cdk-iam-floyd 0.395.0 → 0.396.0

package/.jsii

@@ -3046,7 +3046,7 @@
   },
   "name": "cdk-iam-floyd",
   "readme": {
-    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Twitter](https://badgen.net/twitter/follow/heyiamfloyd?icon=twitter)][twitter]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n[![Maintainability](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/maintainability)](https://codeclimate.com/github/udondan/iam-floyd/maintainability)\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 316 Services\n- 12499 Actions\n- 1317 Resource Types\n- 1328 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n\n  **Starting with version 0.300.0, the packages are compatible with CDK v2.** For CDK v1 you can use any version up to:<br>\n  [![npm CDK v1](https://img.shields.io/badge/npm-0.286.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.286.0)\n  [![PyPI CDK v1](https://img.shields.io/badge/pypi-0.286.0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.286.0/)\n\n  Find them all on [libraries.io].\n\n## CDK Compatibility Matrix\n\n| CDK        | cdk-iam-floyd              |\n| ---------- | -------------              |\n| <= 1.151.0 | <= 0.285.0                 |\n| >= 1.152.0 | 0.286.0                    |\n| >= 1.158.0 | **No compatible version!** |\n| >= 2.0.0   | >= 0.300.0                 |\n| >= 2.20.0  | >= 0.351.0                 |\n| >= 2.26.0  | >= 0.377.0                 |\n| 2.29.x     | **No compatible version!** |\n| >= 2.30.0  | >= 0.391.0                 |\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [twitter]: https://twitter.com/heyiamfloyd\n"
+    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Twitter](https://badgen.net/twitter/follow/heyiamfloyd?icon=twitter)][twitter]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n[![Maintainability](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/maintainability)](https://codeclimate.com/github/udondan/iam-floyd/maintainability)\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 316 Services\n- 12505 Actions\n- 1317 Resource Types\n- 1331 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n\n  **Starting with version 0.300.0, the packages are compatible with CDK v2.** For CDK v1 you can use any version up to:<br>\n  [![npm CDK v1](https://img.shields.io/badge/npm-0.286.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.286.0)\n  [![PyPI CDK v1](https://img.shields.io/badge/pypi-0.286.0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.286.0/)\n\n  Find them all on [libraries.io].\n\n## CDK Compatibility Matrix\n\n| CDK        | cdk-iam-floyd              |\n| ---------- | -------------              |\n| <= 1.151.0 | <= 0.285.0                 |\n| >= 1.152.0 | 0.286.0                    |\n| >= 1.158.0 | **No compatible version!** |\n| >= 2.0.0   | >= 0.300.0                 |\n| >= 2.20.0  | >= 0.351.0                 |\n| >= 2.26.0  | >= 0.377.0                 |\n| 2.29.x     | **No compatible version!** |\n| >= 2.30.0  | >= 0.391.0                 |\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [twitter]: https://twitter.com/heyiamfloyd\n"
   },
   "repository": {
     "type": "git",
@@ -123254,7 +123254,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/messagedeliveryservice.ts",
-          "line": 96
+          "line": 118
         },
         "parameters": [
           {
@@ -123272,6 +123272,67 @@
         "line": 10
       },
       "methods": [
+        {
+          "docs": {
+            "remarks": "This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-policy-keys\n\nApplies to actions:\n- .toGetMessages()\n- .toSendReply()",
+            "stability": "experimental",
+            "summary": "Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/messagedeliveryservice.ts",
+            "line": 110
+          },
+          "name": "ifSsmSourceInstanceARN",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The value(s) to check."
+              },
+              "name": "value",
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+              },
+              "name": "operator",
+              "optional": true,
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "cdk-iam-floyd.Operator"
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Ec2messages"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
@@ -123342,13 +123403,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
+            "remarks": "Access Level: Read\n\nPossible conditions:\n- .ifSsmSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
             "stability": "experimental",
             "summary": "Grants permission to deliver messages to clients/instances using long polling."
           },
           "locationInModule": {
             "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 64
+            "line": 67
           },
           "name": "toGetMessages",
           "returns": {
@@ -123359,13 +123420,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSsmSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
             "stability": "experimental",
             "summary": "Grants permission to send replies from clients/instances to upstream service."
           },
           "locationInModule": {
             "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 75
+            "line": 81
           },
           "name": "toSendReply",
           "returns": {
@@ -123383,7 +123444,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 79
+            "line": 85
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -332450,7 +332511,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/systemsmanager.ts",
-          "line": 2266
+          "line": 2296
         },
         "parameters": [
           {
@@ -332476,7 +332537,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2149
+            "line": 2162
           },
           "name": "ifAutoApprove",
           "parameters": [
@@ -332537,7 +332598,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2167
+            "line": 2180
           },
           "name": "ifDocumentCategories",
           "parameters": [
@@ -332594,11 +332655,11 @@
           "docs": {
             "remarks": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions\n\nApplies to actions:\n- .toPutParameter()",
             "stability": "experimental",
-            "summary": "Controls whether Systems Manager parameters can be overwritten."
+            "summary": "Filters access by allowing Systems Manager parameters to be overwritten."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2182
+            "line": 2195
           },
           "name": "ifOverwrite",
           "parameters": [
@@ -332655,11 +332716,11 @@
           "docs": {
             "remarks": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions\n\nApplies to actions:\n- .toGetParametersByPath()",
             "stability": "experimental",
-            "summary": "Filters access to Systems Manager parameters created in a hierarchical structure."
+            "summary": "Filters access by allowing traversing hierarchical structure of the Systems Manager parameters."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2197
+            "line": 2210
           },
           "name": "ifRecursive",
           "parameters": [
@@ -332716,11 +332777,11 @@
           "docs": {
             "remarks": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions\n\nApplies to actions:\n- .toDeregisterManagedInstance()\n- .toGetConnectionStatus()\n- .toSendCommand()\n- .toStartSession()\n- .toUpdateManagedInstanceRole()\n\nApplies to resource types:\n- automation-execution\n- instance\n- maintenancewindow\n- managed-instance\n- opsmetadata\n- parameter\n- patchbaseline",
             "stability": "experimental",
-            "summary": "Filters access by based on a tag key-value pair assigned to the Systems Manager resource."
+            "summary": "Filters access by allowing access based on a tag key-value pair assigned to the Systems Manager resource."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2258
+            "line": 2288
           },
           "name": "ifResourceTag",
           "parameters": [
@@ -332790,7 +332851,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2211
+            "line": 2224
           },
           "name": "ifSessionDocumentAccessCheck",
           "parameters": [
@@ -332812,6 +332873,67 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-policy-keys\n\nApplies to actions:\n- .toUpdateAssociationStatus()\n- .toUpdateInstanceAssociationStatus()\n- .toUpdateInstanceInformation()",
+            "stability": "experimental",
+            "summary": "Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/systemsmanager.ts",
+            "line": 2241
+          },
+          "name": "ifSourceInstanceARN",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The value(s) to check."
+              },
+              "name": "value",
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+              },
+              "name": "operator",
+              "optional": true,
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "cdk-iam-floyd.Operator"
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Ssm"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions\n\nApplies to actions:\n- .toCreateResourceDataSync()\n- .toDeleteResourceDataSync()\n- .toListResourceDataSync()\n- .toUpdateResourceDataSync()",
@@ -332820,7 +332942,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2229
+            "line": 2259
           },
           "name": "ifSyncType",
           "parameters": [
@@ -332881,7 +333003,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1849
+            "line": 1858
           },
           "name": "onAssociation",
           "parameters": [
@@ -332942,7 +333064,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1882
+            "line": 1891
           },
           "name": "onAutomationDefinition",
           "parameters": [
@@ -333012,7 +333134,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1867
+            "line": 1876
           },
           "name": "onAutomationExecution",
           "parameters": [
@@ -333067,12 +333189,13 @@
         },
         {
           "docs": {
+            "remarks": "https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingBucket.html",
             "stability": "experimental",
             "summary": "Adds a resource of type bucket to the statement."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1892
+            "line": 1903
           },
           "name": "onBucket",
           "parameters": [
@@ -333111,7 +333234,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1910
+            "line": 1921
           },
           "name": "onDocument",
           "parameters": [
@@ -333166,12 +333289,13 @@
         },
         {
           "docs": {
+            "remarks": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policy-structure.html#EC2_ARN_Format",
             "stability": "experimental",
             "summary": "Adds a resource of type instance to the statement."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1926
+            "line": 1939
           },
           "name": "onInstance",
           "parameters": [
@@ -333232,7 +333356,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1944
+            "line": 1957
           },
           "name": "onMaintenancewindow",
           "parameters": [
@@ -333293,7 +333417,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1962
+            "line": 1975
           },
           "name": "onManagedInstance",
           "parameters": [
@@ -333354,7 +333478,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1976
+            "line": 1989
           },
           "name": "onManagedInstanceInventory",
           "parameters": [
@@ -333415,7 +333539,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1993
+            "line": 2006
           },
           "name": "onOpsitem",
           "parameters": [
@@ -333476,7 +333600,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2011
+            "line": 2024
           },
           "name": "onOpsmetadata",
           "parameters": [
@@ -333537,7 +333661,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2029
+            "line": 2042
           },
           "name": "onParameter",
           "parameters": [
@@ -333598,7 +333722,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2047
+            "line": 2060
           },
           "name": "onPatchbaseline",
           "parameters": [
@@ -333659,7 +333783,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2075
+            "line": 2088
           },
           "name": "onResourcedatasync",
           "parameters": [
@@ -333720,7 +333844,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2089
+            "line": 2102
           },
           "name": "onServicesetting",
           "parameters": [
@@ -333781,7 +333905,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2061
+            "line": 2074
           },
           "name": "onSession",
           "parameters": [
@@ -333842,7 +333966,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2134
+            "line": 2147
           },
           "name": "onTask",
           "parameters": [
@@ -333903,7 +334027,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2103
+            "line": 2116
           },
           "name": "onWindowtarget",
           "parameters": [
@@ -333964,7 +334088,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2117
+            "line": 2130
           },
           "name": "onWindowtask",
           "parameters": [
@@ -336229,13 +336353,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateAssociationStatus.html",
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateAssociationStatus.html",
             "stability": "experimental",
             "summary": "Grants permission to update the status of the SSM document associated with a specified instance."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1519
+            "line": 1522
           },
           "name": "toUpdateAssociationStatus",
           "returns": {
@@ -336252,7 +336376,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1530
+            "line": 1533
           },
           "name": "toUpdateDocument",
           "returns": {
@@ -336269,7 +336393,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1541
+            "line": 1544
           },
           "name": "toUpdateDocumentDefaultVersion",
           "returns": {
@@ -336286,7 +336410,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1552
+            "line": 1555
           },
           "name": "toUpdateDocumentMetadata",
           "returns": {
@@ -336297,13 +336421,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write",
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSourceInstanceARN()",
             "stability": "experimental",
             "summary": "Grants permission to SSM Agent to update the status of the association that it is currently running (internal Systems Manager call)."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1561
+            "line": 1567
           },
           "name": "toUpdateInstanceAssociationStatus",
           "returns": {
@@ -336314,13 +336438,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html",
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html",
             "stability": "experimental",
             "summary": "Grants permission to SSM Agent to send a heartbeat signal to the Systems Manager service in the cloud."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1572
+            "line": 1581
           },
           "name": "toUpdateInstanceInformation",
           "returns": {
@@ -336337,7 +336461,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1583
+            "line": 1592
           },
           "name": "toUpdateMaintenanceWindow",
           "returns": {
@@ -336354,7 +336478,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1594
+            "line": 1603
           },
           "name": "toUpdateMaintenanceWindowTarget",
           "returns": {
@@ -336371,7 +336495,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1605
+            "line": 1614
           },
           "name": "toUpdateMaintenanceWindowTask",
           "returns": {
@@ -336388,7 +336512,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1619
+            "line": 1628
           },
           "name": "toUpdateManagedInstanceRole",
           "returns": {
@@ -336405,7 +336529,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1630
+            "line": 1639
           },
           "name": "toUpdateOpsItem",
           "returns": {
@@ -336422,7 +336546,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1641
+            "line": 1650
           },
           "name": "toUpdateOpsMetadata",
           "returns": {
@@ -336439,7 +336563,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1652
+            "line": 1661
           },
           "name": "toUpdatePatchBaseline",
           "returns": {
@@ -336456,7 +336580,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1666
+            "line": 1675
           },
           "name": "toUpdateResourceDataSync",
           "returns": {
@@ -336473,7 +336597,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1677
+            "line": 1686
           },
           "name": "toUpdateServiceSetting",
           "returns": {
@@ -336491,7 +336615,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1681
+            "line": 1690
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -338224,7 +338348,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-          "line": 70
+          "line": 88
         },
         "parameters": [
           {
@@ -338244,13 +338368,74 @@
       "methods": [
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-create-iam-instance-profile.html",
+            "remarks": "This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-policy-keys\n\nApplies to actions:\n- .toCreateControlChannel()",
+            "stability": "experimental",
+            "summary": "Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
+            "line": 80
+          },
+          "name": "ifSsmSourceInstanceARN",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The value(s) to check."
+              },
+              "name": "value",
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+              },
+              "name": "operator",
+              "optional": true,
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "cdk-iam-floyd.Operator"
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Ssmmessages"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSsmSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-create-iam-instance-profile.html",
             "stability": "experimental",
             "summary": "Grants permission to register a control channel for an instance to send control messages to Systems Manager service."
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 20
+            "line": 23
           },
           "name": "toCreateControlChannel",
           "returns": {
@@ -338267,7 +338452,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 31
+            "line": 34
           },
           "name": "toCreateDataChannel",
           "returns": {
@@ -338284,7 +338469,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 42
+            "line": 45
           },
           "name": "toOpenControlChannel",
           "returns": {
@@ -338301,7 +338486,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 53
+            "line": 56
           },
           "name": "toOpenDataChannel",
           "returns": {
@@ -338319,7 +338504,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 57
+            "line": 60
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -338361,7 +338546,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/sso.ts",
-          "line": 1100
+          "line": 1184
         },
         "parameters": [
           {
@@ -338387,7 +338572,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 1080
+            "line": 1164
           },
           "name": "onAccount",
           "parameters": [
@@ -338428,7 +338613,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 1092
+            "line": 1176
           },
           "name": "onInstance",
           "parameters": [
@@ -338467,7 +338652,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 1068
+            "line": 1152
           },
           "name": "onPermissionSet",
           "parameters": [
@@ -338541,6 +338726,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_AttachCustomerManagedPolicyReferenceToPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to attach a customer managed policy reference to a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 45
+          },
+          "name": "toAttachCustomerManagedPolicyReferenceToPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_AttachManagedPolicyToPermissionSet.html",
@@ -338549,7 +338751,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 45
+            "line": 56
           },
           "name": "toAttachManagedPolicyToPermissionSet",
           "returns": {
@@ -338566,7 +338768,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 56
+            "line": 67
           },
           "name": "toCreateAccountAssignment",
           "returns": {
@@ -338583,7 +338785,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 67
+            "line": 78
           },
           "name": "toCreateApplicationInstance",
           "returns": {
@@ -338600,7 +338802,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 78
+            "line": 89
           },
           "name": "toCreateApplicationInstanceCertificate",
           "returns": {
@@ -338611,13 +338813,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateInstanceAccessControlAttributeConfiguration.html",
+            "remarks": "Access Level: Write\n\nDependent actions:\n- iam:AttachRolePolicy\n- iam:CreateRole\n- iam:DeleteRole\n- iam:DeleteRolePolicy\n- iam:DetachRolePolicy\n- iam:GetRole\n- iam:ListAttachedRolePolicies\n- iam:ListRolePolicies\n- iam:PutRolePolicy\n- iam:UpdateAssumeRolePolicy\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateInstanceAccessControlAttributeConfiguration.html",
             "stability": "experimental",
             "summary": "Grants permission to enable the instance for ABAC and specify the attributes."
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 89
+            "line": 112
           },
           "name": "toCreateInstanceAccessControlAttributeConfiguration",
           "returns": {
@@ -338634,7 +338836,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 100
+            "line": 123
           },
           "name": "toCreateManagedApplicationInstance",
           "returns": {
@@ -338651,7 +338853,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 115
+            "line": 138
           },
           "name": "toCreatePermissionSet",
           "returns": {
@@ -338668,7 +338870,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 126
+            "line": 149
           },
           "name": "toCreateProfile",
           "returns": {
@@ -338685,7 +338887,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 137
+            "line": 160
           },
           "name": "toCreateTrust",
           "returns": {
@@ -338702,7 +338904,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 148
+            "line": 171
           },
           "name": "toDeleteAccountAssignment",
           "returns": {
@@ -338719,7 +338921,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 159
+            "line": 182
           },
           "name": "toDeleteApplicationInstance",
           "returns": {
@@ -338736,7 +338938,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 170
+            "line": 193
           },
           "name": "toDeleteApplicationInstanceCertificate",
           "returns": {
@@ -338753,7 +338955,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 181
+            "line": 204
           },
           "name": "toDeleteInlinePolicyFromPermissionSet",
           "returns": {
@@ -338770,7 +338972,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 192
+            "line": 215
           },
           "name": "toDeleteInstanceAccessControlAttributeConfiguration",
           "returns": {
@@ -338787,7 +338989,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 203
+            "line": 226
           },
           "name": "toDeleteManagedApplicationInstance",
           "returns": {
@@ -338796,6 +338998,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeletePermissionsBoundaryFromPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to remove permissions boundary from a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 246
+          },
+          "name": "toDeletePermissionsBoundaryFromPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write",
@@ -338804,7 +339023,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 212
+            "line": 235
           },
           "name": "toDeletePermissionSet",
           "returns": {
@@ -338821,7 +339040,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 223
+            "line": 257
           },
           "name": "toDeletePermissionsPolicy",
           "returns": {
@@ -338838,7 +339057,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 234
+            "line": 268
           },
           "name": "toDeleteProfile",
           "returns": {
@@ -338855,7 +339074,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 245
+            "line": 279
           },
           "name": "toDescribeAccountAssignmentCreationStatus",
           "returns": {
@@ -338872,7 +339091,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 256
+            "line": 290
           },
           "name": "toDescribeAccountAssignmentDeletionStatus",
           "returns": {
@@ -338889,7 +339108,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 267
+            "line": 301
           },
           "name": "toDescribeInstanceAccessControlAttributeConfiguration",
           "returns": {
@@ -338906,7 +339125,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 278
+            "line": 312
           },
           "name": "toDescribePermissionSet",
           "returns": {
@@ -338923,7 +339142,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 289
+            "line": 323
           },
           "name": "toDescribePermissionSetProvisioningStatus",
           "returns": {
@@ -338940,7 +339159,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 300
+            "line": 334
           },
           "name": "toDescribePermissionsPolicies",
           "returns": {
@@ -338957,7 +339176,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 311
+            "line": 345
           },
           "name": "toDescribeRegisteredRegions",
           "returns": {
@@ -338966,6 +339185,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DetachCustomerManagedPolicyReferenceFromPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to detach a customer managed policy reference from a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 356
+          },
+          "name": "toDetachCustomerManagedPolicyReferenceFromPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DetachManagedPolicyFromPermissionSet.html",
@@ -338974,7 +339210,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 322
+            "line": 367
           },
           "name": "toDetachManagedPolicyFromPermissionSet",
           "returns": {
@@ -338991,7 +339227,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 336
+            "line": 381
           },
           "name": "toDisassociateDirectory",
           "returns": {
@@ -339008,7 +339244,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 347
+            "line": 392
           },
           "name": "toDisassociateProfile",
           "returns": {
@@ -339025,7 +339261,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 358
+            "line": 403
           },
           "name": "toGetApplicationInstance",
           "returns": {
@@ -339042,7 +339278,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 369
+            "line": 414
           },
           "name": "toGetApplicationTemplate",
           "returns": {
@@ -339059,7 +339295,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 380
+            "line": 425
           },
           "name": "toGetInlinePolicyForPermissionSet",
           "returns": {
@@ -339076,7 +339312,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 391
+            "line": 436
           },
           "name": "toGetManagedApplicationInstance",
           "returns": {
@@ -339093,7 +339329,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 402
+            "line": 447
           },
           "name": "toGetMfaDeviceManagementForDirectory",
           "returns": {
@@ -339102,6 +339338,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetPermissionsBoundaryForPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to get permissions boundary for a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 469
+          },
+          "name": "toGetPermissionsBoundaryForPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
@@ -339110,7 +339363,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 413
+            "line": 458
           },
           "name": "toGetPermissionSet",
           "returns": {
@@ -339127,7 +339380,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 427
+            "line": 483
           },
           "name": "toGetPermissionsPolicy",
           "returns": {
@@ -339144,7 +339397,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 438
+            "line": 494
           },
           "name": "toGetProfile",
           "returns": {
@@ -339161,7 +339414,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 460
+            "line": 516
           },
           "name": "toGetSharedSsoConfiguration",
           "returns": {
@@ -339178,7 +339431,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 471
+            "line": 527
           },
           "name": "toGetSsoConfiguration",
           "returns": {
@@ -339195,7 +339448,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 449
+            "line": 505
           },
           "name": "toGetSSOStatus",
           "returns": {
@@ -339212,7 +339465,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 482
+            "line": 538
           },
           "name": "toGetTrust",
           "returns": {
@@ -339229,7 +339482,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 493
+            "line": 549
           },
           "name": "toImportApplicationInstanceServiceProviderMetadata",
           "returns": {
@@ -339246,7 +339499,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 504
+            "line": 560
           },
           "name": "toListAccountAssignmentCreationStatus",
           "returns": {
@@ -339263,7 +339516,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 515
+            "line": 571
           },
           "name": "toListAccountAssignmentDeletionStatus",
           "returns": {
@@ -339280,7 +339533,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 526
+            "line": 582
           },
           "name": "toListAccountAssignments",
           "returns": {
@@ -339297,7 +339550,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 537
+            "line": 593
           },
           "name": "toListAccountsForProvisionedPermissionSet",
           "returns": {
@@ -339314,7 +339567,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 548
+            "line": 604
           },
           "name": "toListApplicationInstanceCertificates",
           "returns": {
@@ -339331,7 +339584,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 562
+            "line": 618
           },
           "name": "toListApplicationInstances",
           "returns": {
@@ -339348,7 +339601,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 587
+            "line": 643
           },
           "name": "toListApplications",
           "returns": {
@@ -339365,7 +339618,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 576
+            "line": 632
           },
           "name": "toListApplicationTemplates",
           "returns": {
@@ -339374,6 +339627,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListCustomerManagedPolicyReferencesInPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to list the customer managed policy references that are attached to a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 654
+          },
+          "name": "toListCustomerManagedPolicyReferencesInPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
@@ -339382,7 +339652,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 598
+            "line": 665
           },
           "name": "toListDirectoryAssociations",
           "returns": {
@@ -339399,7 +339669,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 609
+            "line": 676
           },
           "name": "toListInstances",
           "returns": {
@@ -339416,7 +339686,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 620
+            "line": 687
           },
           "name": "toListManagedPoliciesInPermissionSet",
           "returns": {
@@ -339433,7 +339703,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 631
+            "line": 698
           },
           "name": "toListPermissionSetProvisioningStatus",
           "returns": {
@@ -339450,7 +339720,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 640
+            "line": 707
           },
           "name": "toListPermissionSets",
           "returns": {
@@ -339467,7 +339737,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 651
+            "line": 718
           },
           "name": "toListPermissionSetsProvisionedToAccount",
           "returns": {
@@ -339484,7 +339754,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 662
+            "line": 729
           },
           "name": "toListProfileAssociations",
           "returns": {
@@ -339501,7 +339771,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 676
+            "line": 743
           },
           "name": "toListProfiles",
           "returns": {
@@ -339518,7 +339788,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 687
+            "line": 754
           },
           "name": "toListTagsForResource",
           "returns": {
@@ -339535,7 +339805,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 698
+            "line": 765
           },
           "name": "toProvisionPermissionSet",
           "returns": {
@@ -339552,7 +339822,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 709
+            "line": 776
           },
           "name": "toPutInlinePolicyToPermissionSet",
           "returns": {
@@ -339569,7 +339839,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 720
+            "line": 787
           },
           "name": "toPutMfaDeviceManagementForDirectory",
           "returns": {
@@ -339578,6 +339848,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutPermissionsBoundaryToPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to add permissions boundary to a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 798
+          },
+          "name": "toPutPermissionsBoundaryToPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
@@ -339586,7 +339873,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 731
+            "line": 809
           },
           "name": "toPutPermissionsPolicy",
           "returns": {
@@ -339603,7 +339890,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 745
+            "line": 823
           },
           "name": "toSearchGroups",
           "returns": {
@@ -339620,7 +339907,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 759
+            "line": 837
           },
           "name": "toSearchUsers",
           "returns": {
@@ -339637,7 +339924,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 774
+            "line": 852
           },
           "name": "toStartSSO",
           "returns": {
@@ -339654,7 +339941,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 789
+            "line": 867
           },
           "name": "toTagResource",
           "returns": {
@@ -339671,7 +339958,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 804
+            "line": 882
           },
           "name": "toUntagResource",
           "returns": {
@@ -339688,7 +339975,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 815
+            "line": 893
           },
           "name": "toUpdateApplicationInstanceActiveCertificate",
           "returns": {
@@ -339705,7 +339992,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 826
+            "line": 904
           },
           "name": "toUpdateApplicationInstanceDisplayData",
           "returns": {
@@ -339722,7 +340009,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 837
+            "line": 915
           },
           "name": "toUpdateApplicationInstanceResponseConfiguration",
           "returns": {
@@ -339739,7 +340026,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 848
+            "line": 926
           },
           "name": "toUpdateApplicationInstanceResponseSchemaConfiguration",
           "returns": {
@@ -339756,7 +340043,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 859
+            "line": 937
           },
           "name": "toUpdateApplicationInstanceSecurityConfiguration",
           "returns": {
@@ -339773,7 +340060,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 870
+            "line": 948
           },
           "name": "toUpdateApplicationInstanceServiceProviderConfiguration",
           "returns": {
@@ -339790,7 +340077,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 881
+            "line": 959
           },
           "name": "toUpdateApplicationInstanceStatus",
           "returns": {
@@ -339807,7 +340094,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 892
+            "line": 970
           },
           "name": "toUpdateDirectoryAssociation",
           "returns": {
@@ -339824,7 +340111,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 903
+            "line": 981
           },
           "name": "toUpdateInstanceAccessControlAttributeConfiguration",
           "returns": {
@@ -339841,7 +340128,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 914
+            "line": 992
           },
           "name": "toUpdateManagedApplicationInstanceStatus",
           "returns": {
@@ -339858,7 +340145,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 923
+            "line": 1001
           },
           "name": "toUpdatePermissionSet",
           "returns": {
@@ -339875,7 +340162,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 934
+            "line": 1012
           },
           "name": "toUpdateProfile",
           "returns": {
@@ -339892,7 +340179,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 945
+            "line": 1023
           },
           "name": "toUpdateSSOConfiguration",
           "returns": {
@@ -339909,7 +340196,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 956
+            "line": 1034
           },
           "name": "toUpdateTrust",
           "returns": {
@@ -339927,7 +340214,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 960
+            "line": 1038
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -370511,6 +370798,6 @@
       "symbolId": "lib/generated/x-ray:Xray"
     }
   },
-  "version": "0.395.0",
-  "fingerprint": "GtptiLI6adRdFRxtoIpyccHRpK8qd9zj0L65ThHcd+Y="
+  "version": "0.396.0",
+  "fingerprint": "aXv8/mCgNX8WDrAF72JWHjw3IEkH9w5zY/y0q4B7pO4="
 }