cdk-iam-floyd 0.390.0 → 0.391.0

package/.jsii

@@ -3033,7 +3033,7 @@
   },
   "name": "cdk-iam-floyd",
   "readme": {
-    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Twitter](https://badgen.net/twitter/follow/heyiamfloyd?icon=twitter)][twitter]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n[![Maintainability](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/maintainability)](https://codeclimate.com/github/udondan/iam-floyd/maintainability)\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 313 Services\n- 12385 Actions\n- 1303 Resource Types\n- 1315 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n\n  **Starting with version 0.300.0, the packages are compatible with CDK v2.** For CDK v1 you can use any version up to:<br>\n  [![npm CDK v1](https://img.shields.io/badge/npm-0.286.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.286.0)\n  [![PyPI CDK v1](https://img.shields.io/badge/pypi-0.286.0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.286.0/)\n\n  Starting with CDK v1.152.0 you have to use cdk-iam-floyd v0.286.0.<br>\n  Starting with CDK v2.20.0 you have to use cdk-iam-floyd >= v0.351.0.<br>\n  Starting with CDK v2.26.0 you have to use cdk-iam-floyd >= v0.377.0.\n\nFind them all on [libraries.io].\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [twitter]: https://twitter.com/heyiamfloyd\n"
+    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Twitter](https://badgen.net/twitter/follow/heyiamfloyd?icon=twitter)][twitter]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n[![Maintainability](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/maintainability)](https://codeclimate.com/github/udondan/iam-floyd/maintainability)\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 313 Services\n- 12386 Actions\n- 1303 Resource Types\n- 1315 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n\n  **Starting with version 0.300.0, the packages are compatible with CDK v2.** For CDK v1 you can use any version up to:<br>\n  [![npm CDK v1](https://img.shields.io/badge/npm-0.286.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.286.0)\n  [![PyPI CDK v1](https://img.shields.io/badge/pypi-0.286.0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.286.0/)\n\n  Starting with CDK v1.152.0 you have to use cdk-iam-floyd v0.286.0.<br>\n  Starting with CDK v2.20.0 you have to use cdk-iam-floyd >= v0.351.0.<br>\n  Starting with CDK v2.26.0 you have to use cdk-iam-floyd >= v0.377.0.<br>\n  **There is no compatible version available for CDK v2.29.x!**<br>\n  Starting with CDK v2.30.0 you have to use cdk-iam-floyd >= v0.391.0.\n\nFind them all on [libraries.io].\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [twitter]: https://twitter.com/heyiamfloyd\n"
   },
   "repository": {
     "type": "git",
@@ -256083,7 +256083,7 @@
         },
         "locationInModule": {
           "filename": "aws-iam/lib/policy-statement.ts",
-          "line": 95
+          "line": 88
         },
         "parameters": [
           {
@@ -256117,7 +256117,7 @@
         },
         "locationInModule": {
           "filename": "aws-iam/lib/policy-statement.ts",
-          "line": 95
+          "line": 88
         },
         "parameters": [
           {
@@ -256186,7 +256186,7 @@
         },
         "locationInModule": {
           "filename": "aws-iam/lib/policy-statement.ts",
-          "line": 95
+          "line": 88
         },
         "parameters": [
           {
@@ -256211,7 +256211,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/3-actions.ts",
-            "line": 119
+            "line": 127
           },
           "name": "allActions",
           "returns": {
@@ -256228,7 +256228,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/3-actions.ts",
-            "line": 159
+            "line": 167
           },
           "name": "allListActions",
           "returns": {
@@ -256244,7 +256244,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/3-actions.ts",
-            "line": 137
+            "line": 145
           },
           "name": "allMatchingActions",
           "parameters": [
@@ -256275,7 +256275,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/3-actions.ts",
-            "line": 194
+            "line": 202
           },
           "name": "allPermissionManagementActions",
           "returns": {
@@ -256292,7 +256292,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/3-actions.ts",
-            "line": 170
+            "line": 178
           },
           "name": "allReadActions",
           "returns": {
@@ -256309,7 +256309,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/3-actions.ts",
-            "line": 205
+            "line": 213
           },
           "name": "allTaggingActions",
           "returns": {
@@ -256326,7 +256326,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/3-actions.ts",
-            "line": 183
+            "line": 191
           },
           "name": "allWriteActions",
           "returns": {
@@ -256343,7 +256343,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/3-actions.ts",
-            "line": 225
+            "line": 233
           },
           "name": "compact",
           "returns": {
@@ -256352,6 +256352,24 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "After calling this, any of the `addXxx()` methods will throw an exception.\n\nLibraries that lazily generate statement bodies can override this method to\nfill the actual PolicyStatement fields. Be aware that this method may be called\nmultiple times.",
+            "stability": "experimental",
+            "summary": "Make the PolicyStatement immutable."
+          },
+          "locationInModule": {
+            "filename": "lib/shared/policy-statement/3-actions.ts",
+            "line": 63
+          },
+          "name": "freeze",
+          "overrides": "cdk-iam-floyd.PolicyStatementWithCondition",
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.PolicyStatement"
+            }
+          }
+        },
         {
           "docs": {
             "stability": "experimental",
@@ -256359,7 +256377,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/3-actions.ts",
-            "line": 92
+            "line": 100
           },
           "name": "hasActions",
           "returns": {
@@ -256375,7 +256393,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/3-actions.ts",
-            "line": 84
+            "line": 92
           },
           "name": "notAction",
           "returns": {
@@ -256392,7 +256410,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/3-actions.ts",
-            "line": 107
+            "line": 115
           },
           "name": "to",
           "parameters": [
@@ -256501,7 +256519,7 @@
         },
         "locationInModule": {
           "filename": "aws-iam/lib/policy-statement.ts",
-          "line": 95
+          "line": 88
         },
         "parameters": [
           {
@@ -256599,7 +256617,7 @@
         },
         "locationInModule": {
           "filename": "aws-iam/lib/policy-statement.ts",
-          "line": 95
+          "line": 88
         },
         "parameters": [
           {
@@ -256617,6 +256635,24 @@
         "line": 21
       },
       "methods": [
+        {
+          "docs": {
+            "remarks": "After calling this, any of the `addXxx()` methods will throw an exception.\n\nLibraries that lazily generate statement bodies can override this method to\nfill the actual PolicyStatement fields. Be aware that this method may be called\nmultiple times.",
+            "stability": "experimental",
+            "summary": "Make the PolicyStatement immutable."
+          },
+          "locationInModule": {
+            "filename": "lib/shared/policy-statement/2-conditions.ts",
+            "line": 51
+          },
+          "name": "freeze",
+          "overrides": "aws-cdk-lib.aws_iam.PolicyStatement",
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.PolicyStatement"
+            }
+          }
+        },
         {
           "docs": {
             "stability": "experimental",
@@ -256624,7 +256660,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 68
+            "line": 77
           },
           "name": "hasConditions",
           "returns": {
@@ -256640,7 +256676,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 79
+            "line": 88
           },
           "name": "if",
           "parameters": [
@@ -256696,7 +256732,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 123
+            "line": 132
           },
           "name": "ifAwsCalledVia",
           "parameters": [
@@ -256757,7 +256793,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 144
+            "line": 153
           },
           "name": "ifAwsCalledViaFirst",
           "parameters": [
@@ -256818,7 +256854,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 161
+            "line": 170
           },
           "name": "ifAwsCalledViaLast",
           "parameters": [
@@ -256879,7 +256915,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 178
+            "line": 187
           },
           "name": "ifAwsCurrentTime",
           "parameters": [
@@ -256953,7 +256989,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 209
+            "line": 218
           },
           "name": "ifAwsEpochTime",
           "parameters": [
@@ -257033,7 +257069,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 241
+            "line": 250
           },
           "name": "ifAwsMultiFactorAuthAge",
           "parameters": [
@@ -257094,7 +257130,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 265
+            "line": 274
           },
           "name": "ifAwsMultiFactorAuthPresent",
           "parameters": [
@@ -257124,7 +257160,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 283
+            "line": 292
           },
           "name": "ifAwsPrincipalAccount",
           "parameters": [
@@ -257185,7 +257221,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 302
+            "line": 311
           },
           "name": "ifAwsPrincipalArn",
           "parameters": [
@@ -257246,7 +257282,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 322
+            "line": 331
           },
           "name": "ifAwsPrincipalIsAWSService",
           "parameters": [
@@ -257276,7 +257312,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 342
+            "line": 351
           },
           "name": "ifAwsPrincipalOrgID",
           "parameters": [
@@ -257337,7 +257373,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 365
+            "line": 374
           },
           "name": "ifAwsPrincipalOrgPaths",
           "parameters": [
@@ -257398,7 +257434,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 388
+            "line": 397
           },
           "name": "ifAwsPrincipalServiceName",
           "parameters": [
@@ -257445,7 +257481,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 411
+            "line": 420
           },
           "name": "ifAwsPrincipalServiceNamesList",
           "parameters": [
@@ -257497,7 +257533,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 435
+            "line": 444
           },
           "name": "ifAwsPrincipalTag",
           "parameters": [
@@ -257567,7 +257603,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 453
+            "line": 462
           },
           "name": "ifAwsPrincipalType",
           "parameters": [
@@ -257629,7 +257665,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 474
+            "line": 483
           },
           "name": "ifAwsReferer",
           "parameters": [
@@ -257690,7 +257726,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 492
+            "line": 501
           },
           "name": "ifAwsRequestedRegion",
           "parameters": [
@@ -257751,7 +257787,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 512
+            "line": 521
           },
           "name": "ifAwsRequestTag",
           "parameters": [
@@ -257821,7 +257857,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 531
+            "line": 540
           },
           "name": "ifAwsResourceTag",
           "parameters": [
@@ -257891,7 +257927,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 548
+            "line": 557
           },
           "name": "ifAwsSecureTransport",
           "parameters": [
@@ -257921,7 +257957,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 568
+            "line": 577
           },
           "name": "ifAwsSourceAccount",
           "parameters": [
@@ -257982,7 +258018,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 589
+            "line": 598
           },
           "name": "ifAwsSourceArn",
           "parameters": [
@@ -258043,7 +258079,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 616
+            "line": 625
           },
           "name": "ifAwsSourceIdentity",
           "parameters": [
@@ -258104,7 +258140,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 635
+            "line": 644
           },
           "name": "ifAwsSourceIp",
           "parameters": [
@@ -258165,7 +258201,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 653
+            "line": 662
           },
           "name": "ifAwsSourceVpc",
           "parameters": [
@@ -258226,7 +258262,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 670
+            "line": 679
           },
           "name": "ifAwsSourceVpce",
           "parameters": [
@@ -258287,7 +258323,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 691
+            "line": 700
           },
           "name": "ifAwsTagKeys",
           "parameters": [
@@ -258348,7 +258384,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 707
+            "line": 716
           },
           "name": "ifAwsTokenIssueTime",
           "parameters": [
@@ -258405,7 +258441,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 730
+            "line": 739
           },
           "name": "ifAwsUserAgent",
           "parameters": [
@@ -258466,7 +258502,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 747
+            "line": 756
           },
           "name": "ifAwsUserid",
           "parameters": [
@@ -258527,7 +258563,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 761
+            "line": 770
           },
           "name": "ifAwsUsername",
           "parameters": [
@@ -258588,7 +258624,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 784
+            "line": 793
           },
           "name": "ifAwsViaAWSService",
           "parameters": [
@@ -258618,7 +258654,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 804
+            "line": 813
           },
           "name": "ifAwsVpcSourceIp",
           "parameters": [
@@ -258741,7 +258777,7 @@
         },
         "locationInModule": {
           "filename": "aws-iam/lib/policy-statement.ts",
-          "line": 95
+          "line": 88
         },
         "parameters": [
           {
@@ -258827,7 +258863,7 @@
         },
         "locationInModule": {
           "filename": "aws-iam/lib/policy-statement.ts",
-          "line": 95
+          "line": 88
         },
         "parameters": [
           {
@@ -258852,7 +258888,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/6-principals.ts",
-            "line": 75
+            "line": 83
           },
           "name": "addPrincipal",
           "parameters": [
@@ -258888,7 +258924,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/6-principals.ts",
-            "line": 52
+            "line": 60
           },
           "name": "cdkApplyPrincipals",
           "protected": true
@@ -258900,7 +258936,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/6-principals.ts",
-            "line": 90
+            "line": 98
           },
           "name": "for",
           "parameters": [
@@ -258937,7 +258973,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/6-principals.ts",
-            "line": 99
+            "line": 107
           },
           "name": "forAccount",
           "parameters": [
@@ -258966,7 +259002,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/6-principals.ts",
-            "line": 218
+            "line": 226
           },
           "name": "forAssumedRoleSession",
           "parameters": [
@@ -259014,7 +259050,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/6-principals.ts",
-            "line": 157
+            "line": 165
           },
           "name": "forCanonicalUser",
           "parameters": [
@@ -259044,7 +259080,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/6-principals.ts",
-            "line": 114
+            "line": 122
           },
           "name": "forFederated",
           "parameters": [
@@ -259073,7 +259109,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/6-principals.ts",
-            "line": 131
+            "line": 139
           },
           "name": "forFederatedAmazon",
           "returns": {
@@ -259089,7 +259125,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/6-principals.ts",
-            "line": 124
+            "line": 132
           },
           "name": "forFederatedCognito",
           "returns": {
@@ -259105,7 +259141,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/6-principals.ts",
-            "line": 138
+            "line": 146
           },
           "name": "forFederatedFacebook",
           "returns": {
@@ -259121,7 +259157,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/6-principals.ts",
-            "line": 146
+            "line": 154
           },
           "name": "forFederatedGoogle",
           "returns": {
@@ -259138,7 +259174,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/6-principals.ts",
-            "line": 254
+            "line": 262
           },
           "name": "forPublic",
           "returns": {
@@ -259154,7 +259190,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/6-principals.ts",
-            "line": 201
+            "line": 209
           },
           "name": "forRole",
           "parameters": [
@@ -259192,7 +259228,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/6-principals.ts",
-            "line": 170
+            "line": 178
           },
           "name": "forSaml",
           "parameters": [
@@ -259230,7 +259266,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/6-principals.ts",
-            "line": 240
+            "line": 248
           },
           "name": "forService",
           "parameters": [
@@ -259260,7 +259296,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/6-principals.ts",
-            "line": 185
+            "line": 193
           },
           "name": "forUser",
           "parameters": [
@@ -259291,6 +259327,24 @@
           },
           "variadic": true
         },
+        {
+          "docs": {
+            "remarks": "After calling this, any of the `addXxx()` methods will throw an exception.\n\nLibraries that lazily generate statement bodies can override this method to\nfill the actual PolicyStatement fields. Be aware that this method may be called\nmultiple times.",
+            "stability": "experimental",
+            "summary": "Make the PolicyStatement immutable."
+          },
+          "locationInModule": {
+            "filename": "lib/shared/policy-statement/6-principals.ts",
+            "line": 52
+          },
+          "name": "freeze",
+          "overrides": "cdk-iam-floyd.PolicyStatementWithResources",
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.PolicyStatement"
+            }
+          }
+        },
         {
           "docs": {
             "stability": "experimental",
@@ -259298,10 +259352,9 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/6-principals.ts",
-            "line": 65
+            "line": 73
           },
           "name": "hasPrincipals",
-          "overrides": "cdk-iam-floyd.PolicyStatementWithResources",
           "returns": {
             "type": {
               "primitive": "boolean"
@@ -259315,7 +259368,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/6-principals.ts",
-            "line": 57
+            "line": 65
           },
           "name": "notPrincipal",
           "returns": {
@@ -259408,7 +259461,7 @@
         },
         "locationInModule": {
           "filename": "aws-iam/lib/policy-statement.ts",
-          "line": 95
+          "line": 88
         },
         "parameters": [
           {
@@ -259428,18 +259481,19 @@
       "methods": [
         {
           "docs": {
-            "remarks": "We just need it here so we can reference it in method `ensureResource`",
+            "remarks": "After calling this, any of the `addXxx()` methods will throw an exception.\n\nLibraries that lazily generate statement bodies can override this method to\nfill the actual PolicyStatement fields. Be aware that this method may be called\nmultiple times.",
             "stability": "experimental",
-            "summary": "Dummy method. Will be overridden by 6-principal.ts."
+            "summary": "Make the PolicyStatement immutable."
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/4-resources.ts",
-            "line": 122
+            "line": 57
           },
-          "name": "hasPrincipals",
+          "name": "freeze",
+          "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
           "returns": {
             "type": {
-              "primitive": "boolean"
+              "fqn": "aws-cdk-lib.aws_iam.PolicyStatement"
             }
           }
         },
@@ -259450,7 +259504,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/4-resources.ts",
-            "line": 81
+            "line": 90
           },
           "name": "hasResources",
           "returns": {
@@ -259466,7 +259520,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/4-resources.ts",
-            "line": 73
+            "line": 82
           },
           "name": "notResource",
           "returns": {
@@ -259483,7 +259537,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/4-resources.ts",
-            "line": 90
+            "line": 99
           },
           "name": "on",
           "parameters": [
@@ -259510,7 +259564,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/4-resources.ts",
-            "line": 100
+            "line": 109
           },
           "name": "onAllResources",
           "returns": {
@@ -358111,7 +358165,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/well-architectedtool.ts",
-          "line": 554
+          "line": 566
         },
         "parameters": [
           {
@@ -358137,7 +358191,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/well-architectedtool.ts",
-            "line": 546
+            "line": 558
           },
           "name": "onLens",
           "parameters": [
@@ -358198,7 +358252,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/well-architectedtool.ts",
-            "line": 529
+            "line": 541
           },
           "name": "onWorkload",
           "parameters": [
@@ -358829,6 +358883,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UpdateGlobalSettings.html",
+            "stability": "experimental",
+            "summary": "Grants permission to update settings to enable aws-organization support."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/well-architectedtool.ts",
+            "line": 418
+          },
+          "name": "toUpdateGlobalSettings",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Wellarchitected"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/wellarchitected/latest/APIReference/API_UpdateLensReview.html",
@@ -358837,7 +358908,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/well-architectedtool.ts",
-            "line": 418
+            "line": 429
           },
           "name": "toUpdateLensReview",
           "returns": {
@@ -358854,7 +358925,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/well-architectedtool.ts",
-            "line": 429
+            "line": 440
           },
           "name": "toUpdateShareInvitation",
           "returns": {
@@ -358871,7 +358942,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/well-architectedtool.ts",
-            "line": 440
+            "line": 451
           },
           "name": "toUpdateWorkload",
           "returns": {
@@ -358888,7 +358959,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/well-architectedtool.ts",
-            "line": 451
+            "line": 462
           },
           "name": "toUpdateWorkloadShare",
           "returns": {
@@ -358905,7 +358976,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/well-architectedtool.ts",
-            "line": 462
+            "line": 473
           },
           "name": "toUpgradeLensReview",
           "returns": {
@@ -358923,7 +358994,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/well-architectedtool.ts",
-            "line": 466
+            "line": 477
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -367117,6 +367188,6 @@
       "symbolId": "lib/generated/x-ray:Xray"
     }
   },
-  "version": "0.390.0",
-  "fingerprint": "bTYnuWgXu/3/A5Fqo6SsQM3tAA6PMoAQFUCvskDkUco="
+  "version": "0.391.0",
+  "fingerprint": "AZTLP0COzItIDRoQFhr9GmbNCj1wzLc+GXHt93OvMRE="
 }