",
           "returns": {
@@ -155143,11 +155230,11 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-describe-job-get.html",
             "stability": "experimental",
-            "summary": "Returns information about a job you previously initiated."
+            "summary": "Grants permission to get information about a job previously initiated."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 133
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 137
           },
           "name": "toDescribeJob",
           "returns": {
@@ -155158,13 +155245,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-vault-get..html",
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-vault-get.html",
             "stability": "experimental",
-            "summary": "Returns information about a vault."
+            "summary": "Grants permission to get information about a vault."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 144
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 148
           },
           "name": "toDescribeVault",
           "returns": {
@@ -155177,11 +155264,11 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-GetDataRetrievalPolicy.html",
             "stability": "experimental",
-            "summary": "Returns the current data retrieval policy for the account and region specified in the GET request."
+            "summary": "Grants permission to get the data retrieval policy."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 155
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 159
           },
           "name": "toGetDataRetrievalPolicy",
           "returns": {
@@ -155194,11 +155281,11 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-job-output-get.html",
             "stability": "experimental",
-            "summary": "Downloads the output of the job you initiated."
+            "summary": "Grants permission to download the output of the job specified."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 166
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 170
           },
           "name": "toGetJobOutput",
           "returns": {
@@ -155211,11 +155298,11 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-GetVaultAccessPolicy.html",
             "stability": "experimental",
-            "summary": "Retrieves the access-policy subresource set on the vault."
+            "summary": "Grants permission to retrieve the access-policy subresource set on the vault."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 177
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 181
           },
           "name": "toGetVaultAccessPolicy",
           "returns": {
@@ -155228,11 +155315,11 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-GetVaultLock.html",
             "stability": "experimental",
-            "summary": "Retrieves attributes from the lock-policy subresource set on the specified vault."
+            "summary": "Grants permission to retrieve attributes from the lock-policy subresource set on the specified vault."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 188
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 192
           },
           "name": "toGetVaultLock",
           "returns": {
@@ -155245,11 +155332,11 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-vault-notifications-get.html",
             "stability": "experimental",
-            "summary": "Retrieves the notification-configuration subresource set on the vault."
+            "summary": "Grants permission to retrieve the notification-configuration subresource set on the vault."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 199
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 203
           },
           "name": "toGetVaultNotifications",
           "returns": {
@@ -155262,11 +155349,11 @@
           "docs": {
             "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifArchiveAgeInDays()\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-initiate-job-post.html",
             "stability": "experimental",
-            "summary": "Initiates a job of the specified type."
+            "summary": "Grants permission to initiate a job of the specified type."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 213
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 217
           },
           "name": "toInitiateJob",
           "returns": {
@@ -155279,11 +155366,11 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-multipart-initiate-upload.html",
             "stability": "experimental",
-            "summary": "Initiates a multipart upload."
+            "summary": "Grants permission to initiate a multipart upload."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 224
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 228
           },
           "name": "toInitiateMultipartUpload",
           "returns": {
@@ -155296,11 +155383,11 @@
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-InitiateVaultLock.html",
             "stability": "experimental",
-            "summary": "Initiates the vault locking process."
+            "summary": "Grants permission to initiate the vault locking process."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 235
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 239
           },
           "name": "toInitiateVaultLock",
           "returns": {
@@ -155313,11 +155400,11 @@
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-jobs-get.html",
             "stability": "experimental",
-            "summary": "Lists jobs for a vault that are in-progress and jobs that have recently finished."
+            "summary": "Grants permission to list jobs for a vault that are in-progress and jobs that have recently finished."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 246
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 250
           },
           "name": "toListJobs",
           "returns": {
@@ -155330,11 +155417,11 @@
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-multipart-list-uploads.html",
             "stability": "experimental",
-            "summary": "Lists in-progress multipart uploads for the specified vault."
+            "summary": "Grants permission to list in-progress multipart uploads for the specified vault."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 257
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 261
           },
           "name": "toListMultipartUploads",
           "returns": {
@@ -155347,11 +155434,11 @@
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-multipart-list-parts.html",
             "stability": "experimental",
-            "summary": "Lists the parts of an archive that have been uploaded in a specific multipart upload."
+            "summary": "Grants permission to list the parts of an archive that have been uploaded in a specific multipart upload."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 268
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 272
           },
           "name": "toListParts",
           "returns": {
@@ -155364,11 +155451,11 @@
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-ListProvisionedCapacity.html",
             "stability": "experimental",
-            "summary": "This operation lists the provisioned capacity for the specified AWS account."
+            "summary": "Grants permission to list the provisioned capacity for the specified AWS account."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 279
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 283
           },
           "name": "toListProvisionedCapacity",
           "returns": {
@@ -155381,11 +155468,11 @@
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-ListTagsForVault.html",
             "stability": "experimental",
-            "summary": "Lists all the tags attached to a vault."
+            "summary": "Grants permission to list all the tags attached to a vault."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 290
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 294
           },
           "name": "toListTagsForVault",
           "returns": {
@@ -155398,11 +155485,11 @@
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-vaults-get.html",
             "stability": "experimental",
-            "summary": "Lists all vaults."
+            "summary": "Grants permission to list all vaults."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 301
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 305
           },
           "name": "toListVaults",
           "returns": {
@@ -155415,11 +155502,11 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-PurchaseProvisionedCapacity.html",
             "stability": "experimental",
-            "summary": "This operation purchases a provisioned capacity unit for an AWS account."
+            "summary": "Grants permission to purchases a provisioned capacity unit for an AWS account."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 312
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 316
           },
           "name": "toPurchaseProvisionedCapacity",
           "returns": {
@@ -155432,11 +155519,11 @@
           "docs": {
             "remarks": "Access Level: Tagging\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-RemoveTagsFromVault.html",
             "stability": "experimental",
-            "summary": "Removes one or more tags from the set of tags attached to a vault."
+            "summary": "Grants permission to remove one or more tags from the set of tags attached to a vault."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 323
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 327
           },
           "name": "toRemoveTagsFromVault",
           "returns": {
@@ -155449,11 +155536,11 @@
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-SetDataRetrievalPolicy.html",
             "stability": "experimental",
-            "summary": "Sets and then enacts a data retrieval policy in the region specified in the PUT request."
+            "summary": "Grants permission to set and then enacts a data retrieval policy in the region specified in the PUT request."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 334
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 338
           },
           "name": "toSetDataRetrievalPolicy",
           "returns": {
@@ -155466,11 +155553,11 @@
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-SetVaultAccessPolicy.html",
             "stability": "experimental",
-            "summary": "Configures an access policy for a vault and will overwrite an existing policy."
+            "summary": "Grants permission to configure an access policy for a vault; will overwrite an existing policy."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 345
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 349
           },
           "name": "toSetVaultAccessPolicy",
           "returns": {
@@ -155483,11 +155570,11 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-vault-notifications-put.html",
             "stability": "experimental",
-            "summary": "Configures vault notifications."
+            "summary": "Grants permission to configure vault notifications."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 356
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 360
           },
           "name": "toSetVaultNotifications",
           "returns": {
@@ -155500,11 +155587,11 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-archive-post.html",
             "stability": "experimental",
-            "summary": "Adds an archive to a vault."
+            "summary": "Grants permission to upload an archive to a vault."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 367
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 371
           },
           "name": "toUploadArchive",
           "returns": {
@@ -155517,11 +155604,11 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/amazonglacier/latest/dev/api-upload-part.html",
             "stability": "experimental",
-            "summary": "Uploads a part of an archive."
+            "summary": "Grants permission to upload a part of an archive."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 378
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 382
           },
           "name": "toUploadMultipartPart",
           "returns": {
@@ -155538,8 +155625,8 @@
             "stability": "experimental"
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
-            "line": 382
+            "filename": "lib/generated/s3glacier.ts",
+            "line": 386
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -155554,7 +155641,7 @@
             "summary": "Holds the prefix of the service actions, e.g. `ec2`."
           },
           "locationInModule": {
-            "filename": "lib/generated/glacier.ts",
+            "filename": "lib/generated/s3glacier.ts",
             "line": 11
           },
           "name": "servicePrefix",
@@ -155564,7 +155651,7 @@
           }
         }
       ],
-      "symbolId": "lib/generated/glacier:Glacier"
+      "symbolId": "lib/generated/s3glacier:Glacier"
     },
     "cdk-iam-floyd.Globalaccelerator": {
       "assembly": "cdk-iam-floyd",
@@ -166771,7 +166858,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/guardduty.ts",
-          "line": 841
+          "line": 853
         },
         "parameters": [
           {
@@ -166797,7 +166884,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 764
+            "line": 776
           },
           "name": "onDetector",
           "parameters": [
@@ -166858,7 +166945,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 782
+            "line": 794
           },
           "name": "onFilter",
           "parameters": [
@@ -166928,7 +167015,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 800
+            "line": 812
           },
           "name": "onIpset",
           "parameters": [
@@ -166998,7 +167085,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 833
+            "line": 845
           },
           "name": "onPublishingDestination",
           "parameters": [
@@ -167068,7 +167155,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 818
+            "line": 830
           },
           "name": "onThreatintelset",
           "parameters": [
@@ -167200,13 +167287,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifAwsRequestTag()\n- .ifAwsTagKeys()\n\nhttps://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateIPSet.html",
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifAwsRequestTag()\n- .ifAwsTagKeys()\n\nDependent actions:\n- iam:DeleteRolePolicy\n- iam:PutRolePolicy\n\nhttps://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateIPSet.html",
             "stability": "experimental",
             "summary": "Grants permission to create an IPSet."
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 76
+            "line": 80
           },
           "name": "toCreateIPSet",
           "returns": {
@@ -167223,7 +167310,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 87
+            "line": 91
           },
           "name": "toCreateMembers",
           "returns": {
@@ -167240,7 +167327,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 102
+            "line": 106
           },
           "name": "toCreatePublishingDestination",
           "returns": {
@@ -167257,7 +167344,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 113
+            "line": 117
           },
           "name": "toCreateSampleFindings",
           "returns": {
@@ -167274,7 +167361,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 128
+            "line": 132
           },
           "name": "toCreateThreatIntelSet",
           "returns": {
@@ -167291,7 +167378,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 139
+            "line": 143
           },
           "name": "toDeclineInvitations",
           "returns": {
@@ -167308,7 +167395,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 150
+            "line": 154
           },
           "name": "toDeleteDetector",
           "returns": {
@@ -167325,7 +167412,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 161
+            "line": 165
           },
           "name": "toDeleteFilter",
           "returns": {
@@ -167342,7 +167429,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 183
+            "line": 187
           },
           "name": "toDeleteInvitations",
           "returns": {
@@ -167359,7 +167446,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 172
+            "line": 176
           },
           "name": "toDeleteIPSet",
           "returns": {
@@ -167376,7 +167463,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 194
+            "line": 198
           },
           "name": "toDeleteMembers",
           "returns": {
@@ -167393,7 +167480,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 205
+            "line": 209
           },
           "name": "toDeletePublishingDestination",
           "returns": {
@@ -167410,7 +167497,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 216
+            "line": 220
           },
           "name": "toDeleteThreatIntelSet",
           "returns": {
@@ -167427,7 +167514,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 227
+            "line": 231
           },
           "name": "toDescribeOrganizationConfiguration",
           "returns": {
@@ -167444,7 +167531,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 238
+            "line": 242
           },
           "name": "toDescribePublishingDestination",
           "returns": {
@@ -167461,7 +167548,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 249
+            "line": 253
           },
           "name": "toDisableOrganizationAdminAccount",
           "returns": {
@@ -167474,11 +167561,11 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/guardduty/latest/APIReference/API_DisassociateFromMasterAccount.html",
             "stability": "experimental",
-            "summary": "Grants permission to disassociate a GuardDuty member account from its GuardDuty master account."
+            "summary": "Grants permission to disassociate a GuardDuty member account from its GuardDuty administrator account."
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 260
+            "line": 264
           },
           "name": "toDisassociateFromMasterAccount",
           "returns": {
@@ -167491,11 +167578,11 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/guardduty/latest/APIReference/API_DisassociateMembers.html",
             "stability": "experimental",
-            "summary": "Grants permission to disassociate GuardDuty member accounts from their master GuardDuty account."
+            "summary": "Grants permission to disassociate GuardDuty member accounts from their administrator GuardDuty account."
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 271
+            "line": 275
           },
           "name": "toDisassociateMembers",
           "returns": {
@@ -167512,7 +167599,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 282
+            "line": 286
           },
           "name": "toEnableOrganizationAdminAccount",
           "returns": {
@@ -167529,7 +167616,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 293
+            "line": 297
           },
           "name": "toGetDetector",
           "returns": {
@@ -167546,7 +167633,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 304
+            "line": 308
           },
           "name": "toGetFilter",
           "returns": {
@@ -167563,7 +167650,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 315
+            "line": 319
           },
           "name": "toGetFindings",
           "returns": {
@@ -167580,7 +167667,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 326
+            "line": 330
           },
           "name": "toGetFindingsStatistics",
           "returns": {
@@ -167597,7 +167684,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 348
+            "line": 352
           },
           "name": "toGetInvitationsCount",
           "returns": {
@@ -167614,7 +167701,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 337
+            "line": 341
           },
           "name": "toGetIPSet",
           "returns": {
@@ -167627,11 +167714,11 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetMasterAccount.html",
             "stability": "experimental",
-            "summary": "Grants permission to retrieve details of the GuardDuty master account associated with a member account."
+            "summary": "Grants permission to retrieve details of the GuardDuty administrator account associated with a member account."
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 359
+            "line": 363
           },
           "name": "toGetMasterAccount",
           "returns": {
@@ -167648,7 +167735,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 370
+            "line": 374
           },
           "name": "toGetMemberDetectors",
           "returns": {
@@ -167661,11 +167748,11 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/guardduty/latest/APIReference/API_GetMembers.html",
             "stability": "experimental",
-            "summary": "Grants permission to retrieve the member accounts associated with a master account."
+            "summary": "Grants permission to retrieve the member accounts associated with an administrator account."
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 381
+            "line": 385
           },
           "name": "toGetMembers",
           "returns": {
@@ -167682,7 +167769,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 392
+            "line": 396
           },
           "name": "toGetThreatIntelSet",
           "returns": {
@@ -167699,7 +167786,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 403
+            "line": 407
           },
           "name": "toGetUsageStatistics",
           "returns": {
@@ -167716,7 +167803,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 414
+            "line": 418
           },
           "name": "toInviteMembers",
           "returns": {
@@ -167733,7 +167820,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 425
+            "line": 429
           },
           "name": "toListDetectors",
           "returns": {
@@ -167750,7 +167837,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 436
+            "line": 440
           },
           "name": "toListFilters",
           "returns": {
@@ -167767,7 +167854,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 447
+            "line": 451
           },
           "name": "toListFindings",
           "returns": {
@@ -167780,11 +167867,11 @@
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListInvitations.html",
             "stability": "experimental",
-            "summary": "Grants permission to retrieve a lists of all of the GuardDuty membership invitations that were sent to an AWS account."
+            "summary": "Grants permission to retrieve a list of all of the GuardDuty membership invitations that were sent to an AWS account."
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 469
+            "line": 473
           },
           "name": "toListInvitations",
           "returns": {
@@ -167801,7 +167888,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 458
+            "line": 462
           },
           "name": "toListIPSets",
           "returns": {
@@ -167814,11 +167901,11 @@
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListMembers.html",
             "stability": "experimental",
-            "summary": "Grants permission to retrierve a lsit of GuardDuty member accounts associated with a master account."
+            "summary": "Grants permission to retrieve a list of GuardDuty member accounts associated with an administrator account."
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 480
+            "line": 484
           },
           "name": "toListMembers",
           "returns": {
@@ -167835,7 +167922,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 491
+            "line": 495
           },
           "name": "toListOrganizationAdminAccounts",
           "returns": {
@@ -167852,7 +167939,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 502
+            "line": 506
           },
           "name": "toListPublishingDestinations",
           "returns": {
@@ -167869,7 +167956,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 513
+            "line": 517
           },
           "name": "toListTagsForResource",
           "returns": {
@@ -167886,7 +167973,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 524
+            "line": 528
           },
           "name": "toListThreatIntelSets",
           "returns": {
@@ -167903,7 +167990,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 535
+            "line": 539
           },
           "name": "toStartMonitoringMembers",
           "returns": {
@@ -167920,7 +168007,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 546
+            "line": 550
           },
           "name": "toStopMonitoringMembers",
           "returns": {
@@ -167937,7 +168024,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 561
+            "line": 565
           },
           "name": "toTagResource",
           "returns": {
@@ -167954,7 +168041,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 572
+            "line": 576
           },
           "name": "toUnarchiveFindings",
           "returns": {
@@ -167971,7 +168058,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 586
+            "line": 590
           },
           "name": "toUntagResource",
           "returns": {
@@ -167988,7 +168075,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 597
+            "line": 601
           },
           "name": "toUpdateDetector",
           "returns": {
@@ -168005,7 +168092,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 608
+            "line": 612
           },
           "name": "toUpdateFilter",
           "returns": {
@@ -168022,7 +168109,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 619
+            "line": 623
           },
           "name": "toUpdateFindingsFeedback",
           "returns": {
@@ -168033,13 +168120,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateIPSet.html",
+            "remarks": "Access Level: Write\n\nDependent actions:\n- iam:DeleteRolePolicy\n- iam:PutRolePolicy\n\nhttps://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateIPSet.html",
             "stability": "experimental",
             "summary": "Grants permission to update GuardDuty IPSets."
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 630
+            "line": 638
           },
           "name": "toUpdateIPSet",
           "returns": {
@@ -168056,7 +168143,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 641
+            "line": 649
           },
           "name": "toUpdateMemberDetectors",
           "returns": {
@@ -168073,7 +168160,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 652
+            "line": 660
           },
           "name": "toUpdateOrganizationConfiguration",
           "returns": {
@@ -168090,7 +168177,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 667
+            "line": 675
           },
           "name": "toUpdatePublishingDestination",
           "returns": {
@@ -168101,13 +168188,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateThreatIntelSet.html",
+            "remarks": "Access Level: Write\n\nDependent actions:\n- iam:DeleteRolePolicy\n- iam:PutRolePolicy\n\nhttps://docs.aws.amazon.com/guardduty/latest/APIReference/API_UpdateThreatIntelSet.html",
             "stability": "experimental",
             "summary": "Grants permission to updates the GuardDuty ThreatIntelSets."
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 678
+            "line": 690
           },
           "name": "toUpdateThreatIntelSet",
           "returns": {
@@ -168125,7 +168212,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/guardduty.ts",
-            "line": 682
+            "line": 694
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -250752,7 +250839,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/personalize.ts",
-          "line": 956
+          "line": 980
         },
         "parameters": [
           {
@@ -250778,7 +250865,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/personalize.ts",
-            "line": 892
+            "line": 916
           },
           "name": "onAlgorithm",
           "parameters": [
@@ -250839,7 +250926,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/personalize.ts",
-            "line": 906
+            "line": 930
           },
           "name": "onBatchInferenceJob",
           "parameters": [
@@ -250900,7 +250987,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/personalize.ts",
-            "line": 948
+            "line": 972
           },
           "name": "onBatchSegmentJob",
           "parameters": [
@@ -250961,7 +251048,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/personalize.ts",
-            "line": 850
+            "line": 874
           },
           "name": "onCampaign",
           "parameters": [
@@ -251022,7 +251109,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/personalize.ts",
-            "line": 780
+            "line": 804
           },
           "name": "onDataset",
           "parameters": [
@@ -251083,7 +251170,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/personalize.ts",
-            "line": 822
+            "line": 846
           },
           "name": "onDatasetExportJob",
           "parameters": [
@@ -251144,7 +251231,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/personalize.ts",
-            "line": 794
+            "line": 818
           },
           "name": "onDatasetGroup",
           "parameters": [
@@ -251205,7 +251292,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/personalize.ts",
-            "line": 808
+            "line": 832
           },
           "name": "onDatasetImportJob",
           "parameters": [
@@ -251266,7 +251353,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/personalize.ts",
-            "line": 864
+            "line": 888
           },
           "name": "onEventTracker",
           "parameters": [
@@ -251327,7 +251414,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/personalize.ts",
-            "line": 766
+            "line": 790
           },
           "name": "onFeatureTransformation",
           "parameters": [
@@ -251388,7 +251475,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/personalize.ts",
-            "line": 920
+            "line": 944
           },
           "name": "onFilter",
           "parameters": [
@@ -251449,7 +251536,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/personalize.ts",
-            "line": 878
+            "line": 902
           },
           "name": "onRecipe",
           "parameters": [
@@ -251510,7 +251597,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/personalize.ts",
-            "line": 934
+            "line": 958
           },
           "name": "onRecommender",
           "parameters": [
@@ -251571,7 +251658,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/personalize.ts",
-            "line": 752
+            "line": 776
           },
           "name": "onSchema",
           "parameters": [
@@ -251632,7 +251719,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/personalize.ts",
-            "line": 836
+            "line": 860
           },
           "name": "onSolution",
           "parameters": [
@@ -252654,6 +252741,40 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/personalize/latest/dg/API_StartRecommender.html",
+            "stability": "experimental",
+            "summary": "Grants permission to start a recommender."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/personalize.ts",
+            "line": 647
+          },
+          "name": "toStartRecommender",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Personalize"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/personalize/latest/dg/API_StopRecommender.html",
+            "stability": "experimental",
+            "summary": "Grants permission to stop a recommender."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/personalize.ts",
+            "line": 658
+          },
+          "name": "toStopRecommender",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Personalize"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/personalize/latest/dg/API_StopSolutionVersionCreation.html",
@@ -252662,7 +252783,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/personalize.ts",
-            "line": 647
+            "line": 669
           },
           "name": "toStopSolutionVersionCreation",
           "returns": {
@@ -252679,7 +252800,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/personalize.ts",
-            "line": 658
+            "line": 680
           },
           "name": "toUpdateCampaign",
           "returns": {
@@ -252696,7 +252817,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/personalize.ts",
-            "line": 669
+            "line": 691
           },
           "name": "toUpdateRecommender",
           "returns": {
@@ -252714,7 +252835,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/personalize.ts",
-            "line": 673
+            "line": 695
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -325580,7 +325701,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/systemsmanager.ts",
-          "line": 2187
+          "line": 2192
         },
         "parameters": [
           {
@@ -325602,11 +325723,11 @@
           "docs": {
             "remarks": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions\n\nApplies to actions:\n- .toGetDocument()",
             "stability": "experimental",
-            "summary": "Filters access by verifying that a user has permission to access a document belonging to a specific category."
+            "summary": "Filters access by verifying that a user has permission to access a document belonging to a specific category enum."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2097
+            "line": 2101
           },
           "name": "ifDocumentCategories",
           "parameters": [
@@ -325667,7 +325788,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2109
+            "line": 2113
           },
           "name": "ifOverwrite",
           "parameters": [
@@ -325728,7 +325849,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2121
+            "line": 2125
           },
           "name": "ifRecursive",
           "parameters": [
@@ -325783,13 +325904,13 @@
         },
         {
           "docs": {
-            "remarks": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions\n\nApplies to actions:\n- .toSendCommand()\n- .toStartSession()\n\nApplies to resource types:\n- document\n- instance\n- maintenancewindow\n- managed-instance\n- opsmetadata\n- parameter\n- patchbaseline",
+            "remarks": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions\n\nApplies to actions:\n- .toSendCommand()\n- .toStartSession()\n\nApplies to resource types:\n- automation-execution\n- document\n- instance\n- maintenancewindow\n- managed-instance\n- opsmetadata\n- parameter\n- patchbaseline",
             "stability": "experimental",
             "summary": "Filters access by based on a tag key-value pair assigned to the Systems Manager resource."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2179
+            "line": 2184
           },
           "name": "ifResourceTag",
           "parameters": [
@@ -325859,7 +325980,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2135
+            "line": 2139
           },
           "name": "ifSessionDocumentAccessCheck",
           "parameters": [
@@ -325889,7 +326010,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2153
+            "line": 2157
           },
           "name": "ifSyncType",
           "parameters": [
@@ -326011,7 +326132,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1830
+            "line": 1834
           },
           "name": "onAutomationDefinition",
           "parameters": [
@@ -326081,7 +326202,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1815
+            "line": 1819
           },
           "name": "onAutomationExecution",
           "parameters": [
@@ -326118,7 +326239,7 @@
             },
             {
               "docs": {
-                "remarks": "defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.",
+                "remarks": "defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.\n\nPossible conditions:\n- .ifAwsResourceTag()\n- .ifResourceTag()",
                 "summary": "- Partition of the AWS account [aws, aws-cn, aws-us-gov];"
               },
               "name": "partition",
@@ -326141,7 +326262,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1840
+            "line": 1844
           },
           "name": "onBucket",
           "parameters": [
@@ -326180,7 +326301,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1858
+            "line": 1862
           },
           "name": "onDocument",
           "parameters": [
@@ -326240,7 +326361,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1874
+            "line": 1878
           },
           "name": "onInstance",
           "parameters": [
@@ -326301,7 +326422,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1892
+            "line": 1896
           },
           "name": "onMaintenancewindow",
           "parameters": [
@@ -326362,7 +326483,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1910
+            "line": 1914
           },
           "name": "onManagedInstance",
           "parameters": [
@@ -326423,7 +326544,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1924
+            "line": 1928
           },
           "name": "onManagedInstanceInventory",
           "parameters": [
@@ -326484,7 +326605,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1941
+            "line": 1945
           },
           "name": "onOpsitem",
           "parameters": [
@@ -326545,7 +326666,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1959
+            "line": 1963
           },
           "name": "onOpsmetadata",
           "parameters": [
@@ -326606,7 +326727,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1977
+            "line": 1981
           },
           "name": "onParameter",
           "parameters": [
@@ -326667,7 +326788,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1995
+            "line": 1999
           },
           "name": "onPatchbaseline",
           "parameters": [
@@ -326728,7 +326849,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2023
+            "line": 2027
           },
           "name": "onResourcedatasync",
           "parameters": [
@@ -326789,7 +326910,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2037
+            "line": 2041
           },
           "name": "onServicesetting",
           "parameters": [
@@ -326850,7 +326971,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2009
+            "line": 2013
           },
           "name": "onSession",
           "parameters": [
@@ -326911,7 +327032,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2082
+            "line": 2086
           },
           "name": "onTask",
           "parameters": [
@@ -326972,7 +327093,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2051
+            "line": 2055
           },
           "name": "onWindowtarget",
           "parameters": [
@@ -327033,7 +327154,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2065
+            "line": 2069
           },
           "name": "onWindowtask",
           "parameters": [
@@ -363076,6 +363197,6 @@
       "symbolId": "lib/generated/x-ray:Xray"
     }
   },
-  "version": "0.360.0",
-  "fingerprint": "kAh6e2Jcglgj4nlaNwb6C6bNlH/5bdCBXPSX776NyoM="
+  "version": "0.361.0",
+  "fingerprint": "YQ2EQd7JYG5+RXsMSmoFAH7pVvHQ9KFMwduT6h7YcpQ="
 }