cdk-iam-floyd 0.395.0 → 0.398.0

package/.jsii

@@ -3046,7 +3046,7 @@
   },
   "name": "cdk-iam-floyd",
   "readme": {
-    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Twitter](https://badgen.net/twitter/follow/heyiamfloyd?icon=twitter)][twitter]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n[![Maintainability](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/maintainability)](https://codeclimate.com/github/udondan/iam-floyd/maintainability)\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 316 Services\n- 12499 Actions\n- 1317 Resource Types\n- 1328 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n\n  **Starting with version 0.300.0, the packages are compatible with CDK v2.** For CDK v1 you can use any version up to:<br>\n  [![npm CDK v1](https://img.shields.io/badge/npm-0.286.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.286.0)\n  [![PyPI CDK v1](https://img.shields.io/badge/pypi-0.286.0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.286.0/)\n\n  Find them all on [libraries.io].\n\n## CDK Compatibility Matrix\n\n| CDK        | cdk-iam-floyd              |\n| ---------- | -------------              |\n| <= 1.151.0 | <= 0.285.0                 |\n| >= 1.152.0 | 0.286.0                    |\n| >= 1.158.0 | **No compatible version!** |\n| >= 2.0.0   | >= 0.300.0                 |\n| >= 2.20.0  | >= 0.351.0                 |\n| >= 2.26.0  | >= 0.377.0                 |\n| 2.29.x     | **No compatible version!** |\n| >= 2.30.0  | >= 0.391.0                 |\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [twitter]: https://twitter.com/heyiamfloyd\n"
+    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Twitter](https://badgen.net/twitter/follow/heyiamfloyd?icon=twitter)][twitter]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n[![Maintainability](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/maintainability)](https://codeclimate.com/github/udondan/iam-floyd/maintainability)\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 316 Services\n- 12511 Actions\n- 1317 Resource Types\n- 1334 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n\n  **Starting with version 0.300.0, the packages are compatible with CDK v2.** For CDK v1 you can use any version up to:<br>\n  [![npm CDK v1](https://img.shields.io/badge/npm-0.286.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.286.0)\n  [![PyPI CDK v1](https://img.shields.io/badge/pypi-0.286.0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.286.0/)\n\n  Find them all on [libraries.io].\n\n## CDK Compatibility Matrix\n\n| CDK        | cdk-iam-floyd              |\n| ---------- | -------------              |\n| <= 1.151.0 | <= 0.285.0                 |\n| >= 1.152.0 | 0.286.0                    |\n| >= 1.158.0 | **No compatible version!** |\n| >= 2.0.0   | >= 0.300.0                 |\n| >= 2.20.0  | >= 0.351.0                 |\n| >= 2.26.0  | >= 0.377.0                 |\n| 2.29.x     | **No compatible version!** |\n| >= 2.30.0  | >= 0.391.0                 |\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [twitter]: https://twitter.com/heyiamfloyd\n"
   },
   "repository": {
     "type": "git",
@@ -34025,7 +34025,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/marketplace.ts",
-          "line": 224
+          "line": 266
         },
         "parameters": [
           {
@@ -34045,12 +34045,13 @@
       "methods": [
         {
           "docs": {
+            "remarks": "https://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Filters access by the type of the agreement."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 196
+            "line": 234
           },
           "name": "ifAgreementType",
           "parameters": [
@@ -34105,12 +34106,13 @@
         },
         {
           "docs": {
+            "remarks": "https://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Filters access by the party type of the agreement."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 206
+            "line": 246
           },
           "name": "ifPartyType",
           "parameters": [
@@ -34165,13 +34167,13 @@
         },
         {
           "docs": {
-            "remarks": "Note: This condition key only applies to the RedHat console, and using it will not allow access to products in AWS Marketplace.",
+            "remarks": "Note: This condition key only applies to the RedHat console, and using it will not restrict access to products in AWS Marketplace\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
-            "summary": "Filters access to AWS Marketplace RedHat OpenShift products in the RedHat console, based on the ProductID of the product."
+            "summary": "Filters access by product id for AWS Marketplace RedHat OpenShift products in the RedHat console."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 216
+            "line": 258
           },
           "name": "ifProductId",
           "parameters": [
@@ -34226,7 +34228,7 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to approve an incoming subscription request (for providers who provide products that require subscription verification)."
           },
@@ -34243,14 +34245,48 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
-            "summary": "Grants permission to users to cancel pending subscription requests for products that require subscription verification."
+            "summary": "Grants permission to users to accept their agreement requests. Note that this action is not applicable to Marketplace purchases."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
             "line": 31
           },
+          "name": "toAcceptAgreementRequest",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.AwsMarketplace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
+            "stability": "experimental",
+            "summary": "Grants permission to users to cancel their agreements. Note that this action is not applicable to Marketplace purchases."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/marketplace.ts",
+            "line": 42
+          },
+          "name": "toCancelAgreement",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.AwsMarketplace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
+            "stability": "experimental",
+            "summary": "Grants permission to users to cancel pending subscription requests for products that require subscription verification."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/marketplace.ts",
+            "line": 53
+          },
           "name": "toCancelAgreementRequest",
           "returns": {
             "type": {
@@ -34260,13 +34296,30 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
+            "stability": "experimental",
+            "summary": "Grants permission to users to create an agreement request. Note that this action is not applicable to Marketplace purchases."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/marketplace.ts",
+            "line": 64
+          },
+          "name": "toCreateAgreementRequest",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.AwsMarketplace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to describe the metadata about the agreement."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 42
+            "line": 75
           },
           "name": "toDescribeAgreement",
           "returns": {
@@ -34277,13 +34330,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to view the details of their incoming subscription requests (for providers who provide products that require subscription verification)."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 53
+            "line": 86
           },
           "name": "toGetAgreementApprovalRequest",
           "returns": {
@@ -34294,13 +34347,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to view the details of their subscription requests for data products that require subscription verification."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 64
+            "line": 97
           },
           "name": "toGetAgreementRequest",
           "returns": {
@@ -34311,13 +34364,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to get a list of terms for an agreement."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 75
+            "line": 108
           },
           "name": "toGetAgreementTerms",
           "returns": {
@@ -34328,13 +34381,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to list their incoming subscription requests (for providers who provide products that require subscription verification)."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 86
+            "line": 119
           },
           "name": "toListAgreementApprovalRequests",
           "returns": {
@@ -34345,13 +34398,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to list their subscription requests for products that require subscription verification."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 97
+            "line": 130
           },
           "name": "toListAgreementRequests",
           "returns": {
@@ -34362,13 +34415,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to decline an incoming subscription requests (for providers who provide products that require subscription verification)."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 108
+            "line": 141
           },
           "name": "toRejectAgreementApprovalRequest",
           "returns": {
@@ -34379,13 +34432,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to search their agreements."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 119
+            "line": 152
           },
           "name": "toSearchAgreements",
           "returns": {
@@ -34396,13 +34449,13 @@
         },
         {
           "docs": {
-            "remarks": "Includes the ability to send a subscription request for products that require subscription verification. Includes the ability to enable auto-renewal for an existing subscription\n\nAccess Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Includes the ability to send a subscription request for products that require subscription verification. Includes the ability to enable auto-renewal for an existing subscription\n\nAccess Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to subscribe to AWS Marketplace products."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 130
+            "line": 163
           },
           "name": "toSubscribe",
           "returns": {
@@ -34413,13 +34466,13 @@
         },
         {
           "docs": {
-            "remarks": "Includes the ability to disable auto-renewal for an existing subscription\n\nAccess Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Includes the ability to disable auto-renewal for an existing subscription\n\nAccess Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to remove subscriptions to AWS Marketplace products."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 141
+            "line": 174
           },
           "name": "toUnsubscribe",
           "returns": {
@@ -34430,13 +34483,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to make changes to an incoming subscription request, including the ability to delete the prospective subscriber's information (for providers who provide products that require subscription verification)."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 152
+            "line": 185
           },
           "name": "toUpdateAgreementApprovalRequest",
           "returns": {
@@ -34447,13 +34500,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to see their account's subscriptions."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 163
+            "line": 196
           },
           "name": "toViewSubscriptions",
           "returns": {
@@ -34471,7 +34524,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 167
+            "line": 200
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -102481,7 +102534,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/elasticblockstore.ts",
-          "line": 188
+          "line": 194
         },
         "parameters": [
           {
@@ -102501,13 +102554,13 @@
       "methods": [
         {
           "docs": {
-            "remarks": "Applies to actions:\n- .toStartSnapshot()\n\nApplies to resource types:\n- snapshot",
+            "remarks": "https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonelasticblockstore.html#amazonelasticblockstore-policy-keys\n\nApplies to actions:\n- .toStartSnapshot()\n\nApplies to resource types:\n- snapshot",
             "stability": "experimental",
             "summary": "Filters access by the description of the snapshot being created."
           },
           "locationInModule": {
             "filename": "lib/generated/elasticblockstore.ts",
-            "line": 148
+            "line": 150
           },
           "name": "ifDescription",
           "parameters": [
@@ -102562,13 +102615,13 @@
         },
         {
           "docs": {
-            "remarks": "Applies to actions:\n- .toStartSnapshot()\n\nApplies to resource types:\n- snapshot",
+            "remarks": "https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonelasticblockstore.html#amazonelasticblockstore-policy-keys\n\nApplies to actions:\n- .toStartSnapshot()\n\nApplies to resource types:\n- snapshot",
             "stability": "experimental",
             "summary": "Filters access by the ID of the parent snapshot."
           },
           "locationInModule": {
             "filename": "lib/generated/elasticblockstore.ts",
-            "line": 164
+            "line": 168
           },
           "name": "ifParentSnapshot",
           "parameters": [
@@ -102623,13 +102676,13 @@
         },
         {
           "docs": {
-            "remarks": "Applies to actions:\n- .toStartSnapshot()\n\nApplies to resource types:\n- snapshot",
+            "remarks": "https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonelasticblockstore.html#amazonelasticblockstore-policy-keys\n\nApplies to actions:\n- .toStartSnapshot()\n\nApplies to resource types:\n- snapshot",
             "stability": "experimental",
             "summary": "Filters access by the size of the volume for the snapshot being created, in GiB."
           },
           "locationInModule": {
             "filename": "lib/generated/elasticblockstore.ts",
-            "line": 180
+            "line": 186
           },
           "name": "ifVolumeSize",
           "parameters": [
@@ -102684,7 +102737,7 @@
         },
         {
           "docs": {
-            "remarks": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policy-structure.html#EC2_ARN_Format",
+            "remarks": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSSnapshots.html",
             "stability": "experimental",
             "summary": "Adds a resource of type snapshot to the statement."
           },
@@ -123254,7 +123307,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/messagedeliveryservice.ts",
-          "line": 96
+          "line": 118
         },
         "parameters": [
           {
@@ -123274,196 +123327,257 @@
       "methods": [
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
-            "stability": "experimental",
-            "summary": "Grants permission to acknowledge a message, ensuring it will not be delivered again."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 20
-          },
-          "name": "toAcknowledgeMessage",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Ec2messages"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
-            "stability": "experimental",
-            "summary": "Grants permission to delete a message."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 31
-          },
-          "name": "toDeleteMessage",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Ec2messages"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
-            "stability": "experimental",
-            "summary": "Grants permission to fail a message, signifying the message could not be processed successfully, ensuring it cannot be replied to or delivered again."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 42
-          },
-          "name": "toFailMessage",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Ec2messages"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
-            "stability": "experimental",
-            "summary": "Grants permission to route traffic to the correct endpoint based on the given destination for the messages."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 53
-          },
-          "name": "toGetEndpoint",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Ec2messages"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
-            "stability": "experimental",
-            "summary": "Grants permission to deliver messages to clients/instances using long polling."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 64
-          },
-          "name": "toGetMessages",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Ec2messages"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
-            "stability": "experimental",
-            "summary": "Grants permission to send replies from clients/instances to upstream service."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 75
-          },
-          "name": "toSendReply",
-          "returns": {
-            "type": {
-              "fqn": "cdk-iam-floyd.Ec2messages"
-            }
-          }
-        }
-      ],
-      "name": "Ec2messages",
-      "properties": [
-        {
-          "docs": {
-            "stability": "experimental"
-          },
-          "locationInModule": {
-            "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 79
-          },
-          "name": "accessLevelList",
-          "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
-          "protected": true,
-          "type": {
-            "fqn": "cdk-iam-floyd.AccessLevelList"
-          }
-        },
-        {
-          "docs": {
+            "remarks": "This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-policy-keys\n\nApplies to actions:\n- .toGetMessages()\n- .toSendReply()",
             "stability": "experimental",
-            "summary": "Holds the prefix of the service actions, e.g. `ec2`."
+            "summary": "Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made."
           },
           "locationInModule": {
             "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 11
-          },
-          "name": "servicePrefix",
-          "overrides": "cdk-iam-floyd.PolicyStatementBase",
-          "type": {
-            "primitive": "string"
-          }
-        }
-      ],
-      "symbolId": "lib/generated/messagedeliveryservice:Ec2messages"
-    },
-    "cdk-iam-floyd.Ecr": {
-      "assembly": "cdk-iam-floyd",
-      "base": "cdk-iam-floyd.PolicyStatement",
-      "docs": {
-        "stability": "experimental",
-        "summary": "Statement provider for service [ecr](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html)."
-      },
-      "fqn": "cdk-iam-floyd.Ecr",
-      "initializer": {
-        "docs": {
-          "stability": "experimental",
-          "summary": "Statement provider for service [ecr](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html)."
-        },
-        "locationInModule": {
-          "filename": "lib/generated/elasticcontainerregistry.ts",
-          "line": 596
-        },
-        "parameters": [
-          {
-            "name": "props",
-            "optional": true,
-            "type": {
-              "fqn": "aws-cdk-lib.aws_iam.PolicyStatementProps"
-            }
-          }
-        ]
-      },
-      "kind": "class",
-      "locationInModule": {
-        "filename": "lib/generated/elasticcontainerregistry.ts",
-        "line": 10
-      },
-      "methods": [
-        {
-          "docs": {
-            "remarks": "https://docs.aws.amazon.com/AmazonECR/latest/userguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys\n\nApplies to resource types:\n- repository",
-            "stability": "experimental",
-            "summary": "Filters access by tag-value associated with the resource."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/elasticcontainerregistry.ts",
-            "line": 588
+            "line": 110
           },
-          "name": "ifResourceTag",
+          "name": "ifSsmSourceInstanceARN",
           "parameters": [
-            {
-              "docs": {
-                "summary": "The tag key to check."
-              },
-              "name": "tagKey",
-              "type": {
-                "primitive": "string"
-              }
-            },
+            {
+              "docs": {
+                "summary": "The value(s) to check."
+              },
+              "name": "value",
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+              },
+              "name": "operator",
+              "optional": true,
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "cdk-iam-floyd.Operator"
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Ec2messages"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
+            "stability": "experimental",
+            "summary": "Grants permission to acknowledge a message, ensuring it will not be delivered again."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/messagedeliveryservice.ts",
+            "line": 20
+          },
+          "name": "toAcknowledgeMessage",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Ec2messages"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
+            "stability": "experimental",
+            "summary": "Grants permission to delete a message."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/messagedeliveryservice.ts",
+            "line": 31
+          },
+          "name": "toDeleteMessage",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Ec2messages"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
+            "stability": "experimental",
+            "summary": "Grants permission to fail a message, signifying the message could not be processed successfully, ensuring it cannot be replied to or delivered again."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/messagedeliveryservice.ts",
+            "line": 42
+          },
+          "name": "toFailMessage",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Ec2messages"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
+            "stability": "experimental",
+            "summary": "Grants permission to route traffic to the correct endpoint based on the given destination for the messages."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/messagedeliveryservice.ts",
+            "line": 53
+          },
+          "name": "toGetEndpoint",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Ec2messages"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nPossible conditions:\n- .ifSsmSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
+            "stability": "experimental",
+            "summary": "Grants permission to deliver messages to clients/instances using long polling."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/messagedeliveryservice.ts",
+            "line": 67
+          },
+          "name": "toGetMessages",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Ec2messages"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSsmSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
+            "stability": "experimental",
+            "summary": "Grants permission to send replies from clients/instances to upstream service."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/messagedeliveryservice.ts",
+            "line": 81
+          },
+          "name": "toSendReply",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Ec2messages"
+            }
+          }
+        }
+      ],
+      "name": "Ec2messages",
+      "properties": [
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "locationInModule": {
+            "filename": "lib/generated/messagedeliveryservice.ts",
+            "line": 85
+          },
+          "name": "accessLevelList",
+          "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
+          "protected": true,
+          "type": {
+            "fqn": "cdk-iam-floyd.AccessLevelList"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Holds the prefix of the service actions, e.g. `ec2`."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/messagedeliveryservice.ts",
+            "line": 11
+          },
+          "name": "servicePrefix",
+          "overrides": "cdk-iam-floyd.PolicyStatementBase",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "lib/generated/messagedeliveryservice:Ec2messages"
+    },
+    "cdk-iam-floyd.Ecr": {
+      "assembly": "cdk-iam-floyd",
+      "base": "cdk-iam-floyd.PolicyStatement",
+      "docs": {
+        "stability": "experimental",
+        "summary": "Statement provider for service [ecr](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html)."
+      },
+      "fqn": "cdk-iam-floyd.Ecr",
+      "initializer": {
+        "docs": {
+          "stability": "experimental",
+          "summary": "Statement provider for service [ecr](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html)."
+        },
+        "locationInModule": {
+          "filename": "lib/generated/elasticcontainerregistry.ts",
+          "line": 596
+        },
+        "parameters": [
+          {
+            "name": "props",
+            "optional": true,
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.PolicyStatementProps"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "lib/generated/elasticcontainerregistry.ts",
+        "line": 10
+      },
+      "methods": [
+        {
+          "docs": {
+            "remarks": "https://docs.aws.amazon.com/AmazonECR/latest/userguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys\n\nApplies to resource types:\n- repository",
+            "stability": "experimental",
+            "summary": "Filters access by tag-value associated with the resource."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/elasticcontainerregistry.ts",
+            "line": 588
+          },
+          "name": "ifResourceTag",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The tag key to check."
+              },
+              "name": "tagKey",
+              "type": {
+                "primitive": "string"
+              }
+            },
             {
               "docs": {
                 "summary": "The value(s) to check."
@@ -175423,16 +175537,16 @@
       "base": "cdk-iam-floyd.PolicyStatement",
       "docs": {
         "stability": "experimental",
-        "summary": "Statement provider for service [identity-sync](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsidentitysynchronizationservice.html)."
+        "summary": "Statement provider for service [identity-sync](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsidentitysync.html)."
       },
       "fqn": "cdk-iam-floyd.IdentitySync",
       "initializer": {
         "docs": {
           "stability": "experimental",
-          "summary": "Statement provider for service [identity-sync](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsidentitysynchronizationservice.html)."
+          "summary": "Statement provider for service [identity-sync](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsidentitysync.html)."
         },
         "locationInModule": {
-          "filename": "lib/generated/identitysynchronizationservice.ts",
+          "filename": "lib/generated/identitysync.ts",
           "line": 205
         },
         "parameters": [
@@ -175447,7 +175561,7 @@
       },
       "kind": "class",
       "locationInModule": {
-        "filename": "lib/generated/identitysynchronizationservice.ts",
+        "filename": "lib/generated/identitysync.ts",
         "line": 10
       },
       "methods": [
@@ -175458,7 +175572,7 @@
             "summary": "Adds a resource of type SyncProfileResource to the statement."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 182
           },
           "name": "onSyncProfileResource",
@@ -175519,7 +175633,7 @@
             "summary": "Adds a resource of type SyncTargetResource to the statement."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 197
           },
           "name": "onSyncTargetResource",
@@ -175589,7 +175703,7 @@
             "summary": "Grants permission to create a sync filter on the sync profile."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 20
           },
           "name": "toCreateSyncFilter",
@@ -175603,10 +175717,10 @@
           "docs": {
             "remarks": "Access Level: Write\n\nDependent actions:\n- ds:AuthorizeApplication\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to create a sync profile for the source."
+            "summary": "Grants permission to create a sync profile for the identity source."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 34
           },
           "name": "toCreateSyncProfile",
@@ -175620,10 +175734,10 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to create a sync target for the source."
+            "summary": "Grants permission to create a sync target for the identity source."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 45
           },
           "name": "toCreateSyncTarget",
@@ -175637,10 +175751,10 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to delete a sync filter on the sync profile."
+            "summary": "Grants permission to delete a sync filter from the sync profile."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 56
           },
           "name": "toDeleteSyncFilter",
@@ -175654,10 +175768,10 @@
           "docs": {
             "remarks": "Access Level: Write\n\nDependent actions:\n- ds:UnauthorizeApplication\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to delete a sync profile on the source."
+            "summary": "Grants permission to delete a sync profile from the source."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 70
           },
           "name": "toDeleteSyncProfile",
@@ -175671,10 +175785,10 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to delete a sync target on the source."
+            "summary": "Grants permission to delete a sync target from the source."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 81
           },
           "name": "toDeleteSyncTarget",
@@ -175688,10 +175802,10 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to retrieve a sync profile using sync profile name."
+            "summary": "Grants permission to retrieve a sync profile by using a sync profile name."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 92
           },
           "name": "toGetSyncProfile",
@@ -175705,10 +175819,10 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to retrieve a sync target on the sync profile."
+            "summary": "Grants permission to retrieve a sync target from the sync profile."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 103
           },
           "name": "toGetSyncTarget",
@@ -175722,10 +175836,10 @@
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to list the sync filters on the sync profile."
+            "summary": "Grants permission to list the sync filters from the sync profile."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 114
           },
           "name": "toListSyncFilters",
@@ -175739,10 +175853,10 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to start a synchronization process or to restart a synchronization that was previously stopped."
+            "summary": "Grants permission to start a sync process or to resume a sync process that was previously paused."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 125
           },
           "name": "toStartSync",
@@ -175756,10 +175870,10 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to stop any planned synchronizations in the synchronization schedule from starting."
+            "summary": "Grants permission to stop any planned sync process in the sync schedule from starting."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 136
           },
           "name": "toStopSync",
@@ -175776,7 +175890,7 @@
             "summary": "Grants permission to update a sync target on the sync profile."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 147
           },
           "name": "toUpdateSyncTarget",
@@ -175794,7 +175908,7 @@
             "stability": "experimental"
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 151
           },
           "name": "accessLevelList",
@@ -175810,7 +175924,7 @@
             "summary": "Holds the prefix of the service actions, e.g. `ec2`."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 11
           },
           "name": "servicePrefix",
@@ -175820,7 +175934,7 @@
           }
         }
       ],
-      "symbolId": "lib/generated/identitysynchronizationservice:IdentitySync"
+      "symbolId": "lib/generated/identitysync:IdentitySync"
     },
     "cdk-iam-floyd.Identitystore": {
       "assembly": "cdk-iam-floyd",
@@ -206158,7 +206272,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/kinesisvideostreams.ts",
-          "line": 446
+          "line": 506
         },
         "parameters": [
           {
@@ -206184,7 +206298,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 438
+            "line": 498
           },
           "name": "onChannel",
           "parameters": [
@@ -206254,7 +206368,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 420
+            "line": 480
           },
           "name": "onStream",
           "parameters": [
@@ -206418,6 +206532,40 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/kinesisvideostreams/latest/dg/API_DescribeImageGenerationConfiguration.html",
+            "stability": "experimental",
+            "summary": "Grants permission to describe the image generation configuration of your Kinesis video stream."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/kinesisvideostreams.ts",
+            "line": 94
+          },
+          "name": "toDescribeImageGenerationConfiguration",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Kinesisvideo"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/kinesisvideostreams/latest/dg/API_DescribeNotificationConfiguration.html",
+            "stability": "experimental",
+            "summary": "Grants permission to describe the notification configuration of your Kinesis video stream."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/kinesisvideostreams.ts",
+            "line": 105
+          },
+          "name": "toDescribeNotificationConfiguration",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Kinesisvideo"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/kinesisvideostreams/latest/dg/API_DescribeSignalingChannel.html",
@@ -206426,7 +206574,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 94
+            "line": 116
           },
           "name": "toDescribeSignalingChannel",
           "returns": {
@@ -206443,7 +206591,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 105
+            "line": 127
           },
           "name": "toDescribeStream",
           "returns": {
@@ -206460,7 +206608,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 116
+            "line": 138
           },
           "name": "toGetClip",
           "returns": {
@@ -206477,7 +206625,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 127
+            "line": 149
           },
           "name": "toGetDASHStreamingSessionURL",
           "returns": {
@@ -206494,7 +206642,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 138
+            "line": 160
           },
           "name": "toGetDataEndpoint",
           "returns": {
@@ -206511,7 +206659,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 149
+            "line": 171
           },
           "name": "toGetHLSStreamingSessionURL",
           "returns": {
@@ -206528,7 +206676,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 160
+            "line": 182
           },
           "name": "toGetIceServerConfig",
           "returns": {
@@ -206537,6 +206685,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/kinesisvideostreams/latest/dg/API_GetImages.html",
+            "stability": "experimental",
+            "summary": "Grants permission to get generated images from your Kinesis video stream."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/kinesisvideostreams.ts",
+            "line": 193
+          },
+          "name": "toGetImages",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Kinesisvideo"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/kinesisvideostreams/latest/dg/API_GetMedia.html",
@@ -206545,7 +206710,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 171
+            "line": 204
           },
           "name": "toGetMedia",
           "returns": {
@@ -206562,7 +206727,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 182
+            "line": 215
           },
           "name": "toGetMediaForFragmentList",
           "returns": {
@@ -206579,7 +206744,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 193
+            "line": 226
           },
           "name": "toGetSignalingChannelEndpoint",
           "returns": {
@@ -206596,7 +206761,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 204
+            "line": 237
           },
           "name": "toListFragments",
           "returns": {
@@ -206613,7 +206778,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 215
+            "line": 248
           },
           "name": "toListSignalingChannels",
           "returns": {
@@ -206630,7 +206795,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 226
+            "line": 259
           },
           "name": "toListStreams",
           "returns": {
@@ -206647,7 +206812,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 237
+            "line": 270
           },
           "name": "toListTagsForResource",
           "returns": {
@@ -206664,7 +206829,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 248
+            "line": 281
           },
           "name": "toListTagsForStream",
           "returns": {
@@ -206681,7 +206846,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 259
+            "line": 292
           },
           "name": "toPutMedia",
           "returns": {
@@ -206698,7 +206863,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 270
+            "line": 303
           },
           "name": "toSendAlexaOfferToMaster",
           "returns": {
@@ -206715,7 +206880,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 285
+            "line": 318
           },
           "name": "toTagResource",
           "returns": {
@@ -206732,7 +206897,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 300
+            "line": 333
           },
           "name": "toTagStream",
           "returns": {
@@ -206749,7 +206914,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 314
+            "line": 347
           },
           "name": "toUntagResource",
           "returns": {
@@ -206766,7 +206931,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 328
+            "line": 361
           },
           "name": "toUntagStream",
           "returns": {
@@ -206783,7 +206948,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 339
+            "line": 372
           },
           "name": "toUpdateDataRetention",
           "returns": {
@@ -206792,6 +206957,40 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/kinesisvideostreams/latest/dg/API_UpdateImageGenerationConfiguration.html",
+            "stability": "experimental",
+            "summary": "Grants permission to update the image generation configuration of your Kinesis video stream."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/kinesisvideostreams.ts",
+            "line": 383
+          },
+          "name": "toUpdateImageGenerationConfiguration",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Kinesisvideo"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/kinesisvideostreams/latest/dg/API_UpdateNotificationConfiguration.html",
+            "stability": "experimental",
+            "summary": "Grants permission to update the notification configuration of your Kinesis video stream."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/kinesisvideostreams.ts",
+            "line": 394
+          },
+          "name": "toUpdateNotificationConfiguration",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Kinesisvideo"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/kinesisvideostreams/latest/dg/API_UpdateSignalingChannel.html",
@@ -206800,7 +206999,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 350
+            "line": 405
           },
           "name": "toUpdateSignalingChannel",
           "returns": {
@@ -206817,7 +207016,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 361
+            "line": 416
           },
           "name": "toUpdateStream",
           "returns": {
@@ -206835,7 +207034,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 365
+            "line": 420
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -210592,7 +210791,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/lambda.ts",
-          "line": 1119
+          "line": 1137
         },
         "parameters": [
           {
@@ -210618,7 +210817,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 986
+            "line": 1004
           },
           "name": "ifCodeSigningConfigArn",
           "parameters": [
@@ -210679,7 +210878,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 1009
+            "line": 1027
           },
           "name": "ifFunctionArn",
           "parameters": [
@@ -210740,7 +210939,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 1031
+            "line": 1049
           },
           "name": "ifFunctionUrlAuthType",
           "parameters": [
@@ -210801,7 +211000,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 1047
+            "line": 1065
           },
           "name": "ifLayer",
           "parameters": [
@@ -210862,7 +211061,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 1063
+            "line": 1081
           },
           "name": "ifPrincipal",
           "parameters": [
@@ -210923,7 +211122,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 1079
+            "line": 1097
           },
           "name": "ifSecurityGroupIds",
           "parameters": [
@@ -210984,7 +211183,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 1095
+            "line": 1113
           },
           "name": "ifSubnetIds",
           "parameters": [
@@ -211045,7 +211244,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 1111
+            "line": 1129
           },
           "name": "ifVpcIds",
           "parameters": [
@@ -211106,7 +211305,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 883
+            "line": 892
           },
           "name": "onCodeSigningConfig",
           "parameters": [
@@ -211167,7 +211366,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 897
+            "line": 906
           },
           "name": "onEventSourceMapping",
           "parameters": [
@@ -211228,7 +211427,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 911
+            "line": 923
           },
           "name": "onFunction",
           "parameters": [
@@ -211265,7 +211464,7 @@
             },
             {
               "docs": {
-                "remarks": "defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.",
+                "remarks": "defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.\n\nPossible conditions:\n- .ifAwsResourceTag()",
                 "summary": "- Partition of the AWS account [aws, aws-cn, aws-us-gov];"
               },
               "name": "partition",
@@ -211289,7 +211488,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 926
+            "line": 941
           },
           "name": "onFunctionAlias",
           "parameters": [
@@ -211335,7 +211534,7 @@
             },
             {
               "docs": {
-                "remarks": "defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.",
+                "remarks": "defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.\n\nPossible conditions:\n- .ifAwsResourceTag()",
                 "summary": "- Partition of the AWS account [aws, aws-cn, aws-us-gov];"
               },
               "name": "partition",
@@ -211359,7 +211558,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 941
+            "line": 959
           },
           "name": "onFunctionVersion",
           "parameters": [
@@ -211405,7 +211604,7 @@
             },
             {
               "docs": {
-                "remarks": "defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.",
+                "remarks": "defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.\n\nPossible conditions:\n- .ifAwsResourceTag()",
                 "summary": "- Partition of the AWS account [aws, aws-cn, aws-us-gov];"
               },
               "name": "partition",
@@ -211429,7 +211628,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 955
+            "line": 973
           },
           "name": "onLayer",
           "parameters": [
@@ -211490,7 +211689,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 970
+            "line": 988
           },
           "name": "onLayerVersion",
           "parameters": [
@@ -211639,13 +211838,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifLayer()\n- .ifVpcIds()\n- .ifSubnetIds()\n- .ifSecurityGroupIds()\n- .ifCodeSigningConfigArn()\n\nhttps://docs.aws.amazon.com/lambda/latest/dg/API_CreateFunction.html",
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifLayer()\n- .ifVpcIds()\n- .ifSubnetIds()\n- .ifSecurityGroupIds()\n- .ifCodeSigningConfigArn()\n- .ifAwsRequestTag()\n- .ifAwsTagKeys()\n\nhttps://docs.aws.amazon.com/lambda/latest/dg/API_CreateFunction.html",
             "stability": "experimental",
             "summary": "Grants permission to create an AWS Lambda function."
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 89
+            "line": 91
           },
           "name": "toCreateFunction",
           "returns": {
@@ -211662,7 +211861,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 104
+            "line": 106
           },
           "name": "toCreateFunctionUrlConfig",
           "returns": {
@@ -211679,7 +211878,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 115
+            "line": 117
           },
           "name": "toDeleteAlias",
           "returns": {
@@ -211696,7 +211895,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 126
+            "line": 128
           },
           "name": "toDeleteCodeSigningConfig",
           "returns": {
@@ -211713,7 +211912,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 140
+            "line": 142
           },
           "name": "toDeleteEventSourceMapping",
           "returns": {
@@ -211730,7 +211929,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 151
+            "line": 153
           },
           "name": "toDeleteFunction",
           "returns": {
@@ -211747,7 +211946,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 162
+            "line": 164
           },
           "name": "toDeleteFunctionCodeSigningConfig",
           "returns": {
@@ -211764,7 +211963,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 173
+            "line": 175
           },
           "name": "toDeleteFunctionConcurrency",
           "returns": {
@@ -211781,7 +211980,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 184
+            "line": 186
           },
           "name": "toDeleteFunctionEventInvokeConfig",
           "returns": {
@@ -211798,7 +211997,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 199
+            "line": 201
           },
           "name": "toDeleteFunctionUrlConfig",
           "returns": {
@@ -211815,7 +212014,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 210
+            "line": 212
           },
           "name": "toDeleteLayerVersion",
           "returns": {
@@ -211832,7 +212031,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 221
+            "line": 223
           },
           "name": "toDeleteProvisionedConcurrencyConfig",
           "returns": {
@@ -211849,7 +212048,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 230
+            "line": 232
           },
           "name": "toDisableReplication",
           "returns": {
@@ -211866,7 +212065,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 239
+            "line": 241
           },
           "name": "toEnableReplication",
           "returns": {
@@ -211883,7 +212082,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 250
+            "line": 252
           },
           "name": "toGetAccountSettings",
           "returns": {
@@ -211900,7 +212099,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 261
+            "line": 263
           },
           "name": "toGetAlias",
           "returns": {
@@ -211917,7 +212116,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 272
+            "line": 274
           },
           "name": "toGetCodeSigningConfig",
           "returns": {
@@ -211934,7 +212133,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 286
+            "line": 288
           },
           "name": "toGetEventSourceMapping",
           "returns": {
@@ -211951,7 +212150,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 297
+            "line": 299
           },
           "name": "toGetFunction",
           "returns": {
@@ -211968,7 +212167,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 308
+            "line": 310
           },
           "name": "toGetFunctionCodeSigningConfig",
           "returns": {
@@ -211985,7 +212184,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 319
+            "line": 321
           },
           "name": "toGetFunctionConcurrency",
           "returns": {
@@ -212002,7 +212201,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 330
+            "line": 332
           },
           "name": "toGetFunctionConfiguration",
           "returns": {
@@ -212019,7 +212218,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 341
+            "line": 343
           },
           "name": "toGetFunctionEventInvokeConfig",
           "returns": {
@@ -212036,7 +212235,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 356
+            "line": 358
           },
           "name": "toGetFunctionUrlConfig",
           "returns": {
@@ -212053,7 +212252,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 367
+            "line": 369
           },
           "name": "toGetLayerVersion",
           "returns": {
@@ -212070,7 +212269,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 378
+            "line": 380
           },
           "name": "toGetLayerVersionPolicy",
           "returns": {
@@ -212087,7 +212286,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 389
+            "line": 391
           },
           "name": "toGetPolicy",
           "returns": {
@@ -212104,7 +212303,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 400
+            "line": 402
           },
           "name": "toGetProvisionedConcurrencyConfig",
           "returns": {
@@ -212121,7 +212320,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 411
+            "line": 413
           },
           "name": "toInvokeAsync",
           "returns": {
@@ -212138,7 +212337,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 422
+            "line": 424
           },
           "name": "toInvokeFunction",
           "returns": {
@@ -212155,7 +212354,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 437
+            "line": 439
           },
           "name": "toInvokeFunctionUrl",
           "returns": {
@@ -212172,7 +212371,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 448
+            "line": 450
           },
           "name": "toListAliases",
           "returns": {
@@ -212189,7 +212388,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 459
+            "line": 461
           },
           "name": "toListCodeSigningConfigs",
           "returns": {
@@ -212206,7 +212405,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 470
+            "line": 472
           },
           "name": "toListEventSourceMappings",
           "returns": {
@@ -212223,7 +212422,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 481
+            "line": 483
           },
           "name": "toListFunctionEventInvokeConfigs",
           "returns": {
@@ -212240,7 +212439,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 506
+            "line": 508
           },
           "name": "toListFunctions",
           "returns": {
@@ -212257,7 +212456,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 517
+            "line": 519
           },
           "name": "toListFunctionsByCodeSigningConfig",
           "returns": {
@@ -212274,7 +212473,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 495
+            "line": 497
           },
           "name": "toListFunctionUrlConfigs",
           "returns": {
@@ -212291,7 +212490,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 539
+            "line": 541
           },
           "name": "toListLayers",
           "returns": {
@@ -212308,7 +212507,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 528
+            "line": 530
           },
           "name": "toListLayerVersions",
           "returns": {
@@ -212325,7 +212524,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 550
+            "line": 552
           },
           "name": "toListProvisionedConcurrencyConfigs",
           "returns": {
@@ -212342,7 +212541,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 561
+            "line": 563
           },
           "name": "toListTags",
           "returns": {
@@ -212359,7 +212558,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 572
+            "line": 574
           },
           "name": "toListVersionsByFunction",
           "returns": {
@@ -212376,7 +212575,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 583
+            "line": 585
           },
           "name": "toPublishLayerVersion",
           "returns": {
@@ -212393,7 +212592,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 594
+            "line": 596
           },
           "name": "toPublishVersion",
           "returns": {
@@ -212410,7 +212609,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 608
+            "line": 610
           },
           "name": "toPutFunctionCodeSigningConfig",
           "returns": {
@@ -212427,7 +212626,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 619
+            "line": 621
           },
           "name": "toPutFunctionConcurrency",
           "returns": {
@@ -212444,7 +212643,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 630
+            "line": 632
           },
           "name": "toPutFunctionEventInvokeConfig",
           "returns": {
@@ -212461,7 +212660,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 641
+            "line": 643
           },
           "name": "toPutProvisionedConcurrencyConfig",
           "returns": {
@@ -212478,7 +212677,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 652
+            "line": 654
           },
           "name": "toRemoveLayerVersionPermission",
           "returns": {
@@ -212495,7 +212694,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 667
+            "line": 669
           },
           "name": "toRemovePermission",
           "returns": {
@@ -212506,13 +212705,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Tagging\n\nhttps://docs.aws.amazon.com/lambda/latest/dg/API_TagResources.html",
+            "remarks": "Access Level: Tagging\n\nPossible conditions:\n- .ifAwsRequestTag()\n- .ifAwsTagKeys()\n\nhttps://docs.aws.amazon.com/lambda/latest/dg/API_TagResources.html",
             "stability": "experimental",
             "summary": "Grants permission to add tags to an AWS Lambda function."
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 678
+            "line": 684
           },
           "name": "toTagResource",
           "returns": {
@@ -212523,13 +212722,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Tagging\n\nhttps://docs.aws.amazon.com/lambda/latest/dg/API_UntagResource.html",
+            "remarks": "Access Level: Tagging\n\nPossible conditions:\n- .ifAwsTagKeys()\n\nhttps://docs.aws.amazon.com/lambda/latest/dg/API_UntagResource.html",
             "stability": "experimental",
             "summary": "Grants permission to remove tags from an AWS Lambda function."
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 689
+            "line": 698
           },
           "name": "toUntagResource",
           "returns": {
@@ -212546,7 +212745,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 700
+            "line": 709
           },
           "name": "toUpdateAlias",
           "returns": {
@@ -212563,7 +212762,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 711
+            "line": 720
           },
           "name": "toUpdateCodeSigningConfig",
           "returns": {
@@ -212580,7 +212779,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 725
+            "line": 734
           },
           "name": "toUpdateEventSourceMapping",
           "returns": {
@@ -212597,7 +212796,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 736
+            "line": 745
           },
           "name": "toUpdateFunctionCode",
           "returns": {
@@ -212614,7 +212813,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 747
+            "line": 756
           },
           "name": "toUpdateFunctionCodeSigningConfig",
           "returns": {
@@ -212631,7 +212830,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 764
+            "line": 773
           },
           "name": "toUpdateFunctionConfiguration",
           "returns": {
@@ -212648,7 +212847,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 775
+            "line": 784
           },
           "name": "toUpdateFunctionEventInvokeConfig",
           "returns": {
@@ -212665,7 +212864,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 790
+            "line": 799
           },
           "name": "toUpdateFunctionUrlConfig",
           "returns": {
@@ -212683,7 +212882,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 794
+            "line": 803
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -331065,7 +331264,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/sqlworkbench.ts",
-          "line": 615
+          "line": 627
         },
         "parameters": [
           {
@@ -331091,7 +331290,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
-            "line": 607
+            "line": 619
           },
           "name": "onChart",
           "parameters": [
@@ -331152,7 +331351,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
-            "line": 573
+            "line": 585
           },
           "name": "onConnection",
           "parameters": [
@@ -331213,7 +331412,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
-            "line": 590
+            "line": 602
           },
           "name": "onQuery",
           "parameters": [
@@ -331865,13 +332064,13 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/redshift/latest/mgmt/redshift-policy-resources.resource-permissions.html",
             "stability": "experimental",
-            "summary": "Grants permission to update account-wide export settings."
+            "summary": "Grants permission to update account-wide connection settings."
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
             "line": 425
           },
-          "name": "toUpdateAccountExportSettings",
+          "name": "toUpdateAccountConnectionSettings",
           "returns": {
             "type": {
               "fqn": "cdk-iam-floyd.Sqlworkbench"
@@ -331882,12 +332081,29 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/redshift/latest/mgmt/redshift-policy-resources.resource-permissions.html",
             "stability": "experimental",
-            "summary": "Grants permission to update general account-wide settings."
+            "summary": "Grants permission to update account-wide export settings."
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
             "line": 436
           },
+          "name": "toUpdateAccountExportSettings",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Sqlworkbench"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/redshift/latest/mgmt/redshift-policy-resources.resource-permissions.html",
+            "stability": "experimental",
+            "summary": "Grants permission to update account-wide general settings."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sqlworkbench.ts",
+            "line": 447
+          },
           "name": "toUpdateAccountGeneralSettings",
           "returns": {
             "type": {
@@ -331903,7 +332119,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
-            "line": 451
+            "line": 462
           },
           "name": "toUpdateChart",
           "returns": {
@@ -331920,7 +332136,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
-            "line": 466
+            "line": 477
           },
           "name": "toUpdateConnection",
           "returns": {
@@ -331937,7 +332153,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
-            "line": 477
+            "line": 488
           },
           "name": "toUpdateFileFolder",
           "returns": {
@@ -331954,7 +332170,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
-            "line": 488
+            "line": 499
           },
           "name": "toUpdateFolder",
           "returns": {
@@ -331971,7 +332187,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
-            "line": 503
+            "line": 514
           },
           "name": "toUpdateSavedQuery",
           "returns": {
@@ -331989,7 +332205,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
-            "line": 507
+            "line": 518
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -332450,7 +332666,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/systemsmanager.ts",
-          "line": 2266
+          "line": 2296
         },
         "parameters": [
           {
@@ -332476,7 +332692,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2149
+            "line": 2162
           },
           "name": "ifAutoApprove",
           "parameters": [
@@ -332537,7 +332753,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2167
+            "line": 2180
           },
           "name": "ifDocumentCategories",
           "parameters": [
@@ -332594,11 +332810,11 @@
           "docs": {
             "remarks": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions\n\nApplies to actions:\n- .toPutParameter()",
             "stability": "experimental",
-            "summary": "Controls whether Systems Manager parameters can be overwritten."
+            "summary": "Filters access by allowing Systems Manager parameters to be overwritten."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2182
+            "line": 2195
           },
           "name": "ifOverwrite",
           "parameters": [
@@ -332655,11 +332871,11 @@
           "docs": {
             "remarks": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions\n\nApplies to actions:\n- .toGetParametersByPath()",
             "stability": "experimental",
-            "summary": "Filters access to Systems Manager parameters created in a hierarchical structure."
+            "summary": "Filters access by allowing traversing hierarchical structure of the Systems Manager parameters."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2197
+            "line": 2210
           },
           "name": "ifRecursive",
           "parameters": [
@@ -332716,11 +332932,11 @@
           "docs": {
             "remarks": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions\n\nApplies to actions:\n- .toDeregisterManagedInstance()\n- .toGetConnectionStatus()\n- .toSendCommand()\n- .toStartSession()\n- .toUpdateManagedInstanceRole()\n\nApplies to resource types:\n- automation-execution\n- instance\n- maintenancewindow\n- managed-instance\n- opsmetadata\n- parameter\n- patchbaseline",
             "stability": "experimental",
-            "summary": "Filters access by based on a tag key-value pair assigned to the Systems Manager resource."
+            "summary": "Filters access by allowing access based on a tag key-value pair assigned to the Systems Manager resource."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2258
+            "line": 2288
           },
           "name": "ifResourceTag",
           "parameters": [
@@ -332790,7 +333006,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2211
+            "line": 2224
           },
           "name": "ifSessionDocumentAccessCheck",
           "parameters": [
@@ -332812,6 +333028,67 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-policy-keys\n\nApplies to actions:\n- .toUpdateAssociationStatus()\n- .toUpdateInstanceAssociationStatus()\n- .toUpdateInstanceInformation()",
+            "stability": "experimental",
+            "summary": "Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/systemsmanager.ts",
+            "line": 2241
+          },
+          "name": "ifSourceInstanceARN",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The value(s) to check."
+              },
+              "name": "value",
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+              },
+              "name": "operator",
+              "optional": true,
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "cdk-iam-floyd.Operator"
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Ssm"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions\n\nApplies to actions:\n- .toCreateResourceDataSync()\n- .toDeleteResourceDataSync()\n- .toListResourceDataSync()\n- .toUpdateResourceDataSync()",
@@ -332820,7 +333097,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2229
+            "line": 2259
           },
           "name": "ifSyncType",
           "parameters": [
@@ -332881,7 +333158,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1849
+            "line": 1858
           },
           "name": "onAssociation",
           "parameters": [
@@ -332942,7 +333219,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1882
+            "line": 1891
           },
           "name": "onAutomationDefinition",
           "parameters": [
@@ -333012,7 +333289,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1867
+            "line": 1876
           },
           "name": "onAutomationExecution",
           "parameters": [
@@ -333067,12 +333344,13 @@
         },
         {
           "docs": {
+            "remarks": "https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingBucket.html",
             "stability": "experimental",
             "summary": "Adds a resource of type bucket to the statement."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1892
+            "line": 1903
           },
           "name": "onBucket",
           "parameters": [
@@ -333111,7 +333389,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1910
+            "line": 1921
           },
           "name": "onDocument",
           "parameters": [
@@ -333166,12 +333444,13 @@
         },
         {
           "docs": {
+            "remarks": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policy-structure.html#EC2_ARN_Format",
             "stability": "experimental",
             "summary": "Adds a resource of type instance to the statement."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1926
+            "line": 1939
           },
           "name": "onInstance",
           "parameters": [
@@ -333232,7 +333511,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1944
+            "line": 1957
           },
           "name": "onMaintenancewindow",
           "parameters": [
@@ -333293,7 +333572,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1962
+            "line": 1975
           },
           "name": "onManagedInstance",
           "parameters": [
@@ -333354,7 +333633,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1976
+            "line": 1989
           },
           "name": "onManagedInstanceInventory",
           "parameters": [
@@ -333415,7 +333694,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1993
+            "line": 2006
           },
           "name": "onOpsitem",
           "parameters": [
@@ -333476,7 +333755,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2011
+            "line": 2024
           },
           "name": "onOpsmetadata",
           "parameters": [
@@ -333537,7 +333816,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2029
+            "line": 2042
           },
           "name": "onParameter",
           "parameters": [
@@ -333598,7 +333877,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2047
+            "line": 2060
           },
           "name": "onPatchbaseline",
           "parameters": [
@@ -333659,7 +333938,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2075
+            "line": 2088
           },
           "name": "onResourcedatasync",
           "parameters": [
@@ -333720,7 +333999,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2089
+            "line": 2102
           },
           "name": "onServicesetting",
           "parameters": [
@@ -333781,7 +334060,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2061
+            "line": 2074
           },
           "name": "onSession",
           "parameters": [
@@ -333842,7 +334121,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2134
+            "line": 2147
           },
           "name": "onTask",
           "parameters": [
@@ -333903,7 +334182,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2103
+            "line": 2116
           },
           "name": "onWindowtarget",
           "parameters": [
@@ -333964,7 +334243,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2117
+            "line": 2130
           },
           "name": "onWindowtask",
           "parameters": [
@@ -336229,13 +336508,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateAssociationStatus.html",
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateAssociationStatus.html",
             "stability": "experimental",
             "summary": "Grants permission to update the status of the SSM document associated with a specified instance."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1519
+            "line": 1522
           },
           "name": "toUpdateAssociationStatus",
           "returns": {
@@ -336252,7 +336531,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1530
+            "line": 1533
           },
           "name": "toUpdateDocument",
           "returns": {
@@ -336269,7 +336548,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1541
+            "line": 1544
           },
           "name": "toUpdateDocumentDefaultVersion",
           "returns": {
@@ -336286,7 +336565,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1552
+            "line": 1555
           },
           "name": "toUpdateDocumentMetadata",
           "returns": {
@@ -336297,13 +336576,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write",
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSourceInstanceARN()",
             "stability": "experimental",
             "summary": "Grants permission to SSM Agent to update the status of the association that it is currently running (internal Systems Manager call)."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1561
+            "line": 1567
           },
           "name": "toUpdateInstanceAssociationStatus",
           "returns": {
@@ -336314,13 +336593,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html",
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html",
             "stability": "experimental",
             "summary": "Grants permission to SSM Agent to send a heartbeat signal to the Systems Manager service in the cloud."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1572
+            "line": 1581
           },
           "name": "toUpdateInstanceInformation",
           "returns": {
@@ -336337,7 +336616,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1583
+            "line": 1592
           },
           "name": "toUpdateMaintenanceWindow",
           "returns": {
@@ -336354,7 +336633,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1594
+            "line": 1603
           },
           "name": "toUpdateMaintenanceWindowTarget",
           "returns": {
@@ -336371,7 +336650,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1605
+            "line": 1614
           },
           "name": "toUpdateMaintenanceWindowTask",
           "returns": {
@@ -336388,7 +336667,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1619
+            "line": 1628
           },
           "name": "toUpdateManagedInstanceRole",
           "returns": {
@@ -336405,7 +336684,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1630
+            "line": 1639
           },
           "name": "toUpdateOpsItem",
           "returns": {
@@ -336422,7 +336701,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1641
+            "line": 1650
           },
           "name": "toUpdateOpsMetadata",
           "returns": {
@@ -336439,7 +336718,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1652
+            "line": 1661
           },
           "name": "toUpdatePatchBaseline",
           "returns": {
@@ -336456,7 +336735,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1666
+            "line": 1675
           },
           "name": "toUpdateResourceDataSync",
           "returns": {
@@ -336473,7 +336752,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1677
+            "line": 1686
           },
           "name": "toUpdateServiceSetting",
           "returns": {
@@ -336491,7 +336770,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1681
+            "line": 1690
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -338224,7 +338503,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-          "line": 70
+          "line": 88
         },
         "parameters": [
           {
@@ -338244,13 +338523,74 @@
       "methods": [
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-create-iam-instance-profile.html",
+            "remarks": "This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-policy-keys\n\nApplies to actions:\n- .toCreateControlChannel()",
+            "stability": "experimental",
+            "summary": "Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
+            "line": 80
+          },
+          "name": "ifSsmSourceInstanceARN",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The value(s) to check."
+              },
+              "name": "value",
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+              },
+              "name": "operator",
+              "optional": true,
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "cdk-iam-floyd.Operator"
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Ssmmessages"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSsmSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-create-iam-instance-profile.html",
             "stability": "experimental",
             "summary": "Grants permission to register a control channel for an instance to send control messages to Systems Manager service."
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 20
+            "line": 23
           },
           "name": "toCreateControlChannel",
           "returns": {
@@ -338267,7 +338607,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 31
+            "line": 34
           },
           "name": "toCreateDataChannel",
           "returns": {
@@ -338284,7 +338624,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 42
+            "line": 45
           },
           "name": "toOpenControlChannel",
           "returns": {
@@ -338301,7 +338641,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 53
+            "line": 56
           },
           "name": "toOpenDataChannel",
           "returns": {
@@ -338319,7 +338659,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 57
+            "line": 60
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -338361,7 +338701,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/sso.ts",
-          "line": 1100
+          "line": 1184
         },
         "parameters": [
           {
@@ -338387,7 +338727,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 1080
+            "line": 1164
           },
           "name": "onAccount",
           "parameters": [
@@ -338428,7 +338768,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 1092
+            "line": 1176
           },
           "name": "onInstance",
           "parameters": [
@@ -338467,7 +338807,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 1068
+            "line": 1152
           },
           "name": "onPermissionSet",
           "parameters": [
@@ -338541,6 +338881,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_AttachCustomerManagedPolicyReferenceToPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to attach a customer managed policy reference to a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 45
+          },
+          "name": "toAttachCustomerManagedPolicyReferenceToPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_AttachManagedPolicyToPermissionSet.html",
@@ -338549,7 +338906,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 45
+            "line": 56
           },
           "name": "toAttachManagedPolicyToPermissionSet",
           "returns": {
@@ -338566,7 +338923,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 56
+            "line": 67
           },
           "name": "toCreateAccountAssignment",
           "returns": {
@@ -338583,7 +338940,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 67
+            "line": 78
           },
           "name": "toCreateApplicationInstance",
           "returns": {
@@ -338600,7 +338957,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 78
+            "line": 89
           },
           "name": "toCreateApplicationInstanceCertificate",
           "returns": {
@@ -338611,13 +338968,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateInstanceAccessControlAttributeConfiguration.html",
+            "remarks": "Access Level: Write\n\nDependent actions:\n- iam:AttachRolePolicy\n- iam:CreateRole\n- iam:DeleteRole\n- iam:DeleteRolePolicy\n- iam:DetachRolePolicy\n- iam:GetRole\n- iam:ListAttachedRolePolicies\n- iam:ListRolePolicies\n- iam:PutRolePolicy\n- iam:UpdateAssumeRolePolicy\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateInstanceAccessControlAttributeConfiguration.html",
             "stability": "experimental",
             "summary": "Grants permission to enable the instance for ABAC and specify the attributes."
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 89
+            "line": 112
           },
           "name": "toCreateInstanceAccessControlAttributeConfiguration",
           "returns": {
@@ -338634,7 +338991,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 100
+            "line": 123
           },
           "name": "toCreateManagedApplicationInstance",
           "returns": {
@@ -338651,7 +339008,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 115
+            "line": 138
           },
           "name": "toCreatePermissionSet",
           "returns": {
@@ -338668,7 +339025,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 126
+            "line": 149
           },
           "name": "toCreateProfile",
           "returns": {
@@ -338685,7 +339042,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 137
+            "line": 160
           },
           "name": "toCreateTrust",
           "returns": {
@@ -338702,7 +339059,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 148
+            "line": 171
           },
           "name": "toDeleteAccountAssignment",
           "returns": {
@@ -338719,7 +339076,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 159
+            "line": 182
           },
           "name": "toDeleteApplicationInstance",
           "returns": {
@@ -338736,7 +339093,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 170
+            "line": 193
           },
           "name": "toDeleteApplicationInstanceCertificate",
           "returns": {
@@ -338753,7 +339110,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 181
+            "line": 204
           },
           "name": "toDeleteInlinePolicyFromPermissionSet",
           "returns": {
@@ -338770,7 +339127,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 192
+            "line": 215
           },
           "name": "toDeleteInstanceAccessControlAttributeConfiguration",
           "returns": {
@@ -338787,7 +339144,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 203
+            "line": 226
           },
           "name": "toDeleteManagedApplicationInstance",
           "returns": {
@@ -338796,6 +339153,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeletePermissionsBoundaryFromPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to remove permissions boundary from a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 246
+          },
+          "name": "toDeletePermissionsBoundaryFromPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write",
@@ -338804,7 +339178,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 212
+            "line": 235
           },
           "name": "toDeletePermissionSet",
           "returns": {
@@ -338821,7 +339195,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 223
+            "line": 257
           },
           "name": "toDeletePermissionsPolicy",
           "returns": {
@@ -338838,7 +339212,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 234
+            "line": 268
           },
           "name": "toDeleteProfile",
           "returns": {
@@ -338855,7 +339229,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 245
+            "line": 279
           },
           "name": "toDescribeAccountAssignmentCreationStatus",
           "returns": {
@@ -338872,7 +339246,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 256
+            "line": 290
           },
           "name": "toDescribeAccountAssignmentDeletionStatus",
           "returns": {
@@ -338889,7 +339263,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 267
+            "line": 301
           },
           "name": "toDescribeInstanceAccessControlAttributeConfiguration",
           "returns": {
@@ -338906,7 +339280,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 278
+            "line": 312
           },
           "name": "toDescribePermissionSet",
           "returns": {
@@ -338923,7 +339297,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 289
+            "line": 323
           },
           "name": "toDescribePermissionSetProvisioningStatus",
           "returns": {
@@ -338940,7 +339314,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 300
+            "line": 334
           },
           "name": "toDescribePermissionsPolicies",
           "returns": {
@@ -338957,7 +339331,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 311
+            "line": 345
           },
           "name": "toDescribeRegisteredRegions",
           "returns": {
@@ -338966,6 +339340,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DetachCustomerManagedPolicyReferenceFromPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to detach a customer managed policy reference from a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 356
+          },
+          "name": "toDetachCustomerManagedPolicyReferenceFromPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DetachManagedPolicyFromPermissionSet.html",
@@ -338974,7 +339365,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 322
+            "line": 367
           },
           "name": "toDetachManagedPolicyFromPermissionSet",
           "returns": {
@@ -338991,7 +339382,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 336
+            "line": 381
           },
           "name": "toDisassociateDirectory",
           "returns": {
@@ -339008,7 +339399,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 347
+            "line": 392
           },
           "name": "toDisassociateProfile",
           "returns": {
@@ -339025,7 +339416,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 358
+            "line": 403
           },
           "name": "toGetApplicationInstance",
           "returns": {
@@ -339042,7 +339433,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 369
+            "line": 414
           },
           "name": "toGetApplicationTemplate",
           "returns": {
@@ -339059,7 +339450,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 380
+            "line": 425
           },
           "name": "toGetInlinePolicyForPermissionSet",
           "returns": {
@@ -339076,7 +339467,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 391
+            "line": 436
           },
           "name": "toGetManagedApplicationInstance",
           "returns": {
@@ -339093,7 +339484,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 402
+            "line": 447
           },
           "name": "toGetMfaDeviceManagementForDirectory",
           "returns": {
@@ -339102,6 +339493,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetPermissionsBoundaryForPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to get permissions boundary for a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 469
+          },
+          "name": "toGetPermissionsBoundaryForPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
@@ -339110,7 +339518,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 413
+            "line": 458
           },
           "name": "toGetPermissionSet",
           "returns": {
@@ -339127,7 +339535,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 427
+            "line": 483
           },
           "name": "toGetPermissionsPolicy",
           "returns": {
@@ -339144,7 +339552,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 438
+            "line": 494
           },
           "name": "toGetProfile",
           "returns": {
@@ -339161,7 +339569,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 460
+            "line": 516
           },
           "name": "toGetSharedSsoConfiguration",
           "returns": {
@@ -339178,7 +339586,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 471
+            "line": 527
           },
           "name": "toGetSsoConfiguration",
           "returns": {
@@ -339195,7 +339603,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 449
+            "line": 505
           },
           "name": "toGetSSOStatus",
           "returns": {
@@ -339212,7 +339620,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 482
+            "line": 538
           },
           "name": "toGetTrust",
           "returns": {
@@ -339229,7 +339637,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 493
+            "line": 549
           },
           "name": "toImportApplicationInstanceServiceProviderMetadata",
           "returns": {
@@ -339246,7 +339654,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 504
+            "line": 560
           },
           "name": "toListAccountAssignmentCreationStatus",
           "returns": {
@@ -339263,7 +339671,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 515
+            "line": 571
           },
           "name": "toListAccountAssignmentDeletionStatus",
           "returns": {
@@ -339280,7 +339688,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 526
+            "line": 582
           },
           "name": "toListAccountAssignments",
           "returns": {
@@ -339297,7 +339705,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 537
+            "line": 593
           },
           "name": "toListAccountsForProvisionedPermissionSet",
           "returns": {
@@ -339314,7 +339722,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 548
+            "line": 604
           },
           "name": "toListApplicationInstanceCertificates",
           "returns": {
@@ -339331,7 +339739,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 562
+            "line": 618
           },
           "name": "toListApplicationInstances",
           "returns": {
@@ -339348,7 +339756,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 587
+            "line": 643
           },
           "name": "toListApplications",
           "returns": {
@@ -339365,7 +339773,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 576
+            "line": 632
           },
           "name": "toListApplicationTemplates",
           "returns": {
@@ -339374,6 +339782,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListCustomerManagedPolicyReferencesInPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to list the customer managed policy references that are attached to a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 654
+          },
+          "name": "toListCustomerManagedPolicyReferencesInPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
@@ -339382,7 +339807,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 598
+            "line": 665
           },
           "name": "toListDirectoryAssociations",
           "returns": {
@@ -339399,7 +339824,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 609
+            "line": 676
           },
           "name": "toListInstances",
           "returns": {
@@ -339416,7 +339841,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 620
+            "line": 687
           },
           "name": "toListManagedPoliciesInPermissionSet",
           "returns": {
@@ -339433,7 +339858,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 631
+            "line": 698
           },
           "name": "toListPermissionSetProvisioningStatus",
           "returns": {
@@ -339450,7 +339875,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 640
+            "line": 707
           },
           "name": "toListPermissionSets",
           "returns": {
@@ -339467,7 +339892,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 651
+            "line": 718
           },
           "name": "toListPermissionSetsProvisionedToAccount",
           "returns": {
@@ -339484,7 +339909,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 662
+            "line": 729
           },
           "name": "toListProfileAssociations",
           "returns": {
@@ -339501,7 +339926,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 676
+            "line": 743
           },
           "name": "toListProfiles",
           "returns": {
@@ -339518,7 +339943,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 687
+            "line": 754
           },
           "name": "toListTagsForResource",
           "returns": {
@@ -339535,7 +339960,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 698
+            "line": 765
           },
           "name": "toProvisionPermissionSet",
           "returns": {
@@ -339552,7 +339977,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 709
+            "line": 776
           },
           "name": "toPutInlinePolicyToPermissionSet",
           "returns": {
@@ -339569,7 +339994,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 720
+            "line": 787
           },
           "name": "toPutMfaDeviceManagementForDirectory",
           "returns": {
@@ -339578,6 +340003,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutPermissionsBoundaryToPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to add permissions boundary to a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 798
+          },
+          "name": "toPutPermissionsBoundaryToPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
@@ -339586,7 +340028,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 731
+            "line": 809
           },
           "name": "toPutPermissionsPolicy",
           "returns": {
@@ -339603,7 +340045,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 745
+            "line": 823
           },
           "name": "toSearchGroups",
           "returns": {
@@ -339620,7 +340062,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 759
+            "line": 837
           },
           "name": "toSearchUsers",
           "returns": {
@@ -339637,7 +340079,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 774
+            "line": 852
           },
           "name": "toStartSSO",
           "returns": {
@@ -339654,7 +340096,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 789
+            "line": 867
           },
           "name": "toTagResource",
           "returns": {
@@ -339671,7 +340113,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 804
+            "line": 882
           },
           "name": "toUntagResource",
           "returns": {
@@ -339688,7 +340130,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 815
+            "line": 893
           },
           "name": "toUpdateApplicationInstanceActiveCertificate",
           "returns": {
@@ -339705,7 +340147,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 826
+            "line": 904
           },
           "name": "toUpdateApplicationInstanceDisplayData",
           "returns": {
@@ -339722,7 +340164,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 837
+            "line": 915
           },
           "name": "toUpdateApplicationInstanceResponseConfiguration",
           "returns": {
@@ -339739,7 +340181,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 848
+            "line": 926
           },
           "name": "toUpdateApplicationInstanceResponseSchemaConfiguration",
           "returns": {
@@ -339756,7 +340198,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 859
+            "line": 937
           },
           "name": "toUpdateApplicationInstanceSecurityConfiguration",
           "returns": {
@@ -339773,7 +340215,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 870
+            "line": 948
           },
           "name": "toUpdateApplicationInstanceServiceProviderConfiguration",
           "returns": {
@@ -339790,7 +340232,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 881
+            "line": 959
           },
           "name": "toUpdateApplicationInstanceStatus",
           "returns": {
@@ -339807,7 +340249,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 892
+            "line": 970
           },
           "name": "toUpdateDirectoryAssociation",
           "returns": {
@@ -339824,7 +340266,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 903
+            "line": 981
           },
           "name": "toUpdateInstanceAccessControlAttributeConfiguration",
           "returns": {
@@ -339841,7 +340283,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 914
+            "line": 992
           },
           "name": "toUpdateManagedApplicationInstanceStatus",
           "returns": {
@@ -339858,7 +340300,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 923
+            "line": 1001
           },
           "name": "toUpdatePermissionSet",
           "returns": {
@@ -339875,7 +340317,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 934
+            "line": 1012
           },
           "name": "toUpdateProfile",
           "returns": {
@@ -339892,7 +340334,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 945
+            "line": 1023
           },
           "name": "toUpdateSSOConfiguration",
           "returns": {
@@ -339909,7 +340351,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 956
+            "line": 1034
           },
           "name": "toUpdateTrust",
           "returns": {
@@ -339927,7 +340369,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 960
+            "line": 1038
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -370511,6 +370953,6 @@
       "symbolId": "lib/generated/x-ray:Xray"
     }
   },
-  "version": "0.395.0",
-  "fingerprint": "GtptiLI6adRdFRxtoIpyccHRpK8qd9zj0L65ThHcd+Y="
+  "version": "0.398.0",
+  "fingerprint": "0VWeWPRg77iQYW7LdgXYR3d4QVZov0e5f5n1mKVBA5c="
 }