cdk-iam-floyd 0.368.0 → 0.369.0

package/.jsii

@@ -3007,7 +3007,7 @@
   },
   "name": "cdk-iam-floyd",
   "readme": {
-    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Twitter](https://badgen.net/twitter/follow/heyiamfloyd?icon=twitter)][twitter]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n[![Maintainability](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/maintainability)](https://codeclimate.com/github/udondan/iam-floyd/maintainability)\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 310 Services\n- 12278 Actions\n- 1295 Resource Types\n- 1303 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n\n  **Starting with version 0.300.0, the packages are compatible with CDK v2.** For CDK v1 you can use any version up to:<br>\n  [![npm CDK v1](https://img.shields.io/badge/npm-0.286.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.286.0)\n  [![PyPI CDK v1](https://img.shields.io/badge/pypi-0.286.0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.286.0/)\n\n  Starting with CDK v1.152.0 you have to use cdk-iam-floyd v0.286.0.<br>\n  Starting with CDK v2.20.0 you have to use cdk-iam-floyd >= v0.351.0.\n\nFind them all on [libraries.io].\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [twitter]: https://twitter.com/heyiamfloyd\n"
+    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Twitter](https://badgen.net/twitter/follow/heyiamfloyd?icon=twitter)][twitter]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n[![Maintainability](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/maintainability)](https://codeclimate.com/github/udondan/iam-floyd/maintainability)\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 310 Services\n- 12245 Actions\n- 1294 Resource Types\n- 1301 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n\n  **Starting with version 0.300.0, the packages are compatible with CDK v2.** For CDK v1 you can use any version up to:<br>\n  [![npm CDK v1](https://img.shields.io/badge/npm-0.286.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.286.0)\n  [![PyPI CDK v1](https://img.shields.io/badge/pypi-0.286.0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.286.0/)\n\n  Starting with CDK v1.152.0 you have to use cdk-iam-floyd v0.286.0.<br>\n  Starting with CDK v2.20.0 you have to use cdk-iam-floyd >= v0.351.0.\n\nFind them all on [libraries.io].\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [twitter]: https://twitter.com/heyiamfloyd\n"
   },
   "repository": {
     "type": "git",
@@ -7192,7 +7192,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
-          "line": 350
+          "line": 352
         },
         "parameters": [
           {
@@ -7212,13 +7212,13 @@
       "methods": [
         {
           "docs": {
-            "remarks": "Applies to actions:\n- .toIssueCertificate()",
+            "remarks": "https://docs.aws.amazon.com/acm-pca/latest/userguide/UsingTemplates.html#template-varieties\n\nApplies to actions:\n- .toIssueCertificate()",
             "stability": "experimental",
             "summary": "Filters issue certificate requests based on the presence of TemplateArn in the request."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
-            "line": 342
+            "line": 344
           },
           "name": "ifTemplateArn",
           "parameters": [
@@ -7336,7 +7336,7 @@
           "docs": {
             "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifAwsRequestTag()\n- .ifAwsTagKeys()\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthority.html",
             "stability": "experimental",
-            "summary": "Creates an ACM Private CA and its associated private key and configuration."
+            "summary": "Grants permission to create an ACM Private CA and its associated private key and configuration."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7353,7 +7353,7 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthorityAuditReport.html",
             "stability": "experimental",
-            "summary": "Creates an audit report for an ACM Private CA."
+            "summary": "Grants permission to create an audit report for an ACM Private CA."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7370,7 +7370,7 @@
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreatePermission.html",
             "stability": "experimental",
-            "summary": "Creates a permission for an ACM Private CA."
+            "summary": "Grants permission to create a permission for an ACM Private CA."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7387,7 +7387,7 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_DeleteCertificateAuthority.html",
             "stability": "experimental",
-            "summary": "Deletes an ACM Private CA and its associated private key and configuration."
+            "summary": "Grants permission to delete an ACM Private CA and its associated private key and configuration."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7404,7 +7404,7 @@
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_DeletePermission.html",
             "stability": "experimental",
-            "summary": "Deletes a permission for an ACM Private CA."
+            "summary": "Grants permission to delete a permission for an ACM Private CA."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7421,7 +7421,7 @@
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_DeletePolicy.html",
             "stability": "experimental",
-            "summary": "Deletes the policy for an ACM Private CA."
+            "summary": "Grants permission to delete the policy for an ACM Private CA."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7438,7 +7438,7 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_DescribeCertificateAuthority.html",
             "stability": "experimental",
-            "summary": "Returns a list of the configuration and status fields contained in the specified ACM Private CA."
+            "summary": "Grants permission to return a list of the configuration and status fields contained in the specified ACM Private CA."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7455,7 +7455,7 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_DescribeCertificateAuthorityAuditReport.html",
             "stability": "experimental",
-            "summary": "Returns the status and information about an ACM Private CA audit report."
+            "summary": "Grants permission to return the status and information about an ACM Private CA audit report."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7472,7 +7472,7 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_GetCertificate.html",
             "stability": "experimental",
-            "summary": "Retrieves an ACM Private CA certificate and certificate chain for the certificate authority specified by an ARN."
+            "summary": "Grants permission to retrieve an ACM Private CA certificate and certificate chain for the certificate authority specified by an ARN."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7489,7 +7489,7 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_GetCertificateAuthorityCertificate.html",
             "stability": "experimental",
-            "summary": "Retrieves an ACM Private CA certificate and certificate chain for the certificate authority specified by an ARN."
+            "summary": "Grants permission to retrieve an ACM Private CA certificate and certificate chain for the certificate authority specified by an ARN."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7506,7 +7506,7 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_GetCertificateAuthorityCsr.html",
             "stability": "experimental",
-            "summary": "Retrieves an ACM Private CA certificate signing request (CSR) for the certificate-authority specified by an ARN."
+            "summary": "Grants permission to retrieve an ACM Private CA certificate signing request (CSR) for the certificate-authority specified by an ARN."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7523,7 +7523,7 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_GetPolicy.html",
             "stability": "experimental",
-            "summary": "Retrieves the policy on an ACM Private CA."
+            "summary": "Grants permission to retrieve the policy on an ACM Private CA."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7540,7 +7540,7 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_ImportCertificateAuthorityCertificate.html",
             "stability": "experimental",
-            "summary": "Imports an SSL/TLS certificate into ACM Private CA for use as the CA certificate of an ACM Private CA."
+            "summary": "Grants permission to import an SSL/TLS certificate into ACM Private CA for use as the CA certificate of an ACM Private CA."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7557,7 +7557,7 @@
           "docs": {
             "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifTemplateArn()\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_IssueCertificate.html",
             "stability": "experimental",
-            "summary": "Issues an ACM Private CA certificate."
+            "summary": "Grants permission to issue an ACM Private CA certificate."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7574,7 +7574,7 @@
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_ListCertificateAuthorities.html",
             "stability": "experimental",
-            "summary": "Retrieves a list of the ACM Private CA certificate authority ARNs, and a summary of the status of each CA in the calling account."
+            "summary": "Grants permission to retrieve a list of the ACM Private CA certificate authority ARNs, and a summary of the status of each CA in the calling account."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7591,7 +7591,7 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_ListPermissions.html",
             "stability": "experimental",
-            "summary": "Lists the permissions that have been applied to the ACM Private CA certificate authority."
+            "summary": "Grants permission to list the permissions that have been applied to the ACM Private CA certificate authority."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7608,7 +7608,7 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_ListTags.html",
             "stability": "experimental",
-            "summary": "Lists the tags that have been applied to the ACM Private CA certificate authority."
+            "summary": "Grants permission to list the tags that have been applied to the ACM Private CA certificate authority."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7625,7 +7625,7 @@
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_PutPolicy.html",
             "stability": "experimental",
-            "summary": "Puts a policy on an ACM Private CA."
+            "summary": "Grants permission to put a policy on an ACM Private CA."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7642,7 +7642,7 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_RestoreCertificateAuthority.html",
             "stability": "experimental",
-            "summary": "Restores an ACM Private CA from the deleted state to the state it was in when deleted."
+            "summary": "Grants permission to restore an ACM Private CA from the deleted state to the state it was in when deleted."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7659,7 +7659,7 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_RevokeCertificate.html",
             "stability": "experimental",
-            "summary": "Revokes a certificate issued by an ACM Private CA."
+            "summary": "Grants permission to revoke a certificate issued by an ACM Private CA."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7676,7 +7676,7 @@
           "docs": {
             "remarks": "Access Level: Tagging\n\nPossible conditions:\n- .ifAwsTagKeys()\n- .ifAwsRequestTag()\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_TagCertificateAuthority.html",
             "stability": "experimental",
-            "summary": "Adds one or more tags to an ACM Private CA."
+            "summary": "Grants permission to add one or more tags to an ACM Private CA."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7693,7 +7693,7 @@
           "docs": {
             "remarks": "Access Level: Tagging\n\nPossible conditions:\n- .ifAwsTagKeys()\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_UntagCertificateAuthority.html",
             "stability": "experimental",
-            "summary": "Remove one or more tags from an ACM Private CA."
+            "summary": "Grants permission to remove one or more tags from an ACM Private CA."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -7710,7 +7710,7 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/acm-pca/latest/APIReference/API_UpdateCertificateAuthority.html",
             "stability": "experimental",
-            "summary": "Updates the configuration of an ACM Private CA."
+            "summary": "Grants permission to update the configuration of an ACM Private CA."
           },
           "locationInModule": {
             "filename": "lib/generated/certificatemanagerprivatecertificateauthority.ts",
@@ -178109,7 +178109,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/iot.ts",
-          "line": 3706
+          "line": 3740
         },
         "parameters": [
           {
@@ -178127,6 +178127,67 @@
         "line": 10
       },
       "methods": [
+        {
+          "docs": {
+            "remarks": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html\n\nApplies to actions:\n- .toRotateTunnelAccessToken()",
+            "stability": "experimental",
+            "summary": "Filters access by the mode of the client for IoT Tunnel."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/iot.ts",
+            "line": 3671
+          },
+          "name": "ifClientMode",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The value(s) to check."
+              },
+              "name": "value",
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+              },
+              "name": "operator",
+              "optional": true,
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "cdk-iam-floyd.Operator"
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Iot"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html\n\nApplies to actions:\n- .toCloseTunnel()",
@@ -178135,7 +178196,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3653
+            "line": 3685
           },
           "name": "ifDelete",
           "parameters": [
@@ -178165,7 +178226,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3668
+            "line": 3700
           },
           "name": "ifDomainName",
           "parameters": [
@@ -178220,13 +178281,13 @@
         },
         {
           "docs": {
-            "remarks": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html\n\nApplies to actions:\n- .toOpenTunnel()",
+            "remarks": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html\n\nApplies to actions:\n- .toOpenTunnel()\n- .toRotateTunnelAccessToken()",
             "stability": "experimental",
             "summary": "Filters access by a list of IoT Thing Group ARNs that the destination IoT Thing belongs to for an IoT Tunnel."
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3683
+            "line": 3716
           },
           "name": "ifThingGroupArn",
           "parameters": [
@@ -178281,13 +178342,13 @@
         },
         {
           "docs": {
-            "remarks": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html\n\nApplies to actions:\n- .toOpenTunnel()",
+            "remarks": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html\n\nApplies to actions:\n- .toOpenTunnel()\n- .toRotateTunnelAccessToken()",
             "stability": "experimental",
             "summary": "Filters access by a list of destination services for an IoT Tunnel."
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3698
+            "line": 3732
           },
           "name": "ifTunnelDestinationService",
           "parameters": [
@@ -178348,7 +178409,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3405
+            "line": 3422
           },
           "name": "onAuthorizer",
           "parameters": [
@@ -178409,7 +178470,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3309
+            "line": 3326
           },
           "name": "onBillinggroup",
           "parameters": [
@@ -178470,7 +178531,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3453
+            "line": 3470
           },
           "name": "onCacert",
           "parameters": [
@@ -178531,7 +178592,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3436
+            "line": 3453
           },
           "name": "onCert",
           "parameters": [
@@ -178592,7 +178653,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3179
+            "line": 3196
           },
           "name": "onClient",
           "parameters": [
@@ -178653,7 +178714,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3555
+            "line": 3572
           },
           "name": "onCustommetric",
           "parameters": [
@@ -178714,7 +178775,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3604
+            "line": 3621
           },
           "name": "onDestination",
           "parameters": [
@@ -178784,7 +178845,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3572
+            "line": 3589
           },
           "name": "onDimension",
           "parameters": [
@@ -178845,7 +178906,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3639
+            "line": 3656
           },
           "name": "onDomainconfiguration",
           "parameters": [
@@ -178915,7 +178976,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3326
+            "line": 3343
           },
           "name": "onDynamicthinggroup",
           "parameters": [
@@ -178976,7 +179037,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3210
+            "line": 3227
           },
           "name": "onFleetmetric",
           "parameters": [
@@ -179037,7 +179098,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3193
+            "line": 3210
           },
           "name": "onIndex",
           "parameters": [
@@ -179098,7 +179159,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3227
+            "line": 3244
           },
           "name": "onJob",
           "parameters": [
@@ -179159,7 +179220,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3244
+            "line": 3261
           },
           "name": "onJobtemplate",
           "parameters": [
@@ -179220,7 +179281,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3521
+            "line": 3538
           },
           "name": "onMitigationaction",
           "parameters": [
@@ -179281,7 +179342,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3487
+            "line": 3504
           },
           "name": "onOtaupdate",
           "parameters": [
@@ -179342,7 +179403,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3422
+            "line": 3439
           },
           "name": "onPolicy",
           "parameters": [
@@ -179403,7 +179464,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3621
+            "line": 3638
           },
           "name": "onProvisioningtemplate",
           "parameters": [
@@ -179464,7 +179525,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3388
+            "line": 3405
           },
           "name": "onRolealias",
           "parameters": [
@@ -179525,7 +179586,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3589
+            "line": 3606
           },
           "name": "onRule",
           "parameters": [
@@ -179586,7 +179647,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3504
+            "line": 3521
           },
           "name": "onScheduledaudit",
           "parameters": [
@@ -179647,7 +179708,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3538
+            "line": 3555
           },
           "name": "onSecurityprofile",
           "parameters": [
@@ -179708,7 +179769,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3470
+            "line": 3487
           },
           "name": "onStream",
           "parameters": [
@@ -179769,7 +179830,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3275
+            "line": 3292
           },
           "name": "onThing",
           "parameters": [
@@ -179830,7 +179891,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3292
+            "line": 3309
           },
           "name": "onThinggroup",
           "parameters": [
@@ -179891,7 +179952,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3343
+            "line": 3360
           },
           "name": "onThingtype",
           "parameters": [
@@ -179952,7 +180013,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3357
+            "line": 3374
           },
           "name": "onTopic",
           "parameters": [
@@ -180013,7 +180074,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3371
+            "line": 3388
           },
           "name": "onTopicfilter",
           "parameters": [
@@ -180074,7 +180135,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 3261
+            "line": 3278
           },
           "name": "onTunnel",
           "parameters": [
@@ -183680,6 +183741,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifThingGroupArn()\n- .ifTunnelDestinationService()\n- .ifClientMode()\n\nhttps://docs.aws.amazon.com/iot/latest/apireference/API_RotateTunnelAccessToken.html",
+            "stability": "experimental",
+            "summary": "Grants permission to rotate the access token of a tunnel."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/iot.ts",
+            "line": 2427
+          },
+          "name": "toRotateTunnelAccessToken",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Iot"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/iot/latest/apireference/API_SearchIndex.html",
@@ -183688,7 +183766,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2422
+            "line": 2438
           },
           "name": "toSearchIndex",
           "returns": {
@@ -183705,7 +183783,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2433
+            "line": 2449
           },
           "name": "toSetDefaultAuthorizer",
           "returns": {
@@ -183722,7 +183800,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2444
+            "line": 2460
           },
           "name": "toSetDefaultPolicyVersion",
           "returns": {
@@ -183739,7 +183817,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2455
+            "line": 2471
           },
           "name": "toSetLoggingOptions",
           "returns": {
@@ -183756,7 +183834,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2466
+            "line": 2482
           },
           "name": "toSetV2LoggingLevel",
           "returns": {
@@ -183773,7 +183851,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2477
+            "line": 2493
           },
           "name": "toSetV2LoggingOptions",
           "returns": {
@@ -183790,7 +183868,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2488
+            "line": 2504
           },
           "name": "toStartAuditMitigationActionsTask",
           "returns": {
@@ -183807,7 +183885,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2499
+            "line": 2515
           },
           "name": "toStartDetectMitigationActionsTask",
           "returns": {
@@ -183824,7 +183902,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2510
+            "line": 2526
           },
           "name": "toStartOnDemandAuditTask",
           "returns": {
@@ -183841,7 +183919,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2521
+            "line": 2537
           },
           "name": "toStartThingRegistrationTask",
           "returns": {
@@ -183858,7 +183936,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2532
+            "line": 2548
           },
           "name": "toStopThingRegistrationTask",
           "returns": {
@@ -183875,7 +183953,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2543
+            "line": 2559
           },
           "name": "toSubscribe",
           "returns": {
@@ -183892,7 +183970,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2558
+            "line": 2574
           },
           "name": "toTagResource",
           "returns": {
@@ -183909,7 +183987,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2569
+            "line": 2585
           },
           "name": "toTestAuthorization",
           "returns": {
@@ -183926,7 +184004,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2580
+            "line": 2596
           },
           "name": "toTestInvokeAuthorizer",
           "returns": {
@@ -183943,7 +184021,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2591
+            "line": 2607
           },
           "name": "toTransferCertificate",
           "returns": {
@@ -183960,7 +184038,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2605
+            "line": 2621
           },
           "name": "toUntagResource",
           "returns": {
@@ -183977,7 +184055,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2616
+            "line": 2632
           },
           "name": "toUpdateAccountAuditConfiguration",
           "returns": {
@@ -183994,7 +184072,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2627
+            "line": 2643
           },
           "name": "toUpdateAuditSuppression",
           "returns": {
@@ -184011,7 +184089,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2638
+            "line": 2654
           },
           "name": "toUpdateAuthorizer",
           "returns": {
@@ -184028,7 +184106,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2649
+            "line": 2665
           },
           "name": "toUpdateBillingGroup",
           "returns": {
@@ -184045,7 +184123,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2663
+            "line": 2679
           },
           "name": "toUpdateCACertificate",
           "returns": {
@@ -184062,7 +184140,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2674
+            "line": 2690
           },
           "name": "toUpdateCertificate",
           "returns": {
@@ -184079,7 +184157,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2685
+            "line": 2701
           },
           "name": "toUpdateCustomMetric",
           "returns": {
@@ -184096,7 +184174,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2696
+            "line": 2712
           },
           "name": "toUpdateDimension",
           "returns": {
@@ -184113,7 +184191,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2707
+            "line": 2723
           },
           "name": "toUpdateDomainConfiguration",
           "returns": {
@@ -184130,7 +184208,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2718
+            "line": 2734
           },
           "name": "toUpdateDynamicThingGroup",
           "returns": {
@@ -184147,7 +184225,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2729
+            "line": 2745
           },
           "name": "toUpdateEventConfigurations",
           "returns": {
@@ -184164,7 +184242,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2740
+            "line": 2756
           },
           "name": "toUpdateFleetMetric",
           "returns": {
@@ -184181,7 +184259,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2751
+            "line": 2767
           },
           "name": "toUpdateIndexingConfiguration",
           "returns": {
@@ -184198,7 +184276,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2762
+            "line": 2778
           },
           "name": "toUpdateJob",
           "returns": {
@@ -184215,7 +184293,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2773
+            "line": 2789
           },
           "name": "toUpdateMitigationAction",
           "returns": {
@@ -184232,7 +184310,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2787
+            "line": 2803
           },
           "name": "toUpdateProvisioningTemplate",
           "returns": {
@@ -184249,7 +184327,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2801
+            "line": 2817
           },
           "name": "toUpdateRoleAlias",
           "returns": {
@@ -184266,7 +184344,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2812
+            "line": 2828
           },
           "name": "toUpdateScheduledAudit",
           "returns": {
@@ -184283,7 +184361,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2823
+            "line": 2839
           },
           "name": "toUpdateSecurityProfile",
           "returns": {
@@ -184300,7 +184378,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2834
+            "line": 2850
           },
           "name": "toUpdateStream",
           "returns": {
@@ -184317,7 +184395,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2845
+            "line": 2861
           },
           "name": "toUpdateThing",
           "returns": {
@@ -184334,7 +184412,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2856
+            "line": 2872
           },
           "name": "toUpdateThingGroup",
           "returns": {
@@ -184351,7 +184429,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2867
+            "line": 2883
           },
           "name": "toUpdateThingGroupsForThing",
           "returns": {
@@ -184368,7 +184446,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2878
+            "line": 2894
           },
           "name": "toUpdateThingShadow",
           "returns": {
@@ -184385,7 +184463,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2889
+            "line": 2905
           },
           "name": "toUpdateTopicRuleDestination",
           "returns": {
@@ -184402,7 +184480,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2900
+            "line": 2916
           },
           "name": "toValidateSecurityProfileBehaviors",
           "returns": {
@@ -184420,7 +184498,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/iot.ts",
-            "line": 2904
+            "line": 2920
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -357987,703 +358065,6 @@
       ],
       "symbolId": "lib/generated/workdocs:Workdocs"
     },
-    "cdk-iam-floyd.Worklink": {
-      "assembly": "cdk-iam-floyd",
-      "base": "cdk-iam-floyd.PolicyStatement",
-      "docs": {
-        "stability": "experimental",
-        "summary": "Statement provider for service [worklink](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworklink.html)."
-      },
-      "fqn": "cdk-iam-floyd.Worklink",
-      "initializer": {
-        "docs": {
-          "stability": "experimental",
-          "summary": "Statement provider for service [worklink](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonworklink.html)."
-        },
-        "locationInModule": {
-          "filename": "lib/generated/worklink.ts",
-          "line": 471
-        },
-        "parameters": [
-          {
-            "name": "props",
-            "optional": true,
-            "type": {
-              "fqn": "aws-cdk-lib.aws_iam.PolicyStatementProps"
-            }
-          }
-        ]
-      },
-      "kind": "class",
-      "locationInModule": {
-        "filename": "lib/generated/worklink.ts",
-        "line": 10
-      },
-      "methods": [
-        {
-          "docs": {
-            "remarks": "https://docs.aws.amazon.com/worklink/latest/api/API_CreateFleet.html",
-            "stability": "experimental",
-            "summary": "Adds a resource of type fleet to the statement."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 463
-          },
-          "name": "onFleet",
-          "parameters": [
-            {
-              "docs": {
-                "summary": "- Identifier for the fleetName."
-              },
-              "name": "fleetName",
-              "type": {
-                "primitive": "string"
-              }
-            },
-            {
-              "docs": {
-                "remarks": "defaults to empty string: all accounts.",
-                "summary": "- Account of the resource;"
-              },
-              "name": "account",
-              "optional": true,
-              "type": {
-                "primitive": "string"
-              }
-            },
-            {
-              "docs": {
-                "remarks": "defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.\n\nPossible conditions:\n- .ifAwsResourceTag()",
-                "summary": "- Partition of the AWS account [aws, aws-cn, aws-us-gov];"
-              },
-              "name": "partition",
-              "optional": true,
-              "type": {
-                "primitive": "string"
-              }
-            }
-          ],
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_AssociateDomain.html",
-            "stability": "experimental",
-            "summary": "Grants permission to associate a domain with an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 20
-          },
-          "name": "toAssociateDomain",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_AssociateWebsiteAuthorizationProvider.html",
-            "stability": "experimental",
-            "summary": "Grants permission to associate a website authorization provider with an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 31
-          },
-          "name": "toAssociateWebsiteAuthorizationProvider",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_AssociateWebsiteCertificateAuthority.html",
-            "stability": "experimental",
-            "summary": "Grants permission to associate a website certificate authority with an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 42
-          },
-          "name": "toAssociateWebsiteCertificateAuthority",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifAwsRequestTag()\n- .ifAwsTagKeys()\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_CreateFleet.html",
-            "stability": "experimental",
-            "summary": "Grants permission to create an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 57
-          },
-          "name": "toCreateFleet",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifAwsRequestTag()\n- .ifAwsTagKeys()\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_DeleteFleet.html",
-            "stability": "experimental",
-            "summary": "Grants permission to delete an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 72
-          },
-          "name": "toDeleteFleet",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_DescribeAuditStreamConfiguration.html",
-            "stability": "experimental",
-            "summary": "Grants permission to describe the audit stream configuration for an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 83
-          },
-          "name": "toDescribeAuditStreamConfiguration",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_DescribeCompanyNetworkConfiguration.html",
-            "stability": "experimental",
-            "summary": "Grants permission to describe the company network configuration for an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 94
-          },
-          "name": "toDescribeCompanyNetworkConfiguration",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_DescribeDevice.html",
-            "stability": "experimental",
-            "summary": "Grants permission to describe details of a device associated with an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 105
-          },
-          "name": "toDescribeDevice",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_DescribeDevicePolicyConfiguration.html",
-            "stability": "experimental",
-            "summary": "Grants permission to describe the device policy configuration for an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 116
-          },
-          "name": "toDescribeDevicePolicyConfiguration",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_DescribeDomain.html",
-            "stability": "experimental",
-            "summary": "Grants permission to describe details about a domain associated with an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 127
-          },
-          "name": "toDescribeDomain",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Read\n\nPossible conditions:\n- .ifAwsRequestTag()\n- .ifAwsTagKeys()\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_DescribeFleetMetadata.html",
-            "stability": "experimental",
-            "summary": "Grants permission to describe metadata of an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 142
-          },
-          "name": "toDescribeFleetMetadata",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_DescribeIdentityProviderConfiguration.html",
-            "stability": "experimental",
-            "summary": "Grants permission to describe the identity provider configuration for an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 153
-          },
-          "name": "toDescribeIdentityProviderConfiguration",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_DescribeWebsiteCertificateAuthority.html",
-            "stability": "experimental",
-            "summary": "Grants permission to describe a website certificate authority associated with an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 164
-          },
-          "name": "toDescribeWebsiteCertificateAuthority",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_DisassociateDomain.html",
-            "stability": "experimental",
-            "summary": "Grants permission to disassociate a domain from an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 175
-          },
-          "name": "toDisassociateDomain",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_DisassociateWebsiteAuthorizationProvider.html",
-            "stability": "experimental",
-            "summary": "Grants permission to disassociate a website authorization provider from an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 186
-          },
-          "name": "toDisassociateWebsiteAuthorizationProvider",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_DisassociateWebsiteCertificateAuthority.html",
-            "stability": "experimental",
-            "summary": "Grants permission to disassociate a website certificate authority from an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 197
-          },
-          "name": "toDisassociateWebsiteCertificateAuthority",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_ListDevices.html",
-            "stability": "experimental",
-            "summary": "Grants permission to list the devices associated with an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 208
-          },
-          "name": "toListDevices",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_ListDomains.html",
-            "stability": "experimental",
-            "summary": "Grants permission to list the associated domains for an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 219
-          },
-          "name": "toListDomains",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_ListFleets.html",
-            "stability": "experimental",
-            "summary": "Grants permission to list the Amazon WorkLink fleets associated with the account."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 230
-          },
-          "name": "toListFleets",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_ListTagsForResource.html",
-            "stability": "experimental",
-            "summary": "Grants permission to list tags for a resource."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 241
-          },
-          "name": "toListTagsForResource",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_ListWebsiteAuthorizationProviders.html",
-            "stability": "experimental",
-            "summary": "Grants permission to list the website authorization providers for an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 252
-          },
-          "name": "toListWebsiteAuthorizationProviders",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_ListWebsiteCertificateAuthorities.html",
-            "stability": "experimental",
-            "summary": "Grants permission to list the website certificate authorities associated with an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 263
-          },
-          "name": "toListWebsiteCertificateAuthorities",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_RestoreDomainAccess.html",
-            "stability": "experimental",
-            "summary": "Grants permission to restore access to a domain associated with an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 274
-          },
-          "name": "toRestoreDomainAccess",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_RevokeDomainAccess.html",
-            "stability": "experimental",
-            "summary": "Grants permission to revoke access to a domain associated with an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 285
-          },
-          "name": "toRevokeDomainAccess",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/worklink/latest/ag/manage-devices.html",
-            "stability": "experimental",
-            "summary": "Grants permission to list devices for an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 296
-          },
-          "name": "toSearchEntity",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_SignOutUser.html",
-            "stability": "experimental",
-            "summary": "Grants permission to sign out a user from an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 307
-          },
-          "name": "toSignOutUser",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Tagging\n\nPossible conditions:\n- .ifAwsRequestTag()\n- .ifAwsTagKeys()\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_TagResource.html",
-            "stability": "experimental",
-            "summary": "Grants permission to add one or more tags to a resource."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 322
-          },
-          "name": "toTagResource",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Tagging\n\nPossible conditions:\n- .ifAwsTagKeys()\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_UntagResource.html",
-            "stability": "experimental",
-            "summary": "Grants permission to remove one or more tags from a resource."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 336
-          },
-          "name": "toUntagResource",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_UpdateAuditStreamConfiguration.html",
-            "stability": "experimental",
-            "summary": "Grants permission to update the audit stream configuration for an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 347
-          },
-          "name": "toUpdateAuditStreamConfiguration",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_UpdateCompanyNetworkConfiguration.html",
-            "stability": "experimental",
-            "summary": "Grants permission to update the company network configuration for an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 358
-          },
-          "name": "toUpdateCompanyNetworkConfiguration",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_UpdateDevicePolicyConfiguration.html",
-            "stability": "experimental",
-            "summary": "Grants permission to update the device policy configuration for an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 369
-          },
-          "name": "toUpdateDevicePolicyConfiguration",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_UpdateDomainMetadata.html",
-            "stability": "experimental",
-            "summary": "Grants permission to update the metadata for a domain associated with an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 380
-          },
-          "name": "toUpdateDomainMetadata",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_UpdateFleetMetadata.html",
-            "stability": "experimental",
-            "summary": "Grants permission to update the metadata of an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 391
-          },
-          "name": "toUpdateFleetMetadata",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/worklink/latest/api/API_UpdateIdentityProviderConfiguration.html",
-            "stability": "experimental",
-            "summary": "Grants permission to update the identity provider configuration for an Amazon WorkLink fleet."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 402
-          },
-          "name": "toUpdateIdentityProviderConfiguration",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Worklink"
-            }
-          }
-        }
-      ],
-      "name": "Worklink",
-      "properties": [
-        {
-          "docs": {
-            "stability": "experimental"
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 406
-          },
-          "name": "accessLevelList",
-          "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
-          "protected": true,
-          "type": {
-            "fqn": "cdk-iam-floyd.AccessLevelList"
-          }
-        },
-        {
-          "docs": {
-            "stability": "experimental",
-            "summary": "Holds the prefix of the service actions, e.g. `ec2`."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/worklink.ts",
-            "line": 11
-          },
-          "name": "servicePrefix",
-          "overrides": "cdk-iam-floyd.PolicyStatementBase",
-          "type": {
-            "primitive": "string"
-          }
-        }
-      ],
-      "symbolId": "lib/generated/worklink:Worklink"
-    },
     "cdk-iam-floyd.Workmail": {
       "assembly": "cdk-iam-floyd",
       "base": "cdk-iam-floyd.PolicyStatement",
@@ -364273,6 +363654,6 @@
       "symbolId": "lib/generated/x-ray:Xray"
     }
   },
-  "version": "0.368.0",
-  "fingerprint": "45q7C3zHpFlbrj6nBzYsFlarR8YVY5bza6tEOvAuFRU="
+  "version": "0.369.0",
+  "fingerprint": "X1taIg1TLOtuKWuZiZurM3nlKaH/cCKMMdzMtPt/Xj8="
 }