cdk-iam-floyd 0.443.0 → 0.444.0

package/.jsii

@@ -3124,7 +3124,7 @@
   },
   "name": "cdk-iam-floyd",
   "readme": {
-    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Twitter](https://badgen.net/twitter/follow/heyiamfloyd?icon=twitter)][twitter]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n[![Maintainability](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/maintainability)](https://codeclimate.com/github/udondan/iam-floyd/maintainability)\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 321 Services\n- 12862 Actions\n- 1366 Resource Types\n- 1359 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n\n  **Starting with version 0.300.0, the packages are compatible with CDK v2.** For CDK v1 you can use any version up to:<br>\n  [![npm CDK v1](https://img.shields.io/badge/npm-0.286.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.286.0)\n  [![PyPI CDK v1](https://img.shields.io/badge/pypi-0.286.0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.286.0/)\n\n  Find them all on [libraries.io].\n\n## CDK Compatibility Matrix\n\n| CDK        | cdk-iam-floyd              |\n| ---------- | -------------              |\n| <= 1.151.0 | <= 0.285.0                 |\n| >= 1.152.0 | 0.286.0                    |\n| >= 1.158.0 | **No compatible version!** |\n| >= 2.0.0   | >= 0.300.0                 |\n| >= 2.20.0  | >= 0.351.0                 |\n| >= 2.26.0  | >= 0.377.0                 |\n| 2.29.x     | **No compatible version!** |\n| >= 2.30.0  | >= 0.391.0                 |\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [twitter]: https://twitter.com/heyiamfloyd\n"
+    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Twitter](https://badgen.net/twitter/follow/heyiamfloyd?icon=twitter)][twitter]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n[![Maintainability](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/maintainability)](https://codeclimate.com/github/udondan/iam-floyd/maintainability)\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 321 Services\n- 12891 Actions\n- 1368 Resource Types\n- 1359 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n\n  **Starting with version 0.300.0, the packages are compatible with CDK v2.** For CDK v1 you can use any version up to:<br>\n  [![npm CDK v1](https://img.shields.io/badge/npm-0.286.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.286.0)\n  [![PyPI CDK v1](https://img.shields.io/badge/pypi-0.286.0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.286.0/)\n\n  Find them all on [libraries.io].\n\n## CDK Compatibility Matrix\n\n| CDK        | cdk-iam-floyd              |\n| ---------- | -------------              |\n| <= 1.151.0 | <= 0.285.0                 |\n| >= 1.152.0 | 0.286.0                    |\n| >= 1.158.0 | **No compatible version!** |\n| >= 2.0.0   | >= 0.300.0                 |\n| >= 2.20.0  | >= 0.351.0                 |\n| >= 2.26.0  | >= 0.377.0                 |\n| 2.29.x     | **No compatible version!** |\n| >= 2.30.0  | >= 0.391.0                 |\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [twitter]: https://twitter.com/heyiamfloyd\n"
   },
   "repository": {
     "type": "git",
@@ -54546,7 +54546,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/cloudfront.ts",
-          "line": 1279
+          "line": 1436
         },
         "parameters": [
           {
@@ -54572,7 +54572,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 1219
+            "line": 1363
           },
           "name": "onCachePolicy",
           "parameters": [
@@ -54622,7 +54622,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 1151
+            "line": 1295
           },
           "name": "onDistribution",
           "parameters": [
@@ -54672,7 +54672,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 1193
+            "line": 1337
           },
           "name": "onFieldLevelEncryptionConfig",
           "parameters": [
@@ -54722,7 +54722,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 1206
+            "line": 1350
           },
           "name": "onFieldLevelEncryptionProfile",
           "parameters": [
@@ -54772,7 +54772,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 1258
+            "line": 1402
           },
           "name": "onFunction",
           "parameters": [
@@ -54814,6 +54814,56 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/working-with-policies.html",
+            "stability": "experimental",
+            "summary": "Adds a resource of type origin-access-control to the statement."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/cloudfront.ts",
+            "line": 1428
+          },
+          "name": "onOriginAccessControl",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- Identifier for the id."
+              },
+              "name": "id",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "defaults to empty string: all accounts.",
+                "summary": "- Account of the resource;"
+              },
+              "name": "account",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.",
+                "summary": "- Partition of the AWS account [aws, aws-cn, aws-us-gov];"
+              },
+              "name": "partition",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Cloudfront"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html#private-content-restricting-access-to-s3-overview",
@@ -54822,7 +54872,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 1180
+            "line": 1324
           },
           "name": "onOriginAccessIdentity",
           "parameters": [
@@ -54872,7 +54922,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 1232
+            "line": 1376
           },
           "name": "onOriginRequestPolicy",
           "parameters": [
@@ -54922,7 +54972,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 1245
+            "line": 1389
           },
           "name": "onRealtimeLogConfig",
           "parameters": [
@@ -54972,7 +55022,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 1271
+            "line": 1415
           },
           "name": "onResponseHeadersPolicy",
           "parameters": [
@@ -55022,7 +55072,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 1167
+            "line": 1311
           },
           "name": "onStreamingDistribution",
           "parameters": [
@@ -55234,6 +55284,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateOriginAccessControl.html",
+            "stability": "experimental",
+            "summary": "Grants permission to create a new origin access control."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/cloudfront.ts",
+            "line": 130
+          },
+          "name": "toCreateOriginAccessControl",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Cloudfront"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateOriginRequestPolicy.html",
@@ -55242,7 +55309,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 130
+            "line": 141
           },
           "name": "toCreateOriginRequestPolicy",
           "returns": {
@@ -55259,7 +55326,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 141
+            "line": 152
           },
           "name": "toCreatePublicKey",
           "returns": {
@@ -55276,7 +55343,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 152
+            "line": 163
           },
           "name": "toCreateRealtimeLogConfig",
           "returns": {
@@ -55293,7 +55360,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 163
+            "line": 174
           },
           "name": "toCreateResponseHeadersPolicy",
           "returns": {
@@ -55302,6 +55369,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cf-api-permissions-ref.html",
+            "stability": "experimental",
+            "summary": "Grants permission to create a new savings plan."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/cloudfront.ts",
+            "line": 185
+          },
+          "name": "toCreateSavingsPlan",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Cloudfront"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CreateStreamingDistribution.html",
@@ -55310,7 +55394,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 174
+            "line": 196
           },
           "name": "toCreateStreamingDistribution",
           "returns": {
@@ -55327,7 +55411,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 189
+            "line": 211
           },
           "name": "toCreateStreamingDistributionWithTags",
           "returns": {
@@ -55344,7 +55428,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 200
+            "line": 222
           },
           "name": "toDeleteCachePolicy",
           "returns": {
@@ -55361,7 +55445,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 211
+            "line": 233
           },
           "name": "toDeleteCloudFrontOriginAccessIdentity",
           "returns": {
@@ -55378,7 +55462,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 222
+            "line": 244
           },
           "name": "toDeleteDistribution",
           "returns": {
@@ -55395,7 +55479,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 233
+            "line": 255
           },
           "name": "toDeleteFieldLevelEncryptionConfig",
           "returns": {
@@ -55412,7 +55496,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 244
+            "line": 266
           },
           "name": "toDeleteFieldLevelEncryptionProfile",
           "returns": {
@@ -55429,7 +55513,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 255
+            "line": 277
           },
           "name": "toDeleteFunction",
           "returns": {
@@ -55446,7 +55530,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 266
+            "line": 288
           },
           "name": "toDeleteKeyGroup",
           "returns": {
@@ -55463,7 +55547,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 277
+            "line": 299
           },
           "name": "toDeleteMonitoringSubscription",
           "returns": {
@@ -55472,6 +55556,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteOriginAccessControl.html",
+            "stability": "experimental",
+            "summary": "Grants permission to delete an origin access control."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/cloudfront.ts",
+            "line": 310
+          },
+          "name": "toDeleteOriginAccessControl",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Cloudfront"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/cloudfront/latest/APIReference/API_DeleteOriginRequestPolicy.html",
@@ -55480,7 +55581,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 288
+            "line": 321
           },
           "name": "toDeleteOriginRequestPolicy",
           "returns": {
@@ -55497,7 +55598,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 299
+            "line": 332
           },
           "name": "toDeletePublicKey",
           "returns": {
@@ -55514,7 +55615,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 310
+            "line": 343
           },
           "name": "toDeleteRealtimeLogConfig",
           "returns": {
@@ -55531,7 +55632,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 321
+            "line": 354
           },
           "name": "toDeleteResponseHeadersPolicy",
           "returns": {
@@ -55548,7 +55649,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 332
+            "line": 365
           },
           "name": "toDeleteStreamingDistribution",
           "returns": {
@@ -55565,7 +55666,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 343
+            "line": 376
           },
           "name": "toDescribeFunction",
           "returns": {
@@ -55582,7 +55683,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 354
+            "line": 387
           },
           "name": "toGetCachePolicy",
           "returns": {
@@ -55599,7 +55700,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 365
+            "line": 398
           },
           "name": "toGetCachePolicyConfig",
           "returns": {
@@ -55616,7 +55717,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 376
+            "line": 409
           },
           "name": "toGetCloudFrontOriginAccessIdentity",
           "returns": {
@@ -55633,7 +55734,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 387
+            "line": 420
           },
           "name": "toGetCloudFrontOriginAccessIdentityConfig",
           "returns": {
@@ -55650,7 +55751,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 398
+            "line": 431
           },
           "name": "toGetDistribution",
           "returns": {
@@ -55667,7 +55768,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 409
+            "line": 442
           },
           "name": "toGetDistributionConfig",
           "returns": {
@@ -55684,7 +55785,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 420
+            "line": 453
           },
           "name": "toGetFieldLevelEncryption",
           "returns": {
@@ -55701,7 +55802,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 431
+            "line": 464
           },
           "name": "toGetFieldLevelEncryptionConfig",
           "returns": {
@@ -55718,7 +55819,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 442
+            "line": 475
           },
           "name": "toGetFieldLevelEncryptionProfile",
           "returns": {
@@ -55735,7 +55836,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 453
+            "line": 486
           },
           "name": "toGetFieldLevelEncryptionProfileConfig",
           "returns": {
@@ -55752,7 +55853,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 464
+            "line": 497
           },
           "name": "toGetFunction",
           "returns": {
@@ -55769,7 +55870,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 475
+            "line": 508
           },
           "name": "toGetInvalidation",
           "returns": {
@@ -55786,7 +55887,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 486
+            "line": 519
           },
           "name": "toGetKeyGroup",
           "returns": {
@@ -55803,7 +55904,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 497
+            "line": 530
           },
           "name": "toGetKeyGroupConfig",
           "returns": {
@@ -55820,7 +55921,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 508
+            "line": 541
           },
           "name": "toGetMonitoringSubscription",
           "returns": {
@@ -55829,6 +55930,40 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetOriginAccessControl.html",
+            "stability": "experimental",
+            "summary": "Grants permission to get the origin access control."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/cloudfront.ts",
+            "line": 552
+          },
+          "name": "toGetOriginAccessControl",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Cloudfront"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetOriginAccessControlConfig.html",
+            "stability": "experimental",
+            "summary": "Grants permission to get the origin access control configuration."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/cloudfront.ts",
+            "line": 563
+          },
+          "name": "toGetOriginAccessControlConfig",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Cloudfront"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetOriginRequestPolicy.html",
@@ -55837,7 +55972,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 519
+            "line": 574
           },
           "name": "toGetOriginRequestPolicy",
           "returns": {
@@ -55854,7 +55989,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 530
+            "line": 585
           },
           "name": "toGetOriginRequestPolicyConfig",
           "returns": {
@@ -55871,7 +56006,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 541
+            "line": 596
           },
           "name": "toGetPublicKey",
           "returns": {
@@ -55888,7 +56023,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 552
+            "line": 607
           },
           "name": "toGetPublicKeyConfig",
           "returns": {
@@ -55905,7 +56040,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 563
+            "line": 618
           },
           "name": "toGetRealtimeLogConfig",
           "returns": {
@@ -55922,7 +56057,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 574
+            "line": 629
           },
           "name": "toGetResponseHeadersPolicy",
           "returns": {
@@ -55939,7 +56074,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 585
+            "line": 640
           },
           "name": "toGetResponseHeadersPolicyConfig",
           "returns": {
@@ -55948,6 +56083,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cf-api-permissions-ref.html",
+            "stability": "experimental",
+            "summary": "Grants permission to get a savings plan."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/cloudfront.ts",
+            "line": 651
+          },
+          "name": "toGetSavingsPlan",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Cloudfront"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/cloudfront/latest/APIReference/API_GetStreamingDistribution.html",
@@ -55956,7 +56108,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 596
+            "line": 662
           },
           "name": "toGetStreamingDistribution",
           "returns": {
@@ -55973,7 +56125,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 607
+            "line": 673
           },
           "name": "toGetStreamingDistributionConfig",
           "returns": {
@@ -55990,7 +56142,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 618
+            "line": 684
           },
           "name": "toListCachePolicies",
           "returns": {
@@ -56007,7 +56159,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 629
+            "line": 695
           },
           "name": "toListCloudFrontOriginAccessIdentities",
           "returns": {
@@ -56024,7 +56176,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 640
+            "line": 706
           },
           "name": "toListConflictingAliases",
           "returns": {
@@ -56041,7 +56193,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 651
+            "line": 717
           },
           "name": "toListDistributions",
           "returns": {
@@ -56058,7 +56210,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 662
+            "line": 728
           },
           "name": "toListDistributionsByCachePolicyId",
           "returns": {
@@ -56075,7 +56227,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 673
+            "line": 739
           },
           "name": "toListDistributionsByKeyGroup",
           "returns": {
@@ -56086,13 +56238,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListDistributionsByLambdaFunction.html",
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cf-api-permissions-ref.html",
             "stability": "experimental",
             "summary": "Grants permission to list the distributions associated a Lambda function."
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 684
+            "line": 750
           },
           "name": "toListDistributionsByLambdaFunction",
           "returns": {
@@ -56109,7 +56261,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 695
+            "line": 761
           },
           "name": "toListDistributionsByOriginRequestPolicyId",
           "returns": {
@@ -56126,7 +56278,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 706
+            "line": 772
           },
           "name": "toListDistributionsByRealtimeLogConfig",
           "returns": {
@@ -56143,7 +56295,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 717
+            "line": 783
           },
           "name": "toListDistributionsByResponseHeadersPolicyId",
           "returns": {
@@ -56160,7 +56312,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 728
+            "line": 794
           },
           "name": "toListDistributionsByWebACLId",
           "returns": {
@@ -56177,7 +56329,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 739
+            "line": 805
           },
           "name": "toListFieldLevelEncryptionConfigs",
           "returns": {
@@ -56194,7 +56346,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 750
+            "line": 816
           },
           "name": "toListFieldLevelEncryptionProfiles",
           "returns": {
@@ -56211,7 +56363,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 761
+            "line": 827
           },
           "name": "toListFunctions",
           "returns": {
@@ -56228,7 +56380,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 772
+            "line": 838
           },
           "name": "toListInvalidations",
           "returns": {
@@ -56245,7 +56397,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 783
+            "line": 849
           },
           "name": "toListKeyGroups",
           "returns": {
@@ -56254,6 +56406,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListOriginAccessControls.html",
+            "stability": "experimental",
+            "summary": "Grants permission to list all origin access controls in the account."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/cloudfront.ts",
+            "line": 860
+          },
+          "name": "toListOriginAccessControls",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Cloudfront"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListOriginRequestPolicies.html",
@@ -56262,7 +56431,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 794
+            "line": 871
           },
           "name": "toListOriginRequestPolicies",
           "returns": {
@@ -56279,7 +56448,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 805
+            "line": 882
           },
           "name": "toListPublicKeys",
           "returns": {
@@ -56288,6 +56457,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cf-api-permissions-ref.html",
+            "stability": "experimental",
+            "summary": "Grants permission to list CloudFront rate cards for the account."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/cloudfront.ts",
+            "line": 893
+          },
+          "name": "toListRateCards",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Cloudfront"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListRealtimeLogConfigs.html",
@@ -56296,7 +56482,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 816
+            "line": 904
           },
           "name": "toListRealtimeLogConfigs",
           "returns": {
@@ -56313,7 +56499,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 827
+            "line": 915
           },
           "name": "toListResponseHeadersPolicies",
           "returns": {
@@ -56322,6 +56508,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cf-api-permissions-ref.html",
+            "stability": "experimental",
+            "summary": "Grants permission to list savings plans in the account."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/cloudfront.ts",
+            "line": 926
+          },
+          "name": "toListSavingsPlans",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Cloudfront"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ListStreamingDistributions.html",
@@ -56330,7 +56533,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 838
+            "line": 937
           },
           "name": "toListStreamingDistributions",
           "returns": {
@@ -56347,7 +56550,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 849
+            "line": 948
           },
           "name": "toListTagsForResource",
           "returns": {
@@ -56356,6 +56559,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cf-api-permissions-ref.html",
+            "stability": "experimental",
+            "summary": "Grants permission to list CloudFront usage."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/cloudfront.ts",
+            "line": 959
+          },
+          "name": "toListUsages",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Cloudfront"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/cloudfront/latest/APIReference/API_PublishFunction.html",
@@ -56364,7 +56584,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 860
+            "line": 970
           },
           "name": "toPublishFunction",
           "returns": {
@@ -56381,7 +56601,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 875
+            "line": 985
           },
           "name": "toTagResource",
           "returns": {
@@ -56398,7 +56618,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 886
+            "line": 996
           },
           "name": "toTestFunction",
           "returns": {
@@ -56415,7 +56635,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 900
+            "line": 1010
           },
           "name": "toUntagResource",
           "returns": {
@@ -56432,7 +56652,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 911
+            "line": 1021
           },
           "name": "toUpdateCachePolicy",
           "returns": {
@@ -56449,7 +56669,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 922
+            "line": 1032
           },
           "name": "toUpdateCloudFrontOriginAccessIdentity",
           "returns": {
@@ -56466,7 +56686,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 933
+            "line": 1043
           },
           "name": "toUpdateDistribution",
           "returns": {
@@ -56483,7 +56703,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 944
+            "line": 1054
           },
           "name": "toUpdateFieldLevelEncryptionConfig",
           "returns": {
@@ -56500,7 +56720,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 955
+            "line": 1065
           },
           "name": "toUpdateFieldLevelEncryptionProfile",
           "returns": {
@@ -56517,7 +56737,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 966
+            "line": 1076
           },
           "name": "toUpdateFunction",
           "returns": {
@@ -56534,7 +56754,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 977
+            "line": 1087
           },
           "name": "toUpdateKeyGroup",
           "returns": {
@@ -56543,6 +56763,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateOriginAccessControl.html",
+            "stability": "experimental",
+            "summary": "Grants permission to update an origin access control."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/cloudfront.ts",
+            "line": 1098
+          },
+          "name": "toUpdateOriginAccessControl",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Cloudfront"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateOriginRequestPolicy.html",
@@ -56551,7 +56788,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 988
+            "line": 1109
           },
           "name": "toUpdateOriginRequestPolicy",
           "returns": {
@@ -56568,7 +56805,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 999
+            "line": 1120
           },
           "name": "toUpdatePublicKey",
           "returns": {
@@ -56585,7 +56822,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 1010
+            "line": 1131
           },
           "name": "toUpdateRealtimeLogConfig",
           "returns": {
@@ -56602,7 +56839,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 1021
+            "line": 1142
           },
           "name": "toUpdateResponseHeadersPolicy",
           "returns": {
@@ -56611,6 +56848,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cf-api-permissions-ref.html",
+            "stability": "experimental",
+            "summary": "Grants permission to update a savings plan."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/cloudfront.ts",
+            "line": 1153
+          },
+          "name": "toUpdateSavingsPlan",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Cloudfront"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/cloudfront/latest/APIReference/API_UpdateStreamingDistribution.html",
@@ -56619,7 +56873,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 1032
+            "line": 1164
           },
           "name": "toUpdateStreamingDistribution",
           "returns": {
@@ -56637,7 +56891,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/cloudfront.ts",
-            "line": 1036
+            "line": 1168
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -373606,7 +373860,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/workdocs.ts",
-          "line": 650
+          "line": 686
         },
         "parameters": [
           {
@@ -373658,6 +373912,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/workdocs/latest/adminguide/manage-notifications.html",
+            "stability": "experimental",
+            "summary": "Grants permission to add principals that are allowed to call notification subscription APIs for a given WorkDocs site."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/workdocs.ts",
+            "line": 42
+          },
+          "name": "toAddNotificationPermissions",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Workdocs"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/workdocs/latest/APIReference/API_AddResourcePermissions.html",
@@ -373666,7 +373937,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 42
+            "line": 53
           },
           "name": "toAddResourcePermissions",
           "returns": {
@@ -373683,7 +373954,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 53
+            "line": 64
           },
           "name": "toAddUserToGroup",
           "returns": {
@@ -373700,7 +373971,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 64
+            "line": 75
           },
           "name": "toCheckAlias",
           "returns": {
@@ -373717,7 +373988,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 75
+            "line": 86
           },
           "name": "toCreateComment",
           "returns": {
@@ -373734,7 +374005,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 86
+            "line": 97
           },
           "name": "toCreateCustomMetadata",
           "returns": {
@@ -373751,7 +374022,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 97
+            "line": 108
           },
           "name": "toCreateFolder",
           "returns": {
@@ -373768,7 +374039,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 108
+            "line": 119
           },
           "name": "toCreateInstance",
           "returns": {
@@ -373785,7 +374056,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 119
+            "line": 130
           },
           "name": "toCreateLabels",
           "returns": {
@@ -373802,7 +374073,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 130
+            "line": 141
           },
           "name": "toCreateNotificationSubscription",
           "returns": {
@@ -373819,7 +374090,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 141
+            "line": 152
           },
           "name": "toCreateUser",
           "returns": {
@@ -373836,7 +374107,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 152
+            "line": 163
           },
           "name": "toDeactivateUser",
           "returns": {
@@ -373853,7 +374124,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 163
+            "line": 174
           },
           "name": "toDeleteComment",
           "returns": {
@@ -373870,7 +374141,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 174
+            "line": 185
           },
           "name": "toDeleteCustomMetadata",
           "returns": {
@@ -373887,7 +374158,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 185
+            "line": 196
           },
           "name": "toDeleteDocument",
           "returns": {
@@ -373904,7 +374175,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 196
+            "line": 207
           },
           "name": "toDeleteFolder",
           "returns": {
@@ -373921,7 +374192,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 207
+            "line": 218
           },
           "name": "toDeleteFolderContents",
           "returns": {
@@ -373938,7 +374209,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 218
+            "line": 229
           },
           "name": "toDeleteInstance",
           "returns": {
@@ -373955,7 +374226,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 229
+            "line": 240
           },
           "name": "toDeleteLabels",
           "returns": {
@@ -373964,6 +374235,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/workdocs/latest/adminguide/manage-notifications.html",
+            "stability": "experimental",
+            "summary": "Grants permission to delete principals that are allowed to call notification subscription APIs for a given WorkDocs site."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/workdocs.ts",
+            "line": 251
+          },
+          "name": "toDeleteNotificationPermissions",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Workdocs"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/workdocs/latest/APIReference/API_DeleteNotificationSubscription.html",
@@ -373972,7 +374260,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 240
+            "line": 262
           },
           "name": "toDeleteNotificationSubscription",
           "returns": {
@@ -373989,7 +374277,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 251
+            "line": 273
           },
           "name": "toDeleteUser",
           "returns": {
@@ -374006,7 +374294,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 262
+            "line": 284
           },
           "name": "toDeregisterDirectory",
           "returns": {
@@ -374023,7 +374311,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 273
+            "line": 295
           },
           "name": "toDescribeActivities",
           "returns": {
@@ -374040,7 +374328,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 284
+            "line": 306
           },
           "name": "toDescribeAvailableDirectories",
           "returns": {
@@ -374057,7 +374345,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 295
+            "line": 317
           },
           "name": "toDescribeComments",
           "returns": {
@@ -374074,7 +374362,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 306
+            "line": 328
           },
           "name": "toDescribeDocumentVersions",
           "returns": {
@@ -374091,7 +374379,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 317
+            "line": 339
           },
           "name": "toDescribeFolderContents",
           "returns": {
@@ -374108,7 +374396,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 328
+            "line": 350
           },
           "name": "toDescribeGroups",
           "returns": {
@@ -374125,7 +374413,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 339
+            "line": 361
           },
           "name": "toDescribeInstances",
           "returns": {
@@ -374134,6 +374422,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/workdocs/latest/adminguide/manage-notifications.html",
+            "stability": "experimental",
+            "summary": "Grants permission to describe principals that are allowed to call notification subscription APIs for a given WorkDocs site."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/workdocs.ts",
+            "line": 372
+          },
+          "name": "toDescribeNotificationPermissions",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Workdocs"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeNotificationSubscriptions.html",
@@ -374142,7 +374447,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 350
+            "line": 383
           },
           "name": "toDescribeNotificationSubscriptions",
           "returns": {
@@ -374159,7 +374464,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 361
+            "line": 394
           },
           "name": "toDescribeResourcePermissions",
           "returns": {
@@ -374176,7 +374481,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 372
+            "line": 405
           },
           "name": "toDescribeRootFolders",
           "returns": {
@@ -374187,13 +374492,13 @@
         },
         {
           "docs": {
-            "remarks": "You can describe all users or filter the results (for example, by status or organization).\n\nAccess Level: List\n\nhttps://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeUsers.html",
+            "remarks": "You can describe all users or filter the results (for example, by status or organization)\n\nAccess Level: List\n\nhttps://docs.aws.amazon.com/workdocs/latest/APIReference/API_DescribeUsers.html",
             "stability": "experimental",
             "summary": "Grants permission to view a description of the specified users."
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 383
+            "line": 416
           },
           "name": "toDescribeUsers",
           "returns": {
@@ -374210,7 +374515,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 394
+            "line": 427
           },
           "name": "toDownloadDocumentVersion",
           "returns": {
@@ -374227,7 +374532,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 405
+            "line": 438
           },
           "name": "toGetCurrentUser",
           "returns": {
@@ -374244,7 +374549,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 416
+            "line": 449
           },
           "name": "toGetDocument",
           "returns": {
@@ -374261,7 +374566,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 427
+            "line": 460
           },
           "name": "toGetDocumentPath",
           "returns": {
@@ -374278,7 +374583,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 438
+            "line": 471
           },
           "name": "toGetDocumentVersion",
           "returns": {
@@ -374295,7 +374600,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 449
+            "line": 482
           },
           "name": "toGetFolder",
           "returns": {
@@ -374312,7 +374617,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 460
+            "line": 493
           },
           "name": "toGetFolderPath",
           "returns": {
@@ -374329,7 +374634,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 471
+            "line": 504
           },
           "name": "toGetGroup",
           "returns": {
@@ -374346,7 +374651,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 482
+            "line": 515
           },
           "name": "toGetResources",
           "returns": {
@@ -374363,7 +374668,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 493
+            "line": 526
           },
           "name": "toInitiateDocumentVersionUpload",
           "returns": {
@@ -374380,7 +374685,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 504
+            "line": 537
           },
           "name": "toRegisterDirectory",
           "returns": {
@@ -374397,7 +374702,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 515
+            "line": 548
           },
           "name": "toRemoveAllResourcePermissions",
           "returns": {
@@ -374414,7 +374719,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 526
+            "line": 559
           },
           "name": "toRemoveResourcePermission",
           "returns": {
@@ -374431,7 +374736,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 537
+            "line": 570
           },
           "name": "toUpdateDocument",
           "returns": {
@@ -374448,7 +374753,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 548
+            "line": 581
           },
           "name": "toUpdateDocumentVersion",
           "returns": {
@@ -374465,7 +374770,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 559
+            "line": 592
           },
           "name": "toUpdateFolder",
           "returns": {
@@ -374482,7 +374787,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 570
+            "line": 603
           },
           "name": "toUpdateInstanceAlias",
           "returns": {
@@ -374499,7 +374804,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 581
+            "line": 614
           },
           "name": "toUpdateUser",
           "returns": {
@@ -374517,7 +374822,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workdocs.ts",
-            "line": 585
+            "line": 618
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -375256,7 +375561,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/workmail.ts",
-          "line": 1545
+          "line": 1629
         },
         "parameters": [
           {
@@ -375282,7 +375587,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1537
+            "line": 1621
           },
           "name": "onOrganization",
           "parameters": [
@@ -375386,6 +375691,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/workmail/latest/APIReference/API_AssumeImpersonationRole.html",
+            "stability": "experimental",
+            "summary": "Grants permission to assume an impersonation role for the given Amazon WorkMail organization."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/workmail.ts",
+            "line": 53
+          },
+          "name": "toAssumeImpersonationRole",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Workmail"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/workmail/latest/APIReference/API_CancelMailboxExportJob.html",
@@ -375394,7 +375716,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 53
+            "line": 64
           },
           "name": "toCancelMailboxExportJob",
           "returns": {
@@ -375411,7 +375733,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 64
+            "line": 75
           },
           "name": "toCreateAlias",
           "returns": {
@@ -375428,7 +375750,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 75
+            "line": 86
           },
           "name": "toCreateAvailabilityConfiguration",
           "returns": {
@@ -375445,7 +375767,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 86
+            "line": 97
           },
           "name": "toCreateGroup",
           "returns": {
@@ -375454,6 +375776,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/workmail/latest/APIReference/API_CreateImpersonationRole.html",
+            "stability": "experimental",
+            "summary": "Grants permission to create an impersonation role for the given Amazon WorkMail organization."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/workmail.ts",
+            "line": 108
+          },
+          "name": "toCreateImpersonationRole",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Workmail"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/workmail/latest/adminguide/create-email-rules.html",
@@ -375462,7 +375801,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 97
+            "line": 119
           },
           "name": "toCreateInboundMailFlowRule",
           "returns": {
@@ -375479,7 +375818,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 108
+            "line": 130
           },
           "name": "toCreateMailDomain",
           "returns": {
@@ -375496,7 +375835,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 119
+            "line": 141
           },
           "name": "toCreateMailUser",
           "returns": {
@@ -375513,7 +375852,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 130
+            "line": 152
           },
           "name": "toCreateMobileDeviceAccessRule",
           "returns": {
@@ -375530,7 +375869,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 141
+            "line": 163
           },
           "name": "toCreateOrganization",
           "returns": {
@@ -375547,7 +375886,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 152
+            "line": 174
           },
           "name": "toCreateOutboundMailFlowRule",
           "returns": {
@@ -375564,7 +375903,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 163
+            "line": 185
           },
           "name": "toCreateResource",
           "returns": {
@@ -375581,7 +375920,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 174
+            "line": 196
           },
           "name": "toCreateSmtpGateway",
           "returns": {
@@ -375598,7 +375937,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 185
+            "line": 207
           },
           "name": "toCreateUser",
           "returns": {
@@ -375615,7 +375954,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 196
+            "line": 218
           },
           "name": "toDeleteAccessControlRule",
           "returns": {
@@ -375632,7 +375971,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 207
+            "line": 229
           },
           "name": "toDeleteAlias",
           "returns": {
@@ -375649,7 +375988,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 218
+            "line": 240
           },
           "name": "toDeleteAvailabilityConfiguration",
           "returns": {
@@ -375666,7 +376005,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 229
+            "line": 251
           },
           "name": "toDeleteEmailMonitoringConfiguration",
           "returns": {
@@ -375683,7 +376022,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 240
+            "line": 262
           },
           "name": "toDeleteGroup",
           "returns": {
@@ -375692,6 +376031,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/workmail/latest/APIReference/API_DeleteImpersonationRole.html",
+            "stability": "experimental",
+            "summary": "Grants permission to delete an impersonation role for the given Amazon WorkMail organization."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/workmail.ts",
+            "line": 273
+          },
+          "name": "toDeleteImpersonationRole",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Workmail"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/workmail/latest/adminguide/remove-email-flow-rule.html",
@@ -375700,7 +376056,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 251
+            "line": 284
           },
           "name": "toDeleteInboundMailFlowRule",
           "returns": {
@@ -375717,7 +376073,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 273
+            "line": 306
           },
           "name": "toDeleteMailboxPermissions",
           "returns": {
@@ -375734,7 +376090,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 262
+            "line": 295
           },
           "name": "toDeleteMailDomain",
           "returns": {
@@ -375751,7 +376107,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 284
+            "line": 317
           },
           "name": "toDeleteMobileDevice",
           "returns": {
@@ -375768,7 +376124,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 295
+            "line": 328
           },
           "name": "toDeleteMobileDeviceAccessOverride",
           "returns": {
@@ -375785,7 +376141,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 306
+            "line": 339
           },
           "name": "toDeleteMobileDeviceAccessRule",
           "returns": {
@@ -375802,7 +376158,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 317
+            "line": 350
           },
           "name": "toDeleteOrganization",
           "returns": {
@@ -375819,7 +376175,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 328
+            "line": 361
           },
           "name": "toDeleteOutboundMailFlowRule",
           "returns": {
@@ -375836,7 +376192,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 339
+            "line": 372
           },
           "name": "toDeleteResource",
           "returns": {
@@ -375853,7 +376209,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 350
+            "line": 383
           },
           "name": "toDeleteRetentionPolicy",
           "returns": {
@@ -375870,7 +376226,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 361
+            "line": 394
           },
           "name": "toDeleteSmtpGateway",
           "returns": {
@@ -375887,7 +376243,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 372
+            "line": 405
           },
           "name": "toDeleteUser",
           "returns": {
@@ -375904,7 +376260,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 383
+            "line": 416
           },
           "name": "toDeregisterFromWorkMail",
           "returns": {
@@ -375921,7 +376277,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 394
+            "line": 427
           },
           "name": "toDeregisterMailDomain",
           "returns": {
@@ -375938,7 +376294,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 405
+            "line": 438
           },
           "name": "toDescribeDirectories",
           "returns": {
@@ -375955,7 +376311,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 416
+            "line": 449
           },
           "name": "toDescribeEmailMonitoringConfiguration",
           "returns": {
@@ -375972,7 +376328,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 427
+            "line": 460
           },
           "name": "toDescribeGroup",
           "returns": {
@@ -375989,7 +376345,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 438
+            "line": 471
           },
           "name": "toDescribeInboundDmarcSettings",
           "returns": {
@@ -376006,7 +376362,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 449
+            "line": 482
           },
           "name": "toDescribeInboundMailFlowRule",
           "returns": {
@@ -376023,7 +376379,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 460
+            "line": 493
           },
           "name": "toDescribeKmsKeys",
           "returns": {
@@ -376040,7 +376396,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 504
+            "line": 537
           },
           "name": "toDescribeMailboxExportJob",
           "returns": {
@@ -376057,7 +376413,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 471
+            "line": 504
           },
           "name": "toDescribeMailDomains",
           "returns": {
@@ -376074,7 +376430,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 482
+            "line": 515
           },
           "name": "toDescribeMailGroups",
           "returns": {
@@ -376091,7 +376447,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 493
+            "line": 526
           },
           "name": "toDescribeMailUsers",
           "returns": {
@@ -376108,7 +376464,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 515
+            "line": 548
           },
           "name": "toDescribeOrganization",
           "returns": {
@@ -376125,7 +376481,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 526
+            "line": 559
           },
           "name": "toDescribeOrganizations",
           "returns": {
@@ -376142,7 +376498,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 537
+            "line": 570
           },
           "name": "toDescribeOutboundMailFlowRule",
           "returns": {
@@ -376159,7 +376515,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 548
+            "line": 581
           },
           "name": "toDescribeResource",
           "returns": {
@@ -376176,7 +376532,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 559
+            "line": 592
           },
           "name": "toDescribeSmtpGateway",
           "returns": {
@@ -376193,7 +376549,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 570
+            "line": 603
           },
           "name": "toDescribeUser",
           "returns": {
@@ -376210,7 +376566,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 581
+            "line": 614
           },
           "name": "toDisableMailGroups",
           "returns": {
@@ -376227,7 +376583,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 592
+            "line": 625
           },
           "name": "toDisableMailUsers",
           "returns": {
@@ -376244,7 +376600,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 603
+            "line": 636
           },
           "name": "toDisassociateDelegateFromResource",
           "returns": {
@@ -376261,7 +376617,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 614
+            "line": 647
           },
           "name": "toDisassociateMemberFromGroup",
           "returns": {
@@ -376278,7 +376634,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 625
+            "line": 658
           },
           "name": "toEnableMailDomain",
           "returns": {
@@ -376295,7 +376651,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 636
+            "line": 669
           },
           "name": "toEnableMailGroups",
           "returns": {
@@ -376312,7 +376668,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 647
+            "line": 680
           },
           "name": "toEnableMailUsers",
           "returns": {
@@ -376329,7 +376685,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 658
+            "line": 691
           },
           "name": "toGetAccessControlEffect",
           "returns": {
@@ -376346,7 +376702,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 669
+            "line": 702
           },
           "name": "toGetDefaultRetentionPolicy",
           "returns": {
@@ -376355,6 +376711,40 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/workmail/latest/APIReference/API_GetImpersonationRole.html",
+            "stability": "experimental",
+            "summary": "Grants permission to retrieve an impersonation role for the given Amazon WorkMail organization."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/workmail.ts",
+            "line": 713
+          },
+          "name": "toGetImpersonationRole",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Workmail"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/workmail/latest/APIReference/API_GetImpersonationRoleEffect.html",
+            "stability": "experimental",
+            "summary": "Grants permission to get the effect of the rules associated to an impersonation role for a specific user."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/workmail.ts",
+            "line": 724
+          },
+          "name": "toGetImpersonationRoleEffect",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Workmail"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/workmail/latest/adminguide/journaling_overview.html",
@@ -376363,7 +376753,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 680
+            "line": 735
           },
           "name": "toGetJournalingRules",
           "returns": {
@@ -376380,7 +376770,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 735
+            "line": 790
           },
           "name": "toGetMailboxDetails",
           "returns": {
@@ -376397,7 +376787,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 691
+            "line": 746
           },
           "name": "toGetMailDomain",
           "returns": {
@@ -376414,7 +376804,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 702
+            "line": 757
           },
           "name": "toGetMailDomainDetails",
           "returns": {
@@ -376431,7 +376821,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 713
+            "line": 768
           },
           "name": "toGetMailGroupDetails",
           "returns": {
@@ -376448,7 +376838,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 724
+            "line": 779
           },
           "name": "toGetMailUserDetails",
           "returns": {
@@ -376465,7 +376855,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 746
+            "line": 801
           },
           "name": "toGetMobileDeviceAccessEffect",
           "returns": {
@@ -376482,7 +376872,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 757
+            "line": 812
           },
           "name": "toGetMobileDeviceAccessOverride",
           "returns": {
@@ -376499,7 +376889,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 768
+            "line": 823
           },
           "name": "toGetMobileDeviceDetails",
           "returns": {
@@ -376516,7 +376906,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 779
+            "line": 834
           },
           "name": "toGetMobileDevicesForUser",
           "returns": {
@@ -376533,7 +376923,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 790
+            "line": 845
           },
           "name": "toGetMobilePolicyDetails",
           "returns": {
@@ -376550,7 +376940,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 801
+            "line": 856
           },
           "name": "toListAccessControlRules",
           "returns": {
@@ -376567,7 +376957,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 812
+            "line": 867
           },
           "name": "toListAliases",
           "returns": {
@@ -376584,7 +376974,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 823
+            "line": 878
           },
           "name": "toListAvailabilityConfigurations",
           "returns": {
@@ -376601,7 +376991,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 834
+            "line": 889
           },
           "name": "toListGroupMembers",
           "returns": {
@@ -376618,7 +377008,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 845
+            "line": 900
           },
           "name": "toListGroups",
           "returns": {
@@ -376627,6 +377017,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/workmail/latest/APIReference/API_ListImpersonationRoles.html",
+            "stability": "experimental",
+            "summary": "Grants permission to list the impersonation roles for the given Amazon WorkMail organization."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/workmail.ts",
+            "line": 911
+          },
+          "name": "toListImpersonationRoles",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Workmail"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/workmail/latest/adminguide/email-flows.html#email-flows-rule-actions",
@@ -376635,7 +377042,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 856
+            "line": 922
           },
           "name": "toListInboundMailFlowRules",
           "returns": {
@@ -376652,7 +377059,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 878
+            "line": 944
           },
           "name": "toListMailboxExportJobs",
           "returns": {
@@ -376669,7 +377076,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 889
+            "line": 955
           },
           "name": "toListMailboxPermissions",
           "returns": {
@@ -376686,7 +377093,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 867
+            "line": 933
           },
           "name": "toListMailDomains",
           "returns": {
@@ -376703,7 +377110,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 900
+            "line": 966
           },
           "name": "toListMembersInMailGroup",
           "returns": {
@@ -376720,7 +377127,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 911
+            "line": 977
           },
           "name": "toListMobileDeviceAccessOverrides",
           "returns": {
@@ -376737,7 +377144,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 922
+            "line": 988
           },
           "name": "toListMobileDeviceAccessRules",
           "returns": {
@@ -376754,7 +377161,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 933
+            "line": 999
           },
           "name": "toListOrganizations",
           "returns": {
@@ -376771,7 +377178,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 944
+            "line": 1010
           },
           "name": "toListOutboundMailFlowRules",
           "returns": {
@@ -376788,7 +377195,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 955
+            "line": 1021
           },
           "name": "toListResourceDelegates",
           "returns": {
@@ -376805,7 +377212,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 966
+            "line": 1032
           },
           "name": "toListResources",
           "returns": {
@@ -376822,7 +377229,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 977
+            "line": 1043
           },
           "name": "toListSmtpGateways",
           "returns": {
@@ -376839,7 +377246,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 992
+            "line": 1058
           },
           "name": "toListTagsForResource",
           "returns": {
@@ -376856,7 +377263,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1003
+            "line": 1069
           },
           "name": "toListUsers",
           "returns": {
@@ -376873,7 +377280,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1014
+            "line": 1080
           },
           "name": "toPutAccessControlRule",
           "returns": {
@@ -376890,7 +377297,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1025
+            "line": 1091
           },
           "name": "toPutEmailMonitoringConfiguration",
           "returns": {
@@ -376907,7 +377314,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1036
+            "line": 1102
           },
           "name": "toPutInboundDmarcSettings",
           "returns": {
@@ -376924,7 +377331,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1047
+            "line": 1113
           },
           "name": "toPutMailboxPermissions",
           "returns": {
@@ -376941,7 +377348,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1058
+            "line": 1124
           },
           "name": "toPutMobileDeviceAccessOverride",
           "returns": {
@@ -376958,7 +377365,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1069
+            "line": 1135
           },
           "name": "toPutRetentionPolicy",
           "returns": {
@@ -376975,7 +377382,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1080
+            "line": 1146
           },
           "name": "toRegisterMailDomain",
           "returns": {
@@ -376992,7 +377399,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1091
+            "line": 1157
           },
           "name": "toRegisterToWorkMail",
           "returns": {
@@ -377009,7 +377416,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1102
+            "line": 1168
           },
           "name": "toRemoveMembersFromGroup",
           "returns": {
@@ -377026,7 +377433,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1113
+            "line": 1179
           },
           "name": "toResetPassword",
           "returns": {
@@ -377043,7 +377450,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1124
+            "line": 1190
           },
           "name": "toResetUserPassword",
           "returns": {
@@ -377060,7 +377467,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1135
+            "line": 1201
           },
           "name": "toSearchMembers",
           "returns": {
@@ -377077,7 +377484,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1146
+            "line": 1212
           },
           "name": "toSetAdmin",
           "returns": {
@@ -377094,7 +377501,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1157
+            "line": 1223
           },
           "name": "toSetDefaultMailDomain",
           "returns": {
@@ -377111,7 +377518,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1168
+            "line": 1234
           },
           "name": "toSetJournalingRules",
           "returns": {
@@ -377128,7 +377535,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1179
+            "line": 1245
           },
           "name": "toSetMailGroupDetails",
           "returns": {
@@ -377145,7 +377552,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1190
+            "line": 1256
           },
           "name": "toSetMailUserDetails",
           "returns": {
@@ -377162,7 +377569,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1201
+            "line": 1267
           },
           "name": "toSetMobilePolicyDetails",
           "returns": {
@@ -377179,7 +377586,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1212
+            "line": 1278
           },
           "name": "toStartMailboxExportJob",
           "returns": {
@@ -377196,7 +377603,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1227
+            "line": 1293
           },
           "name": "toTagResource",
           "returns": {
@@ -377213,7 +377620,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1238
+            "line": 1304
           },
           "name": "toTestAvailabilityConfiguration",
           "returns": {
@@ -377230,7 +377637,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1249
+            "line": 1315
           },
           "name": "toTestInboundMailFlowRules",
           "returns": {
@@ -377247,7 +377654,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1260
+            "line": 1326
           },
           "name": "toTestOutboundMailFlowRules",
           "returns": {
@@ -377264,7 +377671,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1275
+            "line": 1341
           },
           "name": "toUntagResource",
           "returns": {
@@ -377281,7 +377688,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1286
+            "line": 1352
           },
           "name": "toUpdateAvailabilityConfiguration",
           "returns": {
@@ -377298,7 +377705,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1297
+            "line": 1363
           },
           "name": "toUpdateDefaultMailDomain",
           "returns": {
@@ -377307,6 +377714,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/workmail/latest/APIReference/API_UpdateImpersonationRole.html",
+            "stability": "experimental",
+            "summary": "Grants permission to update an existing impersonation role for the given Amazon WorkMail organization."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/workmail.ts",
+            "line": 1374
+          },
+          "name": "toUpdateImpersonationRole",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Workmail"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/workmail/latest/adminguide/modify-email-flow-rule.html",
@@ -377315,7 +377739,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1308
+            "line": 1385
           },
           "name": "toUpdateInboundMailFlowRule",
           "returns": {
@@ -377332,7 +377756,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1319
+            "line": 1396
           },
           "name": "toUpdateMailboxQuota",
           "returns": {
@@ -377349,7 +377773,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1330
+            "line": 1407
           },
           "name": "toUpdateMobileDeviceAccessRule",
           "returns": {
@@ -377366,7 +377790,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1341
+            "line": 1418
           },
           "name": "toUpdateOutboundMailFlowRule",
           "returns": {
@@ -377383,7 +377807,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1352
+            "line": 1429
           },
           "name": "toUpdatePrimaryEmailAddress",
           "returns": {
@@ -377400,7 +377824,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1363
+            "line": 1440
           },
           "name": "toUpdateResource",
           "returns": {
@@ -377417,7 +377841,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1374
+            "line": 1451
           },
           "name": "toUpdateSmtpGateway",
           "returns": {
@@ -377434,7 +377858,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1385
+            "line": 1462
           },
           "name": "toWipeMobileDevice",
           "returns": {
@@ -377452,7 +377876,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workmail.ts",
-            "line": 1389
+            "line": 1466
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -379260,7 +379684,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/workspacesweb.ts",
-          "line": 699
+          "line": 812
         },
         "parameters": [
           {
@@ -379286,7 +379710,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 623
+            "line": 719
           },
           "name": "onBrowserSettings",
           "parameters": [
@@ -379347,7 +379771,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 640
+            "line": 736
           },
           "name": "onNetworkSettings",
           "parameters": [
@@ -379408,7 +379832,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 657
+            "line": 753
           },
           "name": "onPortal",
           "parameters": [
@@ -379469,7 +379893,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 674
+            "line": 770
           },
           "name": "onTrustStore",
           "parameters": [
@@ -379522,6 +379946,67 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_CreateUserAccessLoggingSettings.html",
+            "stability": "experimental",
+            "summary": "Adds a resource of type userAccessLoggingSettings to the statement."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/workspacesweb.ts",
+            "line": 804
+          },
+          "name": "onUserAccessLoggingSettings",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- Identifier for the userAccessLoggingSettingsId."
+              },
+              "name": "userAccessLoggingSettingsId",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "defaults to empty string: all accounts.",
+                "summary": "- Account of the resource;"
+              },
+              "name": "account",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "defaults to empty string: all regions.",
+                "summary": "- Region of the resource;"
+              },
+              "name": "region",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "remarks": "defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.\n\nPossible conditions:\n- .ifAwsResourceTag()",
+                "summary": "- Partition of the AWS account [aws, aws-cn, aws-us-gov];"
+              },
+              "name": "partition",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.WorkspacesWeb"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "https://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_CreateUserSettings.html",
@@ -379530,7 +380015,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 691
+            "line": 787
           },
           "name": "onUserSettings",
           "parameters": [
@@ -379634,6 +380119,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nDependent actions:\n- kinesis:PutRecord\n- kinesis:PutRecords\n\nhttps://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_AssociateUserAccessLoggingSettings.html",
+            "stability": "experimental",
+            "summary": "Grants permission to associate user access logging settings with web portals."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/workspacesweb.ts",
+            "line": 65
+          },
+          "name": "toAssociateUserAccessLoggingSettings",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.WorkspacesWeb"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_AssociateUserSettings.html",
@@ -379642,7 +380144,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 61
+            "line": 76
           },
           "name": "toAssociateUserSettings",
           "returns": {
@@ -379659,7 +380161,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 82
+            "line": 97
           },
           "name": "toCreateBrowserSettings",
           "returns": {
@@ -379676,7 +380178,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 93
+            "line": 108
           },
           "name": "toCreateIdentityProvider",
           "returns": {
@@ -379693,7 +380195,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 111
+            "line": 126
           },
           "name": "toCreateNetworkSettings",
           "returns": {
@@ -379710,7 +380212,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 133
+            "line": 148
           },
           "name": "toCreatePortal",
           "returns": {
@@ -379727,7 +380229,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 148
+            "line": 163
           },
           "name": "toCreateTrustStore",
           "returns": {
@@ -379736,6 +380238,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifAwsTagKeys()\n- .ifAwsRequestTag()\n\nhttps://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_CreateUserAccessLoggingSettings.html",
+            "stability": "experimental",
+            "summary": "Grants permission to create user access logging settings."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/workspacesweb.ts",
+            "line": 178
+          },
+          "name": "toCreateUserAccessLoggingSettings",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.WorkspacesWeb"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifAwsTagKeys()\n- .ifAwsRequestTag()\n\nhttps://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_CreateUserSettings.html",
@@ -379744,7 +380263,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 163
+            "line": 193
           },
           "name": "toCreateUserSettings",
           "returns": {
@@ -379761,7 +380280,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 174
+            "line": 204
           },
           "name": "toDeleteBrowserSettings",
           "returns": {
@@ -379778,7 +380297,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 185
+            "line": 215
           },
           "name": "toDeleteIdentityProvider",
           "returns": {
@@ -379795,7 +380314,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 196
+            "line": 226
           },
           "name": "toDeleteNetworkSettings",
           "returns": {
@@ -379812,7 +380331,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 207
+            "line": 237
           },
           "name": "toDeletePortal",
           "returns": {
@@ -379829,7 +380348,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 218
+            "line": 248
           },
           "name": "toDeleteTrustStore",
           "returns": {
@@ -379838,6 +380357,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DeleteUserAccessLoggingSettings.html",
+            "stability": "experimental",
+            "summary": "Grants permission to delete user access logging settings."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/workspacesweb.ts",
+            "line": 259
+          },
+          "name": "toDeleteUserAccessLoggingSettings",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.WorkspacesWeb"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DeleteUserSettings.html",
@@ -379846,7 +380382,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 229
+            "line": 270
           },
           "name": "toDeleteUserSettings",
           "returns": {
@@ -379863,7 +380399,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 240
+            "line": 281
           },
           "name": "toDisassociateBrowserSettings",
           "returns": {
@@ -379880,7 +380416,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 251
+            "line": 292
           },
           "name": "toDisassociateNetworkSettings",
           "returns": {
@@ -379897,7 +380433,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 262
+            "line": 303
           },
           "name": "toDisassociateTrustStore",
           "returns": {
@@ -379906,6 +380442,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DisassociateUserAccessLoggingSettings.html",
+            "stability": "experimental",
+            "summary": "Grants permission to disassociate user access logging settings from web portals."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/workspacesweb.ts",
+            "line": 314
+          },
+          "name": "toDisassociateUserAccessLoggingSettings",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.WorkspacesWeb"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_DisassociateUserSettings.html",
@@ -379914,7 +380467,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 273
+            "line": 325
           },
           "name": "toDisassociateUserSettings",
           "returns": {
@@ -379931,7 +380484,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 284
+            "line": 336
           },
           "name": "toGetBrowserSettings",
           "returns": {
@@ -379948,7 +380501,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 295
+            "line": 347
           },
           "name": "toGetIdentityProvider",
           "returns": {
@@ -379965,7 +380518,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 306
+            "line": 358
           },
           "name": "toGetNetworkSettings",
           "returns": {
@@ -379982,7 +380535,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 317
+            "line": 369
           },
           "name": "toGetPortal",
           "returns": {
@@ -379999,7 +380552,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 328
+            "line": 380
           },
           "name": "toGetPortalServiceProviderMetadata",
           "returns": {
@@ -380016,7 +380569,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 339
+            "line": 391
           },
           "name": "toGetTrustStore",
           "returns": {
@@ -380033,7 +380586,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 350
+            "line": 402
           },
           "name": "toGetTrustStoreCertificate",
           "returns": {
@@ -380042,6 +380595,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_GetUserAccessLoggingSettings.html",
+            "stability": "experimental",
+            "summary": "Grants permission to get details on user access logging settings."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/workspacesweb.ts",
+            "line": 413
+          },
+          "name": "toGetUserAccessLoggingSettings",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.WorkspacesWeb"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_GetUserSettings.html",
@@ -380050,7 +380620,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 361
+            "line": 424
           },
           "name": "toGetUserSettings",
           "returns": {
@@ -380067,7 +380637,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 372
+            "line": 435
           },
           "name": "toListBrowserSettings",
           "returns": {
@@ -380084,7 +380654,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 383
+            "line": 446
           },
           "name": "toListIdentityProviders",
           "returns": {
@@ -380101,7 +380671,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 394
+            "line": 457
           },
           "name": "toListNetworkSettings",
           "returns": {
@@ -380118,7 +380688,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 405
+            "line": 468
           },
           "name": "toListPortals",
           "returns": {
@@ -380135,7 +380705,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 416
+            "line": 479
           },
           "name": "toListTagsForResource",
           "returns": {
@@ -380152,7 +380722,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 427
+            "line": 490
           },
           "name": "toListTrustStoreCertificates",
           "returns": {
@@ -380169,7 +380739,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 438
+            "line": 501
           },
           "name": "toListTrustStores",
           "returns": {
@@ -380178,6 +380748,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_ListUserAccessLoggingSettings.html",
+            "stability": "experimental",
+            "summary": "Grants permission to list user access logging settings."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/workspacesweb.ts",
+            "line": 512
+          },
+          "name": "toListUserAccessLoggingSettings",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.WorkspacesWeb"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_ListUserSettings.html",
@@ -380186,7 +380773,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 449
+            "line": 523
           },
           "name": "toListUserSettings",
           "returns": {
@@ -380203,7 +380790,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 464
+            "line": 538
           },
           "name": "toTagResource",
           "returns": {
@@ -380220,7 +380807,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 479
+            "line": 553
           },
           "name": "toUntagResource",
           "returns": {
@@ -380237,7 +380824,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 490
+            "line": 564
           },
           "name": "toUpdateBrowserSettings",
           "returns": {
@@ -380254,7 +380841,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 501
+            "line": 575
           },
           "name": "toUpdateIdentityProvider",
           "returns": {
@@ -380271,7 +380858,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 520
+            "line": 594
           },
           "name": "toUpdateNetworkSettings",
           "returns": {
@@ -380288,7 +380875,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 531
+            "line": 605
           },
           "name": "toUpdatePortal",
           "returns": {
@@ -380305,7 +380892,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 542
+            "line": 616
           },
           "name": "toUpdateTrustStore",
           "returns": {
@@ -380314,6 +380901,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nDependent actions:\n- kinesis:PutRecord\n- kinesis:PutRecords\n\nhttps://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_UpdateUserAccessLoggingSettings.html",
+            "stability": "experimental",
+            "summary": "Grants permission to update user access logging settings."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/workspacesweb.ts",
+            "line": 631
+          },
+          "name": "toUpdateUserAccessLoggingSettings",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.WorkspacesWeb"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/workspaces-web/latest/APIReference/API_UpdateUserSettings.html",
@@ -380322,7 +380926,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 553
+            "line": 642
           },
           "name": "toUpdateUserSettings",
           "returns": {
@@ -380340,7 +380944,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/workspacesweb.ts",
-            "line": 557
+            "line": 646
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -381027,6 +381631,6 @@
       "symbolId": "lib/generated/x-ray:Xray"
     }
   },
-  "version": "0.443.0",
-  "fingerprint": "4ZaVgSWr8q7jpk8H7xY5BvgkwEAlquNzgYemiEKTh5c="
+  "version": "0.444.0",
+  "fingerprint": "jccSsZxhcwl7kzw4Sy0FTdldH7aTZHvyLio1eoDgguQ="
 }