cdk-iam-floyd 0.488.0 → 0.490.0

package/.jsii

@@ -3371,7 +3371,7 @@
   },
   "name": "cdk-iam-floyd",
   "readme": {
-    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Mastodon](https://badgen.net/badge/Mastodon/iamfloyd@awscommunity.social/blue)][mastodon]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 352 Services\n- 13978 Actions\n- 1481 Resource Types\n- 1471 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n\n  **Starting with version 0.300.0, the packages are compatible with CDK v2.** For CDK v1 you can use any version up to:<br>\n  [![npm CDK v1](https://img.shields.io/badge/npm-0.286.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.286.0)\n  [![PyPI CDK v1](https://img.shields.io/badge/pypi-0.286.0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.286.0/)\n\n  Find them all on [libraries.io].\n\n## CDK Compatibility Matrix\n\n| CDK        | cdk-iam-floyd              |\n| ---------- | -------------              |\n| <= 1.151.0 | <= 0.285.0                 |\n| >= 1.152.0 | 0.286.0                    |\n| >= 1.158.0 | **No compatible version!** |\n| >= 2.0.0   | >= 0.300.0                 |\n| >= 2.20.0  | >= 0.351.0                 |\n| >= 2.26.0  | >= 0.377.0                 |\n| 2.29.x     | **No compatible version!** |\n| >= 2.30.0  | >= 0.391.0                 |\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [mastodon]: https://awscommunity.social/@iamfloyd\n"
+    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Mastodon](https://badgen.net/badge/Mastodon/iamfloyd@awscommunity.social/blue)][mastodon]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 352 Services\n- 13984 Actions\n- 1481 Resource Types\n- 1477 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n\n  **Starting with version 0.300.0, the packages are compatible with CDK v2.** For CDK v1 you can use any version up to:<br>\n  [![npm CDK v1](https://img.shields.io/badge/npm-0.286.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.286.0)\n  [![PyPI CDK v1](https://img.shields.io/badge/pypi-0.286.0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.286.0/)\n\n  Find them all on [libraries.io].\n\n## CDK Compatibility Matrix\n\n| CDK        | cdk-iam-floyd              |\n| ---------- | -------------              |\n| <= 1.151.0 | <= 0.285.0                 |\n| >= 1.152.0 | 0.286.0                    |\n| >= 1.158.0 | **No compatible version!** |\n| >= 2.0.0   | >= 0.300.0                 |\n| >= 2.20.0  | >= 0.351.0                 |\n| >= 2.26.0  | >= 0.377.0                 |\n| 2.29.x     | **No compatible version!** |\n| >= 2.30.0  | >= 0.391.0                 |\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [mastodon]: https://awscommunity.social/@iamfloyd\n"
   },
   "repository": {
     "type": "git",
@@ -93002,7 +93002,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/costandusagereport.ts",
-          "line": 136
+          "line": 146
         },
         "parameters": [
           {
@@ -93028,7 +93028,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/costandusagereport.ts",
-            "line": 128
+            "line": 138
           },
           "name": "onCur",
           "parameters": [
@@ -93117,13 +93117,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Read",
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/cur/latest/userguide/security.html#user-permissions",
             "stability": "experimental",
             "summary": "Grants permission to get Bills CSV report."
           },
           "locationInModule": {
             "filename": "lib/generated/costandusagereport.ts",
-            "line": 40
+            "line": 42
           },
           "name": "toGetClassicReport",
           "returns": {
@@ -93134,13 +93134,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Read",
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/cur/latest/userguide/security.html#user-permissions",
             "stability": "experimental",
             "summary": "Grants permission to get the classic report enablement status for Usage Reports."
           },
           "locationInModule": {
             "filename": "lib/generated/costandusagereport.ts",
-            "line": 49
+            "line": 53
           },
           "name": "toGetClassicReportPreferences",
           "returns": {
@@ -93151,13 +93151,13 @@
         },
         {
           "docs": {
-            "remarks": "Allows or denies download of usage reports too\n\nAccess Level: Read",
+            "remarks": "Allows or denies download of usage reports too\n\nAccess Level: Read\n\nhttps://docs.aws.amazon.com/cur/latest/userguide/security.html#user-permissions",
             "stability": "experimental",
             "summary": "Grants permission to get list of AWS services, usage type and operation for the Usage Report workflow."
           },
           "locationInModule": {
             "filename": "lib/generated/costandusagereport.ts",
-            "line": 58
+            "line": 64
           },
           "name": "toGetUsageReport",
           "returns": {
@@ -93174,7 +93174,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/costandusagereport.ts",
-            "line": 69
+            "line": 75
           },
           "name": "toModifyReportDefinition",
           "returns": {
@@ -93185,13 +93185,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write",
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/cur/latest/userguide/security.html#user-permissions",
             "stability": "experimental",
             "summary": "Grants permission to enable classic reports."
           },
           "locationInModule": {
             "filename": "lib/generated/costandusagereport.ts",
-            "line": 78
+            "line": 86
           },
           "name": "toPutClassicReportPreferences",
           "returns": {
@@ -93208,7 +93208,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/costandusagereport.ts",
-            "line": 89
+            "line": 97
           },
           "name": "toPutReportDefinition",
           "returns": {
@@ -93219,13 +93219,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Read",
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/cur/latest/userguide/security.html#user-permissions",
             "stability": "experimental",
             "summary": "Grants permission to validates if the s3 bucket exists with appropriate permissions for CUR delivery."
           },
           "locationInModule": {
             "filename": "lib/generated/costandusagereport.ts",
-            "line": 98
+            "line": 108
           },
           "name": "toValidateReportDestination",
           "returns": {
@@ -93243,7 +93243,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/costandusagereport.ts",
-            "line": 102
+            "line": 112
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -106835,7 +106835,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/databasemigrationservice.ts",
-          "line": 1616
+          "line": 1664
         },
         "parameters": [
           {
@@ -106861,7 +106861,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1456
+            "line": 1504
           },
           "name": "ifCertTag",
           "parameters": [
@@ -106931,7 +106931,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1472
+            "line": 1520
           },
           "name": "ifDpTag",
           "parameters": [
@@ -107001,7 +107001,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1488
+            "line": 1536
           },
           "name": "ifEndpointTag",
           "parameters": [
@@ -107071,7 +107071,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1504
+            "line": 1552
           },
           "name": "ifEsTag",
           "parameters": [
@@ -107141,7 +107141,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1520
+            "line": 1568
           },
           "name": "ifIpTag",
           "parameters": [
@@ -107211,7 +107211,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1536
+            "line": 1584
           },
           "name": "ifMpTag",
           "parameters": [
@@ -107281,7 +107281,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1552
+            "line": 1600
           },
           "name": "ifRepTag",
           "parameters": [
@@ -107351,7 +107351,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1576
+            "line": 1624
           },
           "name": "ifReqTag",
           "parameters": [
@@ -107421,7 +107421,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1592
+            "line": 1640
           },
           "name": "ifSubgrpTag",
           "parameters": [
@@ -107491,7 +107491,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1608
+            "line": 1656
           },
           "name": "ifTaskTag",
           "parameters": [
@@ -107561,7 +107561,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1268
+            "line": 1316
           },
           "name": "onCertificate",
           "parameters": [
@@ -107622,7 +107622,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1286
+            "line": 1334
           },
           "name": "onDataProvider",
           "parameters": [
@@ -107683,7 +107683,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1304
+            "line": 1352
           },
           "name": "onEndpoint",
           "parameters": [
@@ -107744,7 +107744,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1322
+            "line": 1370
           },
           "name": "onEventSubscription",
           "parameters": [
@@ -107805,7 +107805,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1340
+            "line": 1388
           },
           "name": "onInstanceProfile",
           "parameters": [
@@ -107866,7 +107866,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1358
+            "line": 1406
           },
           "name": "onMigrationProject",
           "parameters": [
@@ -107927,7 +107927,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1376
+            "line": 1424
           },
           "name": "onReplicationInstance",
           "parameters": [
@@ -107988,7 +107988,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1394
+            "line": 1442
           },
           "name": "onReplicationSubnetGroup",
           "parameters": [
@@ -108049,7 +108049,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1412
+            "line": 1460
           },
           "name": "onReplicationTask",
           "parameters": [
@@ -108110,7 +108110,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1426
+            "line": 1474
           },
           "name": "onReplicationTaskAssessmentRun",
           "parameters": [
@@ -108171,7 +108171,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1440
+            "line": 1488
           },
           "name": "onReplicationTaskIndividualAssessment",
           "parameters": [
@@ -108275,6 +108275,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/dms/latest/APIReference/API_BatchStartRecommendations.html",
+            "stability": "experimental",
+            "summary": "Grants permission to start the analysis of up to 20 source databases to recommend target engines for each source database."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/databasemigrationservice.ts",
+            "line": 58
+          },
+          "name": "toBatchStartRecommendations",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Dms"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/dms/latest/APIReference/Welcome.html",
@@ -108283,7 +108300,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 58
+            "line": 69
           },
           "name": "toCancelMetadataModelAssessment",
           "returns": {
@@ -108300,7 +108317,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 69
+            "line": 80
           },
           "name": "toCancelMetadataModelConversion",
           "returns": {
@@ -108317,7 +108334,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 80
+            "line": 91
           },
           "name": "toCancelMetadataModelExport",
           "returns": {
@@ -108334,7 +108351,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 91
+            "line": 102
           },
           "name": "toCancelReplicationTaskAssessmentRun",
           "returns": {
@@ -108351,7 +108368,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 107
+            "line": 118
           },
           "name": "toCreateDataProvider",
           "returns": {
@@ -108368,7 +108385,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 123
+            "line": 134
           },
           "name": "toCreateEndpoint",
           "returns": {
@@ -108385,7 +108402,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 139
+            "line": 150
           },
           "name": "toCreateEventSubscription",
           "returns": {
@@ -108402,7 +108419,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 150
+            "line": 161
           },
           "name": "toCreateFleetAdvisorCollector",
           "returns": {
@@ -108419,7 +108436,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 166
+            "line": 177
           },
           "name": "toCreateInstanceProfile",
           "returns": {
@@ -108436,7 +108453,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 182
+            "line": 193
           },
           "name": "toCreateMigrationProject",
           "returns": {
@@ -108453,7 +108470,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 198
+            "line": 209
           },
           "name": "toCreateReplicationInstance",
           "returns": {
@@ -108470,7 +108487,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 214
+            "line": 225
           },
           "name": "toCreateReplicationSubnetGroup",
           "returns": {
@@ -108487,7 +108504,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 230
+            "line": 241
           },
           "name": "toCreateReplicationTask",
           "returns": {
@@ -108504,7 +108521,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 241
+            "line": 252
           },
           "name": "toDeleteCertificate",
           "returns": {
@@ -108521,7 +108538,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 252
+            "line": 263
           },
           "name": "toDeleteConnection",
           "returns": {
@@ -108538,7 +108555,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 263
+            "line": 274
           },
           "name": "toDeleteDataProvider",
           "returns": {
@@ -108555,7 +108572,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 274
+            "line": 285
           },
           "name": "toDeleteEndpoint",
           "returns": {
@@ -108572,7 +108589,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 285
+            "line": 296
           },
           "name": "toDeleteEventSubscription",
           "returns": {
@@ -108589,7 +108606,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 296
+            "line": 307
           },
           "name": "toDeleteFleetAdvisorCollector",
           "returns": {
@@ -108606,7 +108623,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 307
+            "line": 318
           },
           "name": "toDeleteFleetAdvisorDatabases",
           "returns": {
@@ -108623,7 +108640,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 318
+            "line": 329
           },
           "name": "toDeleteInstanceProfile",
           "returns": {
@@ -108640,7 +108657,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 329
+            "line": 340
           },
           "name": "toDeleteMigrationProject",
           "returns": {
@@ -108657,7 +108674,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 340
+            "line": 351
           },
           "name": "toDeleteReplicationInstance",
           "returns": {
@@ -108674,7 +108691,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 351
+            "line": 362
           },
           "name": "toDeleteReplicationSubnetGroup",
           "returns": {
@@ -108691,7 +108708,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 362
+            "line": 373
           },
           "name": "toDeleteReplicationTask",
           "returns": {
@@ -108708,7 +108725,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 373
+            "line": 384
           },
           "name": "toDeleteReplicationTaskAssessmentRun",
           "returns": {
@@ -108725,7 +108742,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 384
+            "line": 395
           },
           "name": "toDescribeAccountAttributes",
           "returns": {
@@ -108742,7 +108759,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 395
+            "line": 406
           },
           "name": "toDescribeApplicableIndividualAssessments",
           "returns": {
@@ -108759,7 +108776,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 406
+            "line": 417
           },
           "name": "toDescribeCertificates",
           "returns": {
@@ -108776,7 +108793,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 417
+            "line": 428
           },
           "name": "toDescribeConnections",
           "returns": {
@@ -108793,7 +108810,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 450
+            "line": 461
           },
           "name": "toDescribeEndpoints",
           "returns": {
@@ -108810,7 +108827,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 428
+            "line": 439
           },
           "name": "toDescribeEndpointSettings",
           "returns": {
@@ -108827,7 +108844,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 439
+            "line": 450
           },
           "name": "toDescribeEndpointTypes",
           "returns": {
@@ -108844,7 +108861,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 461
+            "line": 472
           },
           "name": "toDescribeEventCategories",
           "returns": {
@@ -108861,7 +108878,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 483
+            "line": 494
           },
           "name": "toDescribeEvents",
           "returns": {
@@ -108878,7 +108895,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 472
+            "line": 483
           },
           "name": "toDescribeEventSubscriptions",
           "returns": {
@@ -108895,7 +108912,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 494
+            "line": 505
           },
           "name": "toDescribeFleetAdvisorCollectors",
           "returns": {
@@ -108912,7 +108929,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 505
+            "line": 516
           },
           "name": "toDescribeFleetAdvisorDatabases",
           "returns": {
@@ -108929,7 +108946,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 516
+            "line": 527
           },
           "name": "toDescribeFleetAdvisorLsaAnalysis",
           "returns": {
@@ -108946,7 +108963,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 527
+            "line": 538
           },
           "name": "toDescribeFleetAdvisorSchemaObjectSummary",
           "returns": {
@@ -108963,7 +108980,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 538
+            "line": 549
           },
           "name": "toDescribeFleetAdvisorSchemas",
           "returns": {
@@ -108980,7 +108997,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 549
+            "line": 560
           },
           "name": "toDescribeOrderableReplicationInstances",
           "returns": {
@@ -108997,7 +109014,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 560
+            "line": 571
           },
           "name": "toDescribePendingMaintenanceActions",
           "returns": {
@@ -109006,6 +109023,40 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeFleetAdvisorLsaAnalysis.html",
+            "stability": "experimental",
+            "summary": "Grants permission to return a paginated list of descriptions of limitations for recommendations of target AWS engines."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/databasemigrationservice.ts",
+            "line": 582
+          },
+          "name": "toDescribeRecommendationLimitations",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Dms"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeRecommendations.html",
+            "stability": "experimental",
+            "summary": "Grants permission to return a paginated list of descriptions of target engine recommendations for your source databases."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/databasemigrationservice.ts",
+            "line": 593
+          },
+          "name": "toDescribeRecommendations",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Dms"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/dms/latest/APIReference/API_DescribeRefreshSchemasStatus.html",
@@ -109014,7 +109065,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 571
+            "line": 604
           },
           "name": "toDescribeRefreshSchemasStatus",
           "returns": {
@@ -109031,7 +109082,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 597
+            "line": 630
           },
           "name": "toDescribeReplicationInstances",
           "returns": {
@@ -109048,7 +109099,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 586
+            "line": 619
           },
           "name": "toDescribeReplicationInstanceTaskLogs",
           "returns": {
@@ -109065,7 +109116,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 608
+            "line": 641
           },
           "name": "toDescribeReplicationSubnetGroups",
           "returns": {
@@ -109082,7 +109133,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 619
+            "line": 652
           },
           "name": "toDescribeReplicationTaskAssessmentResults",
           "returns": {
@@ -109099,7 +109150,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 630
+            "line": 663
           },
           "name": "toDescribeReplicationTaskAssessmentRuns",
           "returns": {
@@ -109116,7 +109167,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 641
+            "line": 674
           },
           "name": "toDescribeReplicationTaskIndividualAssessments",
           "returns": {
@@ -109133,7 +109184,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 652
+            "line": 685
           },
           "name": "toDescribeReplicationTasks",
           "returns": {
@@ -109150,7 +109201,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 663
+            "line": 696
           },
           "name": "toDescribeSchemas",
           "returns": {
@@ -109167,7 +109218,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 674
+            "line": 707
           },
           "name": "toDescribeTableStatistics",
           "returns": {
@@ -109184,7 +109235,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 685
+            "line": 718
           },
           "name": "toDisassociateExtensionPack",
           "returns": {
@@ -109201,7 +109252,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 696
+            "line": 729
           },
           "name": "toExportMetadataModelAssessment",
           "returns": {
@@ -109218,7 +109269,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 707
+            "line": 740
           },
           "name": "toGetMetadataModel",
           "returns": {
@@ -109235,7 +109286,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 722
+            "line": 755
           },
           "name": "toImportCertificate",
           "returns": {
@@ -109252,7 +109303,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 733
+            "line": 766
           },
           "name": "toListDataProviders",
           "returns": {
@@ -109269,7 +109320,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 744
+            "line": 777
           },
           "name": "toListExtensionPacks",
           "returns": {
@@ -109286,7 +109337,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 755
+            "line": 788
           },
           "name": "toListInstanceProfiles",
           "returns": {
@@ -109303,7 +109354,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 766
+            "line": 799
           },
           "name": "toListMetadataModelAssessmentActionItems",
           "returns": {
@@ -109320,7 +109371,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 777
+            "line": 810
           },
           "name": "toListMetadataModelAssessments",
           "returns": {
@@ -109337,7 +109388,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 788
+            "line": 821
           },
           "name": "toListMetadataModelConversions",
           "returns": {
@@ -109354,7 +109405,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 799
+            "line": 832
           },
           "name": "toListMetadataModelExports",
           "returns": {
@@ -109371,7 +109422,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 810
+            "line": 843
           },
           "name": "toListMigrationProjects",
           "returns": {
@@ -109388,7 +109439,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 821
+            "line": 854
           },
           "name": "toListTagsForResource",
           "returns": {
@@ -109405,7 +109456,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 832
+            "line": 865
           },
           "name": "toModifyEndpoint",
           "returns": {
@@ -109422,7 +109473,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 843
+            "line": 876
           },
           "name": "toModifyEventSubscription",
           "returns": {
@@ -109439,7 +109490,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 854
+            "line": 887
           },
           "name": "toModifyFleetAdvisorCollector",
           "returns": {
@@ -109456,7 +109507,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 865
+            "line": 898
           },
           "name": "toModifyFleetAdvisorCollectorStatuses",
           "returns": {
@@ -109473,7 +109524,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 876
+            "line": 909
           },
           "name": "toModifyReplicationInstance",
           "returns": {
@@ -109490,7 +109541,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 887
+            "line": 920
           },
           "name": "toModifyReplicationSubnetGroup",
           "returns": {
@@ -109507,7 +109558,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 898
+            "line": 931
           },
           "name": "toModifyReplicationTask",
           "returns": {
@@ -109524,7 +109575,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 909
+            "line": 942
           },
           "name": "toMoveReplicationTask",
           "returns": {
@@ -109541,7 +109592,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 920
+            "line": 953
           },
           "name": "toRebootReplicationInstance",
           "returns": {
@@ -109558,7 +109609,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 931
+            "line": 964
           },
           "name": "toRefreshSchemas",
           "returns": {
@@ -109575,7 +109626,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 942
+            "line": 975
           },
           "name": "toReloadTables",
           "returns": {
@@ -109592,7 +109643,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 956
+            "line": 989
           },
           "name": "toRemoveTagsFromResource",
           "returns": {
@@ -109609,7 +109660,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 967
+            "line": 1000
           },
           "name": "toRunFleetAdvisorLsaAnalysis",
           "returns": {
@@ -109626,7 +109677,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 978
+            "line": 1011
           },
           "name": "toStartMetadataModelAssessment",
           "returns": {
@@ -109643,7 +109694,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 989
+            "line": 1022
           },
           "name": "toStartMetadataModelConversion",
           "returns": {
@@ -109660,7 +109711,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1000
+            "line": 1033
           },
           "name": "toStartMetadataModelExportAsScripts",
           "returns": {
@@ -109677,7 +109728,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1011
+            "line": 1044
           },
           "name": "toStartMetadataModelExportToTarget",
           "returns": {
@@ -109694,7 +109745,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1022
+            "line": 1055
           },
           "name": "toStartMetadataModelImport",
           "returns": {
@@ -109703,6 +109754,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/dms/latest/APIReference/API_StartRecommendations.html",
+            "stability": "experimental",
+            "summary": "Grants permission to start the analysis of your source database to provide recommendations of target engines."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/databasemigrationservice.ts",
+            "line": 1066
+          },
+          "name": "toStartRecommendations",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Dms"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/dms/latest/APIReference/API_StartReplicationTask.html",
@@ -109711,7 +109779,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1033
+            "line": 1077
           },
           "name": "toStartReplicationTask",
           "returns": {
@@ -109728,7 +109796,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1044
+            "line": 1088
           },
           "name": "toStartReplicationTaskAssessment",
           "returns": {
@@ -109745,7 +109813,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1055
+            "line": 1099
           },
           "name": "toStartReplicationTaskAssessmentRun",
           "returns": {
@@ -109762,7 +109830,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1066
+            "line": 1110
           },
           "name": "toStopReplicationTask",
           "returns": {
@@ -109779,7 +109847,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1077
+            "line": 1121
           },
           "name": "toTestConnection",
           "returns": {
@@ -109796,7 +109864,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1088
+            "line": 1132
           },
           "name": "toUpdateConversionConfiguration",
           "returns": {
@@ -109813,7 +109881,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1099
+            "line": 1143
           },
           "name": "toUpdateDataProvider",
           "returns": {
@@ -109830,7 +109898,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1110
+            "line": 1154
           },
           "name": "toUpdateInstanceProfile",
           "returns": {
@@ -109847,7 +109915,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1121
+            "line": 1165
           },
           "name": "toUpdateMigrationProject",
           "returns": {
@@ -109864,7 +109932,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1132
+            "line": 1176
           },
           "name": "toUpdateSubscriptionsToEventBridge",
           "returns": {
@@ -109881,7 +109949,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1143
+            "line": 1187
           },
           "name": "toUploadFileMetadataList",
           "returns": {
@@ -109899,7 +109967,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/databasemigrationservice.ts",
-            "line": 1147
+            "line": 1191
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -284365,7 +284433,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 132
+            "line": 131
           },
           "name": "ifAwsCalledVia",
           "parameters": [
@@ -284426,7 +284494,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 153
+            "line": 152
           },
           "name": "ifAwsCalledViaFirst",
           "parameters": [
@@ -284487,7 +284555,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 170
+            "line": 169
           },
           "name": "ifAwsCalledViaLast",
           "parameters": [
@@ -284548,7 +284616,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 187
+            "line": 186
           },
           "name": "ifAwsCurrentTime",
           "parameters": [
@@ -284614,6 +284682,128 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "You must use this condition key with its companion key `aws:Ec2InstanceSourceVpc` to ensure that you have a globally unique combination of VPC ID and source private IP. Use this key with `aws:Ec2InstanceSourceVpc` to ensure that a request was made from the same private IP address that the credentials were delivered to.\n\n**Availability:** This key is included in the request context whenever the requester is signing requests with an Amazon EC2 role credential. It can be used in IAM policies, service control policies, VPC endpoint policies, and resource policies.\n\n**Note:** This condition key is not available in EC2-Classic.\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-vpcsourceip",
+            "stability": "experimental",
+            "summary": "This key identifies the private IPv4 address of the primary elastic network interface to which Amazon EC2 IAM role credentials were delivered."
+          },
+          "locationInModule": {
+            "filename": "lib/shared/policy-statement/2-conditions.ts",
+            "line": 240
+          },
+          "name": "ifAwsEc2InstanceSourcePrivateIPv4",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The private IPv4 address."
+              },
+              "name": "value",
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with IP [address operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_IPAddress). **Default:** `IpAddress`."
+              },
+              "name": "operator",
+              "optional": true,
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "cdk-iam-floyd.Operator"
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.PolicyStatementWithCondition"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "You can use this key in a policy with the [aws:SourceVPC](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-sourcevpc) global key to check if a call is made from a VPC (`aws:SourceVPC`) that matches the VPC where a credential was delivered to (`aws:Ec2InstanceSourceVpc`).\n\n**Availability:** This key is included in the request context whenever the requester is signing requests with an Amazon EC2 role credential. It can be used in IAM policies, service control policies, VPC endpoint policies, and resource policies.\n\nThis key can be used with VPC identifier values, but is most useful when used as a variable combined with the `aws:SourceVpc` context key. The `aws:SourceVpc` context key is included in the request context only if the requester uses a VPC endpoint to make the request. Using `aws:Ec2InstanceSourceVpc` with `aws:SourceVpc` allows you to use `aws:Ec2InstanceSourceVpc` more broadly since it compares values that typically change together.\n\n**Note:** This condition key is not available in EC2-Classic.\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-ec2instancesourcevpc",
+            "stability": "experimental",
+            "summary": "This key identifies the VPC to which Amazon EC2 IAM role credentials were delivered to."
+          },
+          "locationInModule": {
+            "filename": "lib/shared/policy-statement/2-conditions.ts",
+            "line": 221
+          },
+          "name": "ifAwsEc2InstanceSourceVpc",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The VPS ID."
+              },
+              "name": "value",
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+              },
+              "name": "operator",
+              "optional": true,
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "cdk-iam-floyd.Operator"
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.PolicyStatementWithCondition"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "This key also accepts the number of seconds since January 1, 1970.\n\n**Availability:** This key is always included in the request context.\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-epochtime",
@@ -284622,7 +284812,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 218
+            "line": 261
           },
           "name": "ifAwsEpochTime",
           "parameters": [
@@ -284694,6 +284884,67 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "This means that an IAM role was assumed using the `AssumeRoleWithWebIdentity` or `AssumeRoleWithSAML` AWS STS operations. When the resulting role session's temporary credentials are used to make a request, the request context identifies the IdP that authenticated the original federated identity.\n\n**Availability:** This key is present when the principal is a role session principal and that session was issued using a third-party identity provider.\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-federatedprovider",
+            "stability": "experimental",
+            "summary": "Use this key to compare the principal's issuing identity provider (IdP) with the IdP that you specify in the policy."
+          },
+          "locationInModule": {
+            "filename": "lib/shared/policy-statement/2-conditions.ts",
+            "line": 292
+          },
+          "name": "ifAwsFederatedProvider",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The principal's issuing identity provider (IdP)."
+              },
+              "name": "value",
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+              },
+              "name": "operator",
+              "optional": true,
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "cdk-iam-floyd.Operator"
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.PolicyStatementWithCondition"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "For more information about MFA, see [Using Multi-Factor Authentication (MFA) in AWS](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa.html).\n\n**Availability:** This key is included in the request context only if the principal was authenticated using MFA. If MFA was not used, this key is not present.\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-multifactorauthage",
@@ -284702,7 +284953,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 250
+            "line": 309
           },
           "name": "ifAwsMultiFactorAuthAge",
           "parameters": [
@@ -284763,7 +285014,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 274
+            "line": 333
           },
           "name": "ifAwsMultiFactorAuthPresent",
           "parameters": [
@@ -284793,7 +285044,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 292
+            "line": 351
           },
           "name": "ifAwsPrincipalAccount",
           "parameters": [
@@ -284854,7 +285105,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 311
+            "line": 370
           },
           "name": "ifAwsPrincipalArn",
           "parameters": [
@@ -284909,25 +285160,194 @@
         },
         {
           "docs": {
-            "remarks": "**Availability:** This key is present in the request context for all signed API requests that use AWS credentials.\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-principalisawsservice",
+            "remarks": "**Availability:** This key is present in the request context for all signed API requests that use AWS credentials.\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-principalisawsservice",
+            "stability": "experimental",
+            "summary": "Check whether the call to your resource is being made directly by an AWS [service principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html#principal-services). For example, AWS CloudTrail uses the service principal `cloudtrail.amazonaws.com` to write logs to your Amazon S3 bucket. The request context key is set to true when a service uses a service principal to perform a direct action on your resources. The context key is set to false if the service uses the credentials of an IAM principal to make a request on the principal's behalf. It is also set to false if the service uses a [service role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-role) or [service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-linked-role) to make a call on the principal's behalf."
+          },
+          "locationInModule": {
+            "filename": "lib/shared/policy-statement/2-conditions.ts",
+            "line": 390
+          },
+          "name": "ifAwsPrincipalIsAWSService",
+          "parameters": [
+            {
+              "docs": {
+                "remarks": "**Default:** `true`",
+                "summary": "Weather the call to your resource is being made directly by an AWS service principal."
+              },
+              "name": "value",
+              "optional": true,
+              "type": {
+                "primitive": "boolean"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.PolicyStatementWithCondition"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "**Availability:** This key is included in the request context only if the principal is a member of an organization.\n\nThis global key provides an alternative to listing all the account IDs for all AWS accounts in an organization. You can use this condition key to simplify specifying the `Principal` element in a resource-based policy. You can specify the organization ID in the condition element. When you add and remove accounts, policies that include the `aws:PrincipalOrgID` key automatically include the correct accounts and don't require manual updating.\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-principalorgid",
+            "stability": "experimental",
+            "summary": "Compare the identifier of the organization in AWS Organizations to which the requesting principal belongs with the identifier you specify."
+          },
+          "locationInModule": {
+            "filename": "lib/shared/policy-statement/2-conditions.ts",
+            "line": 410
+          },
+          "name": "ifAwsPrincipalOrgID",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "Organization ID(s) in format `o-xxxxxxxxxxx`."
+              },
+              "name": "value",
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+              },
+              "name": "operator",
+              "optional": true,
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "cdk-iam-floyd.Operator"
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.PolicyStatementWithCondition"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "That principal can be an IAM user, IAM role, federated user, or AWS account root user.\n\nThis condition ensures that the requester is an account member within the specified organization root or organizational units (OUs) in AWS Organizations. An AWS Organizations path is a text representation of the structure of an Organizations entity. For more information about using and understanding paths, see Understand the [AWS Organizations Entity Path](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_access-advisor-view-data-orgs.html#access_policies_access-advisor-viewing-orgs-entity-path).\n\n**Availability:** This key is included in the request context only if the principal is a member of an organization.\n\n**Note:** Organization IDs are globally unique but OU IDs and root IDs are unique only within an organization. This means that no two organizations share the same organization ID. However, another organization might have an OU or root with the same ID as yours. We recommend that you always include the organization ID when you specify an OU or root.\n\n`aws:PrincipalOrgPaths` is a multivalued condition key. Multivalued keys include one or more values in a list format. The result is a logical `OR`. When you use multiple values with the `ForAnyValue:` condition operator, the principal's path must match one of the paths provided. For policies that include multiple values for a single key, you must enclose the conditions within brackets like an array (`\"Key\":[\"Value1\", \"Value2\"]`). You should also include these brackets when there is a single value. For more information about multivalued condition keys, see [Creating a Condition with Multiple Keys or Values](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_multi-value-conditions.html).\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-principalorgpaths",
+            "stability": "experimental",
+            "summary": "Compare the AWS Organizations path for the principal who is making the request to the path you provide."
+          },
+          "locationInModule": {
+            "filename": "lib/shared/policy-statement/2-conditions.ts",
+            "line": 433
+          },
+          "name": "ifAwsPrincipalOrgPaths",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "Organization path(s) in the format of `o-xxxxxxxxxxx/r-xxxxxxxxxx/ou-xxxx-xxxxxxxx/ou-xxxx-xxxxxxxx/`."
+              },
+              "name": "value",
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringEquals`."
+              },
+              "name": "operator",
+              "optional": true,
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "cdk-iam-floyd.Operator"
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.PolicyStatementWithCondition"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "**Availability:** This key is present in the request when the call is made by an AWS service principal. This key is not present in any other situation, including the following:\n\n- If the service uses a [service role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-role) or [service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-linked-role) to make a call on the principal's behalf.\n- If the service uses the credentials of an IAM principal to make a request on the principal's behalf.\n- If the call is made directly by an IAM principal.\n\nYou can use this condition key to limit access to your trusted identities and expected network locations, while safely granting access to an AWS service.\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-principalservicename",
             "stability": "experimental",
-            "summary": "Check whether the call to your resource is being made directly by an AWS [service principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html#principal-services). For example, AWS CloudTrail uses the service principal `cloudtrail.amazonaws.com` to write logs to your Amazon S3 bucket. The request context key is set to true when a service uses a service principal to perform a direct action on your resources. The context key is set to false if the service uses the credentials of an IAM principal to make a request on the principal's behalf. It is also set to false if the service uses a [service role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-role) or [service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-linked-role) to make a call on the principal's behalf."
+            "summary": "Compare the [service principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html#principal-services) name in the policy with the service principal that is making requests to your resources. You can use this key to check whether this call is made by a specific service principal. When a service principal makes a direct request to your resource, the `aws:PrincipalServiceName` key contains the name of the service principal. For example, the AWS CloudTrail service principal name is `cloudtrail.amazonaws.com`."
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 331
+            "line": 456
           },
-          "name": "ifAwsPrincipalIsAWSService",
+          "name": "ifAwsPrincipalServiceName",
           "parameters": [
             {
               "docs": {
-                "remarks": "**Default:** `true`",
-                "summary": "Weather the call to your resource is being made directly by an AWS service principal."
+                "summary": "AWS service name, e.g. `cloudtrail.amazonaws.com`."
               },
               "name": "value",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+              },
+              "name": "operator",
               "optional": true,
               "type": {
-                "primitive": "boolean"
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "cdk-iam-floyd.Operator"
+                    }
+                  ]
+                }
               }
             }
           ],
@@ -284939,42 +285359,33 @@
         },
         {
           "docs": {
-            "remarks": "**Availability:** This key is included in the request context only if the principal is a member of an organization.\n\nThis global key provides an alternative to listing all the account IDs for all AWS accounts in an organization. You can use this condition key to simplify specifying the `Principal` element in a resource-based policy. You can specify the organization ID in the condition element. When you add and remove accounts, policies that include the `aws:PrincipalOrgID` key automatically include the correct accounts and don't require manual updating.\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-principalorgid",
+            "remarks": "**Availability:** This key is present in the request when the call is made by an AWS service principal. This key is not present in any other situation, including the following:\n\n- If the service uses a [service role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-role) or [service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-linked-role) to make a call on the principal's behalf.\n- If the service uses the credentials of an IAM principal to make a request on the principal's behalf.\n- If the call is made directly by an IAM principal.\n\n`aws:PrincipalServiceNamesList` is a multivalued condition key. Multivalued keys include one or more values in a list format. The result is a logical `OR`. You must use the `ForAnyValue` or `ForAllValues` set operators with the `StringLike` [condition operator](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String) when you use this key. For policies that include multiple values for a single key, you must enclose the conditions within brackets like an array, such as `(\"Key\":[\"Value1\", \"Value2\"])`. You should also include these brackets when there is a single value. For more information about multivalued condition keys, see [Using multiple keys and values](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_multi-value-conditions.html#reference_policies_multi-key-or-value-conditions).\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-principalservicenameslist",
             "stability": "experimental",
-            "summary": "Compare the identifier of the organization in AWS Organizations to which the requesting principal belongs with the identifier you specify."
+            "summary": "This key provides a list of all [service principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html#principal-services) names that belong to the service. This is an advanced condition key. You can use it to restrict the service from accessing your resource from a specific Region only. Some services may create Regional service principals to indicate a particular instance of the service within a specific Region. You can limit access to a resource to a particular instance of the service. When a service principal makes a direct request to your resource, the `aws:PrincipalServiceNamesList` contains an unordered list of all service principal names associated with the Regional instance of the service."
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 351
+            "line": 479
           },
-          "name": "ifAwsPrincipalOrgID",
+          "name": "ifAwsPrincipalServiceNamesList",
           "parameters": [
             {
               "docs": {
-                "summary": "Organization ID(s) in format `o-xxxxxxxxxxx`."
+                "summary": "AWS service name list."
               },
               "name": "value",
               "type": {
-                "union": {
-                  "types": [
-                    {
-                      "primitive": "string"
-                    },
-                    {
-                      "collection": {
-                        "elementtype": {
-                          "primitive": "string"
-                        },
-                        "kind": "array"
-                      }
-                    }
-                  ]
+                "collection": {
+                  "elementtype": {
+                    "primitive": "string"
+                  },
+                  "kind": "array"
                 }
               }
             },
             {
               "docs": {
-                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `ForAnyValue:StringLike`."
               },
               "name": "operator",
               "optional": true,
@@ -285000,19 +285411,28 @@
         },
         {
           "docs": {
-            "remarks": "That principal can be an IAM user, IAM role, federated user, or AWS account root user.\n\nThis condition ensures that the requester is an account member within the specified organization root or organizational units (OUs) in AWS Organizations. An AWS Organizations path is a text representation of the structure of an Organizations entity. For more information about using and understanding paths, see Understand the [AWS Organizations Entity Path](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_access-advisor-view-data-orgs.html#access_policies_access-advisor-viewing-orgs-entity-path).\n\n**Availability:** This key is included in the request context only if the principal is a member of an organization.\n\n**Note:** Organization IDs are globally unique but OU IDs and root IDs are unique only within an organization. This means that no two organizations share the same organization ID. However, another organization might have an OU or root with the same ID as yours. We recommend that you always include the organization ID when you specify an OU or root.\n\n`aws:PrincipalOrgPaths` is a multivalued condition key. Multivalued keys include one or more values in a list format. The result is a logical `OR`. When you use multiple values with the `ForAnyValue:` condition operator, the principal's path must match one of the paths provided. For policies that include multiple values for a single key, you must enclose the conditions within brackets like an array (`\"Key\":[\"Value1\", \"Value2\"]`). You should also include these brackets when there is a single value. For more information about multivalued condition keys, see [Creating a Condition with Multiple Keys or Values](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_multi-value-conditions.html).\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-principalorgpaths",
+            "remarks": "If the principal has more than one tag attached, the request context includes one aws:PrincipalTag key for each attached tag key.\n\n**Availability:** This key is included in the request context if the principal is using an IAM user with attached tags. It is included for a principal using an IAM role with attached tags or [session tags](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html).\n\nYou can add custom attributes to a user or role in the form of a key-value pair. For more information about IAM tags, see [Tagging IAM Users and Roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html). You can use `aws:PrincipalTag` to [control access](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_iam-tags.html#access_iam-tags_control-resources) for AWS principals.\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-principaltag",
             "stability": "experimental",
-            "summary": "Compare the AWS Organizations path for the principal who is making the request to the path you provide."
+            "summary": "Compare the tag attached to the principal making the request with the tag that you specify."
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 374
+            "line": 503
           },
-          "name": "ifAwsPrincipalOrgPaths",
+          "name": "ifAwsPrincipalTag",
           "parameters": [
             {
               "docs": {
-                "summary": "Organization path(s) in the format of `o-xxxxxxxxxxx/r-xxxxxxxxxx/ou-xxxx-xxxxxxxx/ou-xxxx-xxxxxxxx/`."
+                "summary": "The tag key to check."
+              },
+              "name": "key",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "The tag value(s) to check against."
               },
               "name": "value",
               "type": {
@@ -285035,7 +285455,7 @@
             },
             {
               "docs": {
-                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringEquals`."
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
               },
               "name": "operator",
               "optional": true,
@@ -285061,28 +285481,43 @@
         },
         {
           "docs": {
-            "remarks": "**Availability:** This key is present in the request when the call is made by an AWS service principal. This key is not present in any other situation, including the following:\n\n- If the service uses a [service role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-role) or [service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-linked-role) to make a call on the principal's behalf.\n- If the service uses the credentials of an IAM principal to make a request on the principal's behalf.\n- If the call is made directly by an IAM principal.\n\nYou can use this condition key to limit access to your trusted identities and expected network locations, while safely granting access to an AWS service.\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-principalservicename",
+            "remarks": "For details about how the information appears in the request context for different principals, see [Specifying a Principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html#Principal_specifying).\n\n**Availability:** This key is always included in the request context.\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-principaltype",
             "stability": "experimental",
-            "summary": "Compare the [service principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html#principal-services) name in the policy with the service principal that is making requests to your resources. You can use this key to check whether this call is made by a specific service principal. When a service principal makes a direct request to your resource, the `aws:PrincipalServiceName` key contains the name of the service principal. For example, the AWS CloudTrail service principal name is `cloudtrail.amazonaws.com`."
+            "summary": "Compare the type of principal making the request with the principal type that you specify."
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 397
+            "line": 521
           },
-          "name": "ifAwsPrincipalServiceName",
+          "name": "ifAwsPrincipalType",
           "parameters": [
             {
               "docs": {
-                "summary": "AWS service name, e.g. `cloudtrail.amazonaws.com`."
+                "remarks": "Any of `Account`, `User`, `FederatedUser`, `AssumedRole`, `Anonymous`",
+                "summary": "The principal type(s)."
               },
               "name": "value",
               "type": {
-                "primitive": "string"
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
               }
             },
             {
               "docs": {
-                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringEquals`."
               },
               "name": "operator",
               "optional": true,
@@ -285108,33 +285543,42 @@
         },
         {
           "docs": {
-            "remarks": "**Availability:** This key is present in the request when the call is made by an AWS service principal. This key is not present in any other situation, including the following:\n\n- If the service uses a [service role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-role) or [service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-linked-role) to make a call on the principal's behalf.\n- If the service uses the credentials of an IAM principal to make a request on the principal's behalf.\n- If the call is made directly by an IAM principal.\n\n`aws:PrincipalServiceNamesList` is a multivalued condition key. Multivalued keys include one or more values in a list format. The result is a logical `OR`. You must use the `ForAnyValue` or `ForAllValues` set operators with the `StringLike` [condition operator](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String) when you use this key. For policies that include multiple values for a single key, you must enclose the conditions within brackets like an array, such as `(\"Key\":[\"Value1\", \"Value2\"])`. You should also include these brackets when there is a single value. For more information about multivalued condition keys, see [Using multiple keys and values](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_multi-value-conditions.html#reference_policies_multi-key-or-value-conditions).\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-principalservicenameslist",
+            "remarks": "The `aws:referer` request context value is provided by the caller in an HTTP header.\n\n**Availability:** This key is included in the request context only if the request was invoked using a URL in the browser.\n\nFor example, you can call [Amazon S3 API operations directly using a web browser](https://docs.aws.amazon.com/AmazonS3/latest/dev/example-bucket-policies.html#example-bucket-policies-use-case-4). This means that you can view S3 objects, such as images and documents, directly through a web browser. The `aws:referer` condition allows you to restrict access to specific values in the HTTP or HTTPS request based on the value of the referrer header.\n\n**Warning:** This condition should be used carefully. It is dangerous to include a publicly known referer header value. Unauthorized parties can use modified or custom browsers to provide any `aws:referer` value that they choose. As a result, `aws:referer` should not be used to prevent unauthorized parties from making direct AWS requests. It is offered only to allow customers to protect their digital content, such as content stored in Amazon S3, from being referenced on unauthorized third-party sites.\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-referer",
             "stability": "experimental",
-            "summary": "This key provides a list of all [service principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html#principal-services) names that belong to the service. This is an advanced condition key. You can use it to restrict the service from accessing your resource from a specific Region only. Some services may create Regional service principals to indicate a particular instance of the service within a specific Region. You can limit access to a resource to a particular instance of the service. When a service principal makes a direct request to your resource, the `aws:PrincipalServiceNamesList` contains an unordered list of all service principal names associated with the Regional instance of the service."
+            "summary": "Compare who referred the request in the client browser with the referer that you specify."
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 420
+            "line": 542
           },
-          "name": "ifAwsPrincipalServiceNamesList",
+          "name": "ifAwsReferer",
           "parameters": [
             {
               "docs": {
-                "summary": "AWS service name list."
+                "summary": "The referer url(s)."
               },
               "name": "value",
               "type": {
-                "collection": {
-                  "elementtype": {
-                    "primitive": "string"
-                  },
-                  "kind": "array"
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
                 }
               }
             },
             {
               "docs": {
-                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `ForAnyValue:StringLike`."
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
               },
               "name": "operator",
               "optional": true,
@@ -285160,28 +285604,19 @@
         },
         {
           "docs": {
-            "remarks": "If the principal has more than one tag attached, the request context includes one aws:PrincipalTag key for each attached tag key.\n\n**Availability:** This key is included in the request context if the principal is using an IAM user with attached tags. It is included for a principal using an IAM role with attached tags or [session tags](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html).\n\nYou can add custom attributes to a user or role in the form of a key-value pair. For more information about IAM tags, see [Tagging IAM Users and Roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html). You can use `aws:PrincipalTag` to [control access](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_iam-tags.html#access_iam-tags_control-resources) for AWS principals.\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-principaltag",
+            "remarks": "You can use this global condition key to control which Regions can be requested. To view the AWS Regions for each service, see [Service endpoints and quotas](https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html) in the Amazon Web Services General Reference.\n\n**Availability:** This key is always included in the request context.\n\nSome global services, such as IAM, have a single endpoint. Because this endpoint is physically located in the US East (N. Virginia) Region, IAM calls are always made to the us-east-1 Region. For example, if you create a policy that denies access to all services if the requested Region is not us-west-2, then IAM calls always fail. To view an example of how to work around this, see [NotAction with Deny](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_notaction.html).\n\n**Note:** The `aws:RequestedRegion` condition key allows you to control which endpoint of a service is invoked but does not control the impact of the operation. Some services have cross-Region impacts. For example, Amazon S3 has API operations that control cross-Region replication. You can invoke `s3:PutBucketReplication` in one Region (which is affected by the `aws:RequestedRegion` condition key), but other Regions are affected based on the replications configuration settings.\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requestedregion",
             "stability": "experimental",
-            "summary": "Compare the tag attached to the principal making the request with the tag that you specify."
+            "summary": "Compare the AWS Region that was called in the request with the Region that you specify."
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 444
+            "line": 560
           },
-          "name": "ifAwsPrincipalTag",
+          "name": "ifAwsRequestedRegion",
           "parameters": [
             {
               "docs": {
-                "summary": "The tag key to check."
-              },
-              "name": "key",
-              "type": {
-                "primitive": "string"
-              }
-            },
-            {
-              "docs": {
-                "summary": "The tag value(s) to check against."
+                "summary": "The region(s)."
               },
               "name": "value",
               "type": {
@@ -285204,7 +285639,7 @@
             },
             {
               "docs": {
-                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringEquals`."
               },
               "name": "operator",
               "optional": true,
@@ -285230,20 +285665,28 @@
         },
         {
           "docs": {
-            "remarks": "For details about how the information appears in the request context for different principals, see [Specifying a Principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html#Principal_specifying).\n\n**Availability:** This key is always included in the request context.\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-principaltype",
+            "remarks": "For example, you could check whether the request includes the tag key `Dept` and that it has the value `Accounting`. For more information, see [Controlling Access During AWS Requests](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_tags.html#access_tags_control-requests).\n\n**Availability:** This key is included in the request context when tags are passed in the request. When multiple tags are passed in the request, there is one context key for each tag key-value pair.\n\nBecause you can include multiple tag key-value pairs in a request, the request content could be a multivalued request. In this case, you should consider using the `ForAllValues` or `ForAnyValue` set operators. For more information, see [Using Multiple Keys and Values](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_multi-value-conditions.html#reference_policies_multi-key-or-value-conditions).\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag",
             "stability": "experimental",
-            "summary": "Compare the type of principal making the request with the principal type that you specify."
+            "summary": "Compare the tag key-value pair that was passed in the request with the tag pair that you specify."
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 462
+            "line": 580
           },
-          "name": "ifAwsPrincipalType",
+          "name": "ifAwsRequestTag",
           "parameters": [
             {
               "docs": {
-                "remarks": "Any of `Account`, `User`, `FederatedUser`, `AssumedRole`, `Anonymous`",
-                "summary": "The principal type(s)."
+                "summary": "The tag key to check."
+              },
+              "name": "key",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "The tag value(s) to check against."
               },
               "name": "value",
               "type": {
@@ -285266,7 +285709,7 @@
             },
             {
               "docs": {
-                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringEquals`."
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
               },
               "name": "operator",
               "optional": true,
@@ -285292,19 +285735,19 @@
         },
         {
           "docs": {
-            "remarks": "The `aws:referer` request context value is provided by the caller in an HTTP header.\n\n**Availability:** This key is included in the request context only if the request was invoked using a URL in the browser.\n\nFor example, you can call [Amazon S3 API operations directly using a web browser](https://docs.aws.amazon.com/AmazonS3/latest/dev/example-bucket-policies.html#example-bucket-policies-use-case-4). This means that you can view S3 objects, such as images and documents, directly through a web browser. The `aws:referer` condition allows you to restrict access to specific values in the HTTP or HTTPS request based on the value of the referrer header.\n\n**Warning:** This condition should be used carefully. It is dangerous to include a publicly known referer header value. Unauthorized parties can use modified or custom browsers to provide any `aws:referer` value that they choose. As a result, `aws:referer` should not be used to prevent unauthorized parties from making direct AWS requests. It is offered only to allow customers to protect their digital content, such as content stored in Amazon S3, from being referenced on unauthorized third-party sites.\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-referer",
+            "remarks": "This key is equal to the AWS account ID for the account with the resources evaluated in the request.\n\nFor most resources in your account, the ARN contains the owner account ID for that resource. For certain resources, such as Amazon S3 buckets, the resource ARN does not include the account ID. The following two examples show the difference between a resource with an account ID in the ARN, and an Amazon S3 ARN without an account ID:\n\n- `arn:aws:iam::123456789012:role/AWSExampleRole` - IAM role created and owned within the account 123456789012.\n- `arn:aws:s3:::DOC-EXAMPLE-BUCKET2` - Amazon S3 bucket created and owned within the account 111122223333, not displayed in the ARN.\n\n**Availability:** This key is always included in the request context for most service actions. The following actions don't support this key:\n\n   - Amazon Elastic Block Store - All actions\n   - Amazon EC2\n     - `ec2:CopyFpgaImage`\n     - `ec2:CopyImage`\n     - `ec2:CopySnapshot`\n     - `ec2:CreateTransitGatewayPeeringAttachment`\n     - `ec2:CreateVolume`\n     - `ec2:CreateVpcPeeringConnection`\n   - Amazon EventBridge - All actions\n   - Amazon WorkSpaces\n     - `workspaces:CopyWorkspaceImage`\n     - `workspaces:DescribeWorkspaceImages`\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourceaccount",
             "stability": "experimental",
-            "summary": "Compare who referred the request in the client browser with the referer that you specify."
+            "summary": "Use this key to compare the requested resource owner's [AWS account ID](https://docs.aws.amazon.com/general/latest/gr/acct-identifiers.html) with the resource account in the policy. You can then allow or deny access to that resource based on the account that owns the resource."
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 483
+            "line": 618
           },
-          "name": "ifAwsReferer",
+          "name": "ifAwsResourceAccount",
           "parameters": [
             {
               "docs": {
-                "summary": "The referer url(s)."
+                "summary": "The account ID."
               },
               "name": "value",
               "type": {
@@ -285353,19 +285796,19 @@
         },
         {
           "docs": {
-            "remarks": "You can use this global condition key to control which Regions can be requested. To view the AWS Regions for each service, see [Service endpoints and quotas](https://docs.aws.amazon.com/general/latest/gr/aws-service-information.html) in the Amazon Web Services General Reference.\n\n**Availability:** This key is always included in the request context.\n\nSome global services, such as IAM, have a single endpoint. Because this endpoint is physically located in the US East (N. Virginia) Region, IAM calls are always made to the us-east-1 Region. For example, if you create a policy that denies access to all services if the requested Region is not us-west-2, then IAM calls always fail. To view an example of how to work around this, see [NotAction with Deny](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_notaction.html).\n\n**Note:** The `aws:RequestedRegion` condition key allows you to control which endpoint of a service is invoked but does not control the impact of the operation. Some services have cross-Region impacts. For example, Amazon S3 has API operations that control cross-Region replication. You can invoke `s3:PutBucketReplication` in one Region (which is affected by the `aws:RequestedRegion` condition key), but other Regions are affected based on the replications configuration settings.\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requestedregion",
+            "remarks": "This global key returns the resource organization ID for a given request. It allows you to create rules that apply to all resources in an organization that are specified in the Resource element of an [identity-based policy](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_identity-vs-resource.html). You can specify the [organization ID](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_details.html) in the condition element. When you add and remove accounts, policies that include the aws:ResourceOrgID key automatically include the correct accounts and you don't have to manually update it.\n\n**Note:** Some AWS services require access to AWS owned resources that are hosted in another AWS account. Using `aws:ResourceOrgID` in your identity-based policies might impact your identity's ability to access these resources.\n\n**Availability:** This key is included in the request context only if the account that owns the resource is a member of an organization. This global condition key does not support the following actions:\n\n- Amazon Elastic Block Store - All actions\n- Amazon EC2\n   - `ec2:CopyFpgaImage`\n   - `ec2:CopyImage`\n   - `ec2:CopySnapshot`\n   - `ec2:CreateTransitGatewayPeeringAttachment`\n   - `ec2:CreateVolume`\n   - `ec2:CreateVpcPeeringConnection`\n- Amazon EventBridge - All actions\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourceorgid",
             "stability": "experimental",
-            "summary": "Compare the AWS Region that was called in the request with the Region that you specify."
+            "summary": "Use this key to compare the identifier of the organization in AWS Organizations to which the requested resource belongs with the identifier specified in the policy."
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 501
+            "line": 649
           },
-          "name": "ifAwsRequestedRegion",
+          "name": "ifAwsResourceOrgID",
           "parameters": [
             {
               "docs": {
-                "summary": "The region(s)."
+                "summary": "ID of an organization."
               },
               "name": "value",
               "type": {
@@ -285388,7 +285831,7 @@
             },
             {
               "docs": {
-                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringEquals`."
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
               },
               "name": "operator",
               "optional": true,
@@ -285414,28 +285857,19 @@
         },
         {
           "docs": {
-            "remarks": "For example, you could check whether the request includes the tag key `Dept` and that it has the value `Accounting`. For more information, see [Controlling Access During AWS Requests](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_tags.html#access_tags_control-requests).\n\n**Availability:** This key is included in the request context when tags are passed in the request. When multiple tags are passed in the request, there is one context key for each tag key-value pair.\n\nBecause you can include multiple tag key-value pairs in a request, the request content could be a multivalued request. In this case, you should consider using the `ForAllValues` or `ForAnyValue` set operators. For more information, see [Using Multiple Keys and Values](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_multi-value-conditions.html#reference_policies_multi-key-or-value-conditions).\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag",
+            "remarks": "In a policy, this condition key ensures that the resource belongs to an account member within the specified organization root or organizational units (OUs) in AWS Organizations. An AWS Organizations path is a text representation of the structure of an Organizations entity. For more information about using and understanding paths, see [Understand the AWS Organizations entity path](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_access-advisor-view-data-orgs.html#access_policies_access-advisor-viewing-orgs-entity-path).\n\n`aws:ResourceOrgPaths` is a multivalued condition key. Multivalued keys can have multiple values in the request context. You must use the `ForAnyValue` or `ForAllValues` set operators with [string condition operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String) for this key. For more information about multivalued condition keys, see [Using multiple keys and values](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_multi-value-conditions.html#reference_policies_multi-key-or-value-conditions).\n\n**Note:** Some AWS services require access to AWS owned resources that are hosted in another AWS account. Using aws:ResourceOrgPaths in your identity-based policies might impact your identity's ability to access these resources.\n\n**Availability:** This key is included in the request context only if the account that owns the resource is a member of an organization. This global condition key does not support the following actions:\n\n- Amazon Elastic Block Store - All actions\n- Amazon EC2\n   - `ec2:CopyFpgaImage`\n   - `ec2:CopyImage`\n   - `ec2:CopySnapshot`\n   - `ec2:CreateTransitGatewayPeeringAttachment`\n   - `ec2:CreateVolume`\n   - `ec2:CreateVpcPeeringConnection`\n- Amazon EventBridge - All actions\n- Amazon WorkSpaces\n   - `workspaces:CopyWorkspaceImage`\n   - `workspaces:DescribeWorkspaceImages`\n\nhttps://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourceorgpaths",
             "stability": "experimental",
-            "summary": "Compare the tag key-value pair that was passed in the request with the tag pair that you specify."
+            "summary": "Use this key to compare the AWS Organizations path for the accessed resource to the path in the policy."
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 521
+            "line": 683
           },
-          "name": "ifAwsRequestTag",
+          "name": "ifAwsResourceOrgPaths",
           "parameters": [
             {
               "docs": {
-                "summary": "The tag key to check."
-              },
-              "name": "key",
-              "type": {
-                "primitive": "string"
-              }
-            },
-            {
-              "docs": {
-                "summary": "The tag value(s) to check against."
+                "summary": "The path of an organization."
               },
               "name": "value",
               "type": {
@@ -285490,7 +285924,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 540
+            "line": 701
           },
           "name": "ifAwsResourceTag",
           "parameters": [
@@ -285560,7 +285994,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 557
+            "line": 718
           },
           "name": "ifAwsSecureTransport",
           "parameters": [
@@ -285590,7 +286024,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 577
+            "line": 738
           },
           "name": "ifAwsSourceAccount",
           "parameters": [
@@ -285651,7 +286085,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 598
+            "line": 759
           },
           "name": "ifAwsSourceArn",
           "parameters": [
@@ -285712,7 +286146,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 625
+            "line": 786
           },
           "name": "ifAwsSourceIdentity",
           "parameters": [
@@ -285773,7 +286207,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 644
+            "line": 805
           },
           "name": "ifAwsSourceIp",
           "parameters": [
@@ -285834,7 +286268,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 662
+            "line": 823
           },
           "name": "ifAwsSourceVpc",
           "parameters": [
@@ -285895,7 +286329,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 679
+            "line": 840
           },
           "name": "ifAwsSourceVpce",
           "parameters": [
@@ -285956,7 +286390,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 700
+            "line": 861
           },
           "name": "ifAwsTagKeys",
           "parameters": [
@@ -286017,7 +286451,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 716
+            "line": 877
           },
           "name": "ifAwsTokenIssueTime",
           "parameters": [
@@ -286074,7 +286508,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 739
+            "line": 900
           },
           "name": "ifAwsUserAgent",
           "parameters": [
@@ -286135,7 +286569,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 756
+            "line": 917
           },
           "name": "ifAwsUserid",
           "parameters": [
@@ -286196,7 +286630,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 770
+            "line": 931
           },
           "name": "ifAwsUsername",
           "parameters": [
@@ -286257,7 +286691,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 793
+            "line": 954
           },
           "name": "ifAwsViaAWSService",
           "parameters": [
@@ -286287,7 +286721,7 @@
           },
           "locationInModule": {
             "filename": "lib/shared/policy-statement/2-conditions.ts",
-            "line": 813
+            "line": 974
           },
           "name": "ifAwsVpcSourceIp",
           "parameters": [
@@ -332166,7 +332600,7 @@
         },
         "locationInModule": {
           "filename": "lib/generated/sagemaker.ts",
-          "line": 6268
+          "line": 6292
         },
         "parameters": [
           {
@@ -332192,7 +332626,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5526
+            "line": 5550
           },
           "name": "ifAcceleratorTypes",
           "parameters": [
@@ -332253,7 +332687,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5541
+            "line": 5565
           },
           "name": "ifAppNetworkAccessType",
           "parameters": [
@@ -332314,7 +332748,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5558
+            "line": 5582
           },
           "name": "ifCustomerMetadataProperties",
           "parameters": [
@@ -332384,7 +332818,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5573
+            "line": 5597
           },
           "name": "ifCustomerMetadataPropertiesToRemove",
           "parameters": [
@@ -332445,7 +332879,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5588
+            "line": 5612
           },
           "name": "ifDirectInternetAccess",
           "parameters": [
@@ -332506,7 +332940,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5606
+            "line": 5630
           },
           "name": "ifDomainSharingOutputKmsKey",
           "parameters": [
@@ -332567,7 +333001,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5620
+            "line": 5644
           },
           "name": "ifFeatureGroupDisableGlueTableCreation",
           "parameters": [
@@ -332597,7 +333031,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5634
+            "line": 5658
           },
           "name": "ifFeatureGroupEnableOnlineStore",
           "parameters": [
@@ -332627,7 +333061,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5648
+            "line": 5672
           },
           "name": "ifFeatureGroupOfflineStoreConfig",
           "parameters": [
@@ -332657,7 +333091,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5663
+            "line": 5687
           },
           "name": "ifFeatureGroupOfflineStoreKmsKey",
           "parameters": [
@@ -332718,7 +333152,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5678
+            "line": 5702
           },
           "name": "ifFeatureGroupOfflineStoreS3Uri",
           "parameters": [
@@ -332779,7 +333213,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5693
+            "line": 5717
           },
           "name": "ifFeatureGroupOnlineStoreKmsKey",
           "parameters": [
@@ -332840,7 +333274,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5709
+            "line": 5733
           },
           "name": "ifFileSystemAccessMode",
           "parameters": [
@@ -332901,7 +333335,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5725
+            "line": 5749
           },
           "name": "ifFileSystemDirectoryPath",
           "parameters": [
@@ -332962,7 +333396,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5741
+            "line": 5765
           },
           "name": "ifFileSystemId",
           "parameters": [
@@ -333023,7 +333457,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5757
+            "line": 5781
           },
           "name": "ifFileSystemType",
           "parameters": [
@@ -333084,7 +333518,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5769
+            "line": 5793
           },
           "name": "ifHomeEfsFileSystemKmsKey",
           "parameters": [
@@ -333145,7 +333579,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5790
+            "line": 5814
           },
           "name": "ifImageArns",
           "parameters": [
@@ -333206,7 +333640,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5811
+            "line": 5835
           },
           "name": "ifImageVersionArns",
           "parameters": [
@@ -333267,7 +333701,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5846
+            "line": 5870
           },
           "name": "ifInstanceTypes",
           "parameters": [
@@ -333328,7 +333762,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5869
+            "line": 5893
           },
           "name": "ifInterContainerTrafficEncryption",
           "parameters": [
@@ -333358,7 +333792,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5885
+            "line": 5909
           },
           "name": "ifKeepAlivePeriod",
           "parameters": [
@@ -333419,7 +333853,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5908
+            "line": 5932
           },
           "name": "ifMaxRuntimeInSeconds",
           "parameters": [
@@ -333480,7 +333914,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5924
+            "line": 5948
           },
           "name": "ifMinimumInstanceMetadataServiceVersion",
           "parameters": [
@@ -333541,7 +333975,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5940
+            "line": 5964
           },
           "name": "ifModelApprovalStatus",
           "parameters": [
@@ -333602,7 +334036,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5956
+            "line": 5980
           },
           "name": "ifModelArn",
           "parameters": [
@@ -333663,7 +334097,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5979
+            "line": 6003
           },
           "name": "ifNetworkIsolation",
           "parameters": [
@@ -333693,7 +334127,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 6005
+            "line": 6029
           },
           "name": "ifOutputKmsKey",
           "parameters": [
@@ -333754,7 +334188,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 6081
+            "line": 6105
           },
           "name": "ifResourceTag",
           "parameters": [
@@ -333824,7 +334258,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 6017
+            "line": 6041
           },
           "name": "ifResourceTagExists",
           "parameters": [
@@ -333885,7 +334319,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 6097
+            "line": 6121
           },
           "name": "ifRootAccess",
           "parameters": [
@@ -333946,7 +334380,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 6112
+            "line": 6136
           },
           "name": "ifServerlessMaxConcurrency",
           "parameters": [
@@ -334007,7 +334441,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 6127
+            "line": 6151
           },
           "name": "ifServerlessMemorySize",
           "parameters": [
@@ -334068,7 +334502,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 6142
+            "line": 6166
           },
           "name": "ifTargetModel",
           "parameters": [
@@ -334129,7 +334563,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 6171
+            "line": 6195
           },
           "name": "ifVolumeKmsKey",
           "parameters": [
@@ -334190,7 +334624,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 6201
+            "line": 6225
           },
           "name": "ifVpcSecurityGroupIds",
           "parameters": [
@@ -334251,7 +334685,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 6228
+            "line": 6252
           },
           "name": "ifVpcSubnets",
           "parameters": [
@@ -334312,7 +334746,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 6244
+            "line": 6268
           },
           "name": "ifWorkteamArn",
           "parameters": [
@@ -334373,7 +334807,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 6260
+            "line": 6284
           },
           "name": "ifWorkteamType",
           "parameters": [
@@ -334434,7 +334868,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5426
+            "line": 5450
           },
           "name": "onAction",
           "parameters": [
@@ -334495,7 +334929,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4946
+            "line": 4970
           },
           "name": "onAlgorithm",
           "parameters": [
@@ -334556,7 +334990,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4809
+            "line": 4833
           },
           "name": "onApp",
           "parameters": [
@@ -334644,7 +335078,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4827
+            "line": 4851
           },
           "name": "onAppImageConfig",
           "parameters": [
@@ -334705,7 +335139,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5390
+            "line": 5414
           },
           "name": "onArtifact",
           "parameters": [
@@ -334766,7 +335200,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5162
+            "line": 5186
           },
           "name": "onAutomlJob",
           "parameters": [
@@ -334827,7 +335261,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4895
+            "line": 4919
           },
           "name": "onCodeRepository",
           "parameters": [
@@ -334888,7 +335322,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5144
+            "line": 5168
           },
           "name": "onCompilationJob",
           "parameters": [
@@ -334949,7 +335383,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5408
+            "line": 5432
           },
           "name": "onContext",
           "parameters": [
@@ -335010,7 +335444,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5213
+            "line": 5237
           },
           "name": "onDataQualityJobDefinition",
           "parameters": [
@@ -335071,7 +335505,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4508
+            "line": 4532
           },
           "name": "onDevice",
           "parameters": [
@@ -335141,7 +335575,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4526
+            "line": 4550
           },
           "name": "onDeviceFleet",
           "parameters": [
@@ -335202,7 +335636,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4750
+            "line": 4774
           },
           "name": "onDomain",
           "parameters": [
@@ -335263,7 +335697,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4562
+            "line": 4586
           },
           "name": "onEdgeDeploymentPlan",
           "parameters": [
@@ -335324,7 +335758,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4544
+            "line": 4568
           },
           "name": "onEdgePackagingJob",
           "parameters": [
@@ -335385,7 +335819,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5108
+            "line": 5132
           },
           "name": "onEndpoint",
           "parameters": [
@@ -335446,7 +335880,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5090
+            "line": 5114
           },
           "name": "onEndpointConfig",
           "parameters": [
@@ -335507,7 +335941,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5285
+            "line": 5309
           },
           "name": "onExperiment",
           "parameters": [
@@ -335568,7 +336002,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5303
+            "line": 5327
           },
           "name": "onExperimentTrial",
           "parameters": [
@@ -335629,7 +336063,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5321
+            "line": 5345
           },
           "name": "onExperimentTrialComponent",
           "parameters": [
@@ -335690,7 +336124,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5339
+            "line": 5363
           },
           "name": "onFeatureGroup",
           "parameters": [
@@ -335751,7 +336185,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4594
+            "line": 4618
           },
           "name": "onFlowDefinition",
           "parameters": [
@@ -335812,7 +336246,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4626
+            "line": 4650
           },
           "name": "onHub",
           "parameters": [
@@ -335873,7 +336307,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4642
+            "line": 4666
           },
           "name": "onHubContent",
           "parameters": [
@@ -335952,7 +336386,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4576
+            "line": 4600
           },
           "name": "onHumanLoop",
           "parameters": [
@@ -336013,7 +336447,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4612
+            "line": 4636
           },
           "name": "onHumanTaskUi",
           "parameters": [
@@ -336074,7 +336508,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5000
+            "line": 5024
           },
           "name": "onHyperParameterTuningJob",
           "parameters": [
@@ -336135,7 +336569,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4913
+            "line": 4937
           },
           "name": "onImage",
           "parameters": [
@@ -336196,7 +336630,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4928
+            "line": 4952
           },
           "name": "onImageVersion",
           "parameters": [
@@ -336266,7 +336700,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4678
+            "line": 4702
           },
           "name": "onInferenceExperiment",
           "parameters": [
@@ -336327,7 +336761,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4660
+            "line": 4684
           },
           "name": "onInferenceRecommendationsJob",
           "parameters": [
@@ -336388,7 +336822,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4696
+            "line": 4720
           },
           "name": "onLabelingJob",
           "parameters": [
@@ -336449,7 +336883,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5444
+            "line": 5468
           },
           "name": "onLineageGroup",
           "parameters": [
@@ -336510,7 +336944,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5072
+            "line": 5096
           },
           "name": "onModel",
           "parameters": [
@@ -336571,7 +337005,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5249
+            "line": 5273
           },
           "name": "onModelBiasJobDefinition",
           "parameters": [
@@ -336632,7 +337066,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5462
+            "line": 5486
           },
           "name": "onModelCard",
           "parameters": [
@@ -336693,7 +337127,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5481
+            "line": 5505
           },
           "name": "onModelCardExportJob",
           "parameters": [
@@ -336763,7 +337197,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5267
+            "line": 5291
           },
           "name": "onModelExplainabilityJobDefinition",
           "parameters": [
@@ -336824,7 +337258,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5036
+            "line": 5060
           },
           "name": "onModelPackage",
           "parameters": [
@@ -336885,7 +337319,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5054
+            "line": 5078
           },
           "name": "onModelPackageGroup",
           "parameters": [
@@ -336946,7 +337380,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5231
+            "line": 5255
           },
           "name": "onModelQualityJobDefinition",
           "parameters": [
@@ -337007,7 +337441,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5180
+            "line": 5204
           },
           "name": "onMonitoringSchedule",
           "parameters": [
@@ -337068,7 +337502,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5195
+            "line": 5219
           },
           "name": "onMonitoringScheduleAlert",
           "parameters": [
@@ -337138,7 +337572,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4863
+            "line": 4887
           },
           "name": "onNotebookInstance",
           "parameters": [
@@ -337199,7 +337633,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4877
+            "line": 4901
           },
           "name": "onNotebookInstanceLifecycleConfig",
           "parameters": [
@@ -337260,7 +337694,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5357
+            "line": 5381
           },
           "name": "onPipeline",
           "parameters": [
@@ -337321,7 +337755,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5372
+            "line": 5396
           },
           "name": "onPipelineExecution",
           "parameters": [
@@ -337391,7 +337825,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4982
+            "line": 5006
           },
           "name": "onProcessingJob",
           "parameters": [
@@ -337452,7 +337886,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5018
+            "line": 5042
           },
           "name": "onProject",
           "parameters": [
@@ -337513,7 +337947,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5495
+            "line": 5519
           },
           "name": "onSharedModel",
           "parameters": [
@@ -337574,7 +338008,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5509
+            "line": 5533
           },
           "name": "onSharedModelEvent",
           "parameters": [
@@ -337635,7 +338069,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4788
+            "line": 4812
           },
           "name": "onSpace",
           "parameters": [
@@ -337705,7 +338139,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4845
+            "line": 4869
           },
           "name": "onStudioLifecycleConfig",
           "parameters": [
@@ -337766,7 +338200,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4964
+            "line": 4988
           },
           "name": "onTrainingJob",
           "parameters": [
@@ -337827,7 +338261,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 5126
+            "line": 5150
           },
           "name": "onTransformJob",
           "parameters": [
@@ -337888,7 +338322,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4769
+            "line": 4793
           },
           "name": "onUserProfile",
           "parameters": [
@@ -337958,7 +338392,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4732
+            "line": 4756
           },
           "name": "onWorkforce",
           "parameters": [
@@ -338019,7 +338453,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4714
+            "line": 4738
           },
           "name": "onWorkteam",
           "parameters": [
@@ -341234,6 +341668,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/sagemaker/latest/APIReference/API_ListAliases.html",
+            "stability": "experimental",
+            "summary": "Grants permission to list Aliases that belong to a SageMaker Image or Sagemaker ImageVersion."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sagemaker.ts",
+            "line": 2580
+          },
+          "name": "toListAliases",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Sagemaker"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/sagemaker/latest/APIReference/API_ListAppImageConfigs.html",
@@ -341242,7 +341693,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2580
+            "line": 2591
           },
           "name": "toListAppImageConfigs",
           "returns": {
@@ -341259,7 +341710,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2591
+            "line": 2602
           },
           "name": "toListApps",
           "returns": {
@@ -341276,7 +341727,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2602
+            "line": 2613
           },
           "name": "toListArtifacts",
           "returns": {
@@ -341293,7 +341744,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2613
+            "line": 2624
           },
           "name": "toListAssociations",
           "returns": {
@@ -341310,7 +341761,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2624
+            "line": 2635
           },
           "name": "toListAutoMLJobs",
           "returns": {
@@ -341327,7 +341778,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2635
+            "line": 2646
           },
           "name": "toListCandidatesForAutoMLJob",
           "returns": {
@@ -341344,7 +341795,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2646
+            "line": 2657
           },
           "name": "toListCodeRepositories",
           "returns": {
@@ -341361,7 +341812,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2657
+            "line": 2668
           },
           "name": "toListCompilationJobs",
           "returns": {
@@ -341378,7 +341829,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2668
+            "line": 2679
           },
           "name": "toListContexts",
           "returns": {
@@ -341395,7 +341846,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2679
+            "line": 2690
           },
           "name": "toListDataQualityJobDefinitions",
           "returns": {
@@ -341412,7 +341863,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2690
+            "line": 2701
           },
           "name": "toListDeviceFleets",
           "returns": {
@@ -341429,7 +341880,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2701
+            "line": 2712
           },
           "name": "toListDevices",
           "returns": {
@@ -341446,7 +341897,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2712
+            "line": 2723
           },
           "name": "toListDomains",
           "returns": {
@@ -341463,7 +341914,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2723
+            "line": 2734
           },
           "name": "toListEdgeDeploymentPlans",
           "returns": {
@@ -341480,7 +341931,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2734
+            "line": 2745
           },
           "name": "toListEdgePackagingJobs",
           "returns": {
@@ -341497,7 +341948,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2745
+            "line": 2756
           },
           "name": "toListEndpointConfigs",
           "returns": {
@@ -341514,7 +341965,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2756
+            "line": 2767
           },
           "name": "toListEndpoints",
           "returns": {
@@ -341531,7 +341982,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2767
+            "line": 2778
           },
           "name": "toListExperiments",
           "returns": {
@@ -341548,7 +341999,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2778
+            "line": 2789
           },
           "name": "toListFeatureGroups",
           "returns": {
@@ -341565,7 +342016,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2789
+            "line": 2800
           },
           "name": "toListFlowDefinitions",
           "returns": {
@@ -341582,7 +342033,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2811
+            "line": 2822
           },
           "name": "toListHubContents",
           "returns": {
@@ -341599,7 +342050,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2800
+            "line": 2811
           },
           "name": "toListHubContentVersions",
           "returns": {
@@ -341616,7 +342067,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2822
+            "line": 2833
           },
           "name": "toListHubs",
           "returns": {
@@ -341633,7 +342084,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2833
+            "line": 2844
           },
           "name": "toListHumanLoops",
           "returns": {
@@ -341650,7 +342101,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2844
+            "line": 2855
           },
           "name": "toListHumanTaskUis",
           "returns": {
@@ -341667,7 +342118,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2855
+            "line": 2866
           },
           "name": "toListHyperParameterTuningJobs",
           "returns": {
@@ -341684,7 +342135,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2877
+            "line": 2888
           },
           "name": "toListImages",
           "returns": {
@@ -341701,7 +342152,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2866
+            "line": 2877
           },
           "name": "toListImageVersions",
           "returns": {
@@ -341718,7 +342169,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2888
+            "line": 2899
           },
           "name": "toListInferenceExperiments",
           "returns": {
@@ -341735,7 +342186,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2910
+            "line": 2921
           },
           "name": "toListInferenceRecommendationsJobs",
           "returns": {
@@ -341752,7 +342203,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2899
+            "line": 2910
           },
           "name": "toListInferenceRecommendationsJobSteps",
           "returns": {
@@ -341769,7 +342220,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2921
+            "line": 2932
           },
           "name": "toListLabelingJobs",
           "returns": {
@@ -341786,7 +342237,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2932
+            "line": 2943
           },
           "name": "toListLabelingJobsForWorkteam",
           "returns": {
@@ -341803,7 +342254,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2943
+            "line": 2954
           },
           "name": "toListLineageGroups",
           "returns": {
@@ -341820,7 +342271,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2954
+            "line": 2965
           },
           "name": "toListModelBiasJobDefinitions",
           "returns": {
@@ -341837,7 +342288,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2965
+            "line": 2976
           },
           "name": "toListModelCardExportJobs",
           "returns": {
@@ -341854,7 +342305,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2987
+            "line": 2998
           },
           "name": "toListModelCards",
           "returns": {
@@ -341871,7 +342322,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2976
+            "line": 2987
           },
           "name": "toListModelCardVersions",
           "returns": {
@@ -341888,7 +342339,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 2998
+            "line": 3009
           },
           "name": "toListModelExplainabilityJobDefinitions",
           "returns": {
@@ -341905,7 +342356,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3009
+            "line": 3020
           },
           "name": "toListModelMetadata",
           "returns": {
@@ -341922,7 +342373,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3020
+            "line": 3031
           },
           "name": "toListModelPackageGroups",
           "returns": {
@@ -341939,7 +342390,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3031
+            "line": 3042
           },
           "name": "toListModelPackages",
           "returns": {
@@ -341956,7 +342407,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3042
+            "line": 3053
           },
           "name": "toListModelQualityJobDefinitions",
           "returns": {
@@ -341973,7 +342424,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3053
+            "line": 3064
           },
           "name": "toListModels",
           "returns": {
@@ -341990,7 +342441,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3064
+            "line": 3075
           },
           "name": "toListMonitoringAlertHistory",
           "returns": {
@@ -342007,7 +342458,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3075
+            "line": 3086
           },
           "name": "toListMonitoringAlerts",
           "returns": {
@@ -342024,7 +342475,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3086
+            "line": 3097
           },
           "name": "toListMonitoringExecutions",
           "returns": {
@@ -342041,7 +342492,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3097
+            "line": 3108
           },
           "name": "toListMonitoringSchedules",
           "returns": {
@@ -342058,7 +342509,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3108
+            "line": 3119
           },
           "name": "toListNotebookInstanceLifecycleConfigs",
           "returns": {
@@ -342075,7 +342526,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3119
+            "line": 3130
           },
           "name": "toListNotebookInstances",
           "returns": {
@@ -342092,7 +342543,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3141
+            "line": 3152
           },
           "name": "toListPipelineExecutions",
           "returns": {
@@ -342109,7 +342560,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3130
+            "line": 3141
           },
           "name": "toListPipelineExecutionSteps",
           "returns": {
@@ -342126,7 +342577,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3152
+            "line": 3163
           },
           "name": "toListPipelineParametersForExecution",
           "returns": {
@@ -342143,7 +342594,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3163
+            "line": 3174
           },
           "name": "toListPipelines",
           "returns": {
@@ -342160,7 +342611,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3174
+            "line": 3185
           },
           "name": "toListProcessingJobs",
           "returns": {
@@ -342177,7 +342628,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3185
+            "line": 3196
           },
           "name": "toListProjects",
           "returns": {
@@ -342194,7 +342645,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3196
+            "line": 3207
           },
           "name": "toListSharedModelEvents",
           "returns": {
@@ -342211,7 +342662,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3218
+            "line": 3229
           },
           "name": "toListSharedModels",
           "returns": {
@@ -342228,7 +342679,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3207
+            "line": 3218
           },
           "name": "toListSharedModelVersions",
           "returns": {
@@ -342245,7 +342696,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3229
+            "line": 3240
           },
           "name": "toListSpaces",
           "returns": {
@@ -342262,7 +342713,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3240
+            "line": 3251
           },
           "name": "toListStageDevices",
           "returns": {
@@ -342279,7 +342730,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3251
+            "line": 3262
           },
           "name": "toListStudioLifecycleConfigs",
           "returns": {
@@ -342296,7 +342747,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3262
+            "line": 3273
           },
           "name": "toListSubscribedWorkteams",
           "returns": {
@@ -342313,7 +342764,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3273
+            "line": 3284
           },
           "name": "toListTags",
           "returns": {
@@ -342330,7 +342781,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3284
+            "line": 3295
           },
           "name": "toListTrainingJobs",
           "returns": {
@@ -342347,7 +342798,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3295
+            "line": 3306
           },
           "name": "toListTrainingJobsForHyperParameterTuningJob",
           "returns": {
@@ -342364,7 +342815,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3306
+            "line": 3317
           },
           "name": "toListTransformJobs",
           "returns": {
@@ -342381,7 +342832,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3317
+            "line": 3328
           },
           "name": "toListTrialComponents",
           "returns": {
@@ -342398,7 +342849,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3328
+            "line": 3339
           },
           "name": "toListTrials",
           "returns": {
@@ -342415,7 +342866,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3339
+            "line": 3350
           },
           "name": "toListUserProfiles",
           "returns": {
@@ -342432,7 +342883,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3350
+            "line": 3361
           },
           "name": "toListWorkforces",
           "returns": {
@@ -342449,7 +342900,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3361
+            "line": 3372
           },
           "name": "toListWorkteams",
           "returns": {
@@ -342466,7 +342917,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3372
+            "line": 3383
           },
           "name": "toPutLineageGroupPolicy",
           "returns": {
@@ -342483,7 +342934,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3383
+            "line": 3394
           },
           "name": "toPutModelPackageGroupPolicy",
           "returns": {
@@ -342500,7 +342951,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3394
+            "line": 3405
           },
           "name": "toPutRecord",
           "returns": {
@@ -342517,7 +342968,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3405
+            "line": 3416
           },
           "name": "toQueryLineage",
           "returns": {
@@ -342534,7 +342985,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3420
+            "line": 3431
           },
           "name": "toRegisterDevices",
           "returns": {
@@ -342551,7 +343002,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3434
+            "line": 3445
           },
           "name": "toRenderUiTemplate",
           "returns": {
@@ -342568,7 +343019,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3445
+            "line": 3456
           },
           "name": "toRetryPipelineExecution",
           "returns": {
@@ -342585,7 +343036,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3456
+            "line": 3467
           },
           "name": "toSearch",
           "returns": {
@@ -342602,7 +343053,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3467
+            "line": 3478
           },
           "name": "toSendHeartbeat",
           "returns": {
@@ -342619,7 +343070,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3478
+            "line": 3489
           },
           "name": "toSendPipelineExecutionStepFailure",
           "returns": {
@@ -342636,7 +343087,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3489
+            "line": 3500
           },
           "name": "toSendPipelineExecutionStepSuccess",
           "returns": {
@@ -342653,7 +343104,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3500
+            "line": 3511
           },
           "name": "toSendSharedModelEvent",
           "returns": {
@@ -342670,7 +343121,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3511
+            "line": 3522
           },
           "name": "toStartEdgeDeploymentStage",
           "returns": {
@@ -342687,7 +343138,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3522
+            "line": 3533
           },
           "name": "toStartHumanLoop",
           "returns": {
@@ -342704,7 +343155,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3533
+            "line": 3544
           },
           "name": "toStartInferenceExperiment",
           "returns": {
@@ -342721,7 +343172,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3544
+            "line": 3555
           },
           "name": "toStartMonitoringSchedule",
           "returns": {
@@ -342738,7 +343189,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3555
+            "line": 3566
           },
           "name": "toStartNotebookInstance",
           "returns": {
@@ -342755,7 +343206,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3566
+            "line": 3577
           },
           "name": "toStartPipelineExecution",
           "returns": {
@@ -342772,7 +343223,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3577
+            "line": 3588
           },
           "name": "toStopAutoMLJob",
           "returns": {
@@ -342789,7 +343240,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3588
+            "line": 3599
           },
           "name": "toStopCompilationJob",
           "returns": {
@@ -342806,7 +343257,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3599
+            "line": 3610
           },
           "name": "toStopEdgeDeploymentStage",
           "returns": {
@@ -342823,7 +343274,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3610
+            "line": 3621
           },
           "name": "toStopEdgePackagingJob",
           "returns": {
@@ -342840,7 +343291,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3621
+            "line": 3632
           },
           "name": "toStopHumanLoop",
           "returns": {
@@ -342857,7 +343308,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3632
+            "line": 3643
           },
           "name": "toStopHyperParameterTuningJob",
           "returns": {
@@ -342874,7 +343325,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3643
+            "line": 3654
           },
           "name": "toStopInferenceExperiment",
           "returns": {
@@ -342891,7 +343342,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3654
+            "line": 3665
           },
           "name": "toStopInferenceRecommendationsJob",
           "returns": {
@@ -342908,7 +343359,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3665
+            "line": 3676
           },
           "name": "toStopLabelingJob",
           "returns": {
@@ -342925,7 +343376,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3676
+            "line": 3687
           },
           "name": "toStopMonitoringSchedule",
           "returns": {
@@ -342942,7 +343393,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3687
+            "line": 3698
           },
           "name": "toStopNotebookInstance",
           "returns": {
@@ -342959,7 +343410,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3698
+            "line": 3709
           },
           "name": "toStopPipelineExecution",
           "returns": {
@@ -342976,7 +343427,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3709
+            "line": 3720
           },
           "name": "toStopProcessingJob",
           "returns": {
@@ -342993,7 +343444,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3720
+            "line": 3731
           },
           "name": "toStopTrainingJob",
           "returns": {
@@ -343010,7 +343461,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3731
+            "line": 3742
           },
           "name": "toStopTransformJob",
           "returns": {
@@ -343027,7 +343478,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3742
+            "line": 3753
           },
           "name": "toUpdateAction",
           "returns": {
@@ -343044,7 +343495,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3753
+            "line": 3764
           },
           "name": "toUpdateAppImageConfig",
           "returns": {
@@ -343061,7 +343512,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3764
+            "line": 3775
           },
           "name": "toUpdateArtifact",
           "returns": {
@@ -343078,7 +343529,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3775
+            "line": 3786
           },
           "name": "toUpdateCodeRepository",
           "returns": {
@@ -343095,7 +343546,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3786
+            "line": 3797
           },
           "name": "toUpdateContext",
           "returns": {
@@ -343112,7 +343563,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3797
+            "line": 3808
           },
           "name": "toUpdateDeviceFleet",
           "returns": {
@@ -343129,7 +343580,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3808
+            "line": 3819
           },
           "name": "toUpdateDevices",
           "returns": {
@@ -343146,7 +343597,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3826
+            "line": 3837
           },
           "name": "toUpdateDomain",
           "returns": {
@@ -343163,7 +343614,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3837
+            "line": 3848
           },
           "name": "toUpdateEndpoint",
           "returns": {
@@ -343180,7 +343631,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3848
+            "line": 3859
           },
           "name": "toUpdateEndpointWeightsAndCapacities",
           "returns": {
@@ -343197,7 +343648,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3859
+            "line": 3870
           },
           "name": "toUpdateExperiment",
           "returns": {
@@ -343214,7 +343665,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3870
+            "line": 3881
           },
           "name": "toUpdateFeatureGroup",
           "returns": {
@@ -343231,7 +343682,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3881
+            "line": 3892
           },
           "name": "toUpdateFeatureMetadata",
           "returns": {
@@ -343248,7 +343699,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3892
+            "line": 3903
           },
           "name": "toUpdateHub",
           "returns": {
@@ -343265,7 +343716,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3906
+            "line": 3917
           },
           "name": "toUpdateImage",
           "returns": {
@@ -343274,6 +343725,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/sagemaker/latest/APIReference/API_UpdateImageVersion.html",
+            "stability": "experimental",
+            "summary": "Grants permission to update the properties of a SageMaker ImageVersion."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sagemaker.ts",
+            "line": 3928
+          },
+          "name": "toUpdateImageVersion",
+          "returns": {
+            "type": {
+              "fqn": "cdk-iam-floyd.Sagemaker"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/sagemaker/latest/APIReference/API_UpdateInferenceExperiment.html",
@@ -343282,7 +343750,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3917
+            "line": 3939
           },
           "name": "toUpdateInferenceExperiment",
           "returns": {
@@ -343299,7 +343767,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3928
+            "line": 3950
           },
           "name": "toUpdateModelCard",
           "returns": {
@@ -343316,7 +343784,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3944
+            "line": 3966
           },
           "name": "toUpdateModelPackage",
           "returns": {
@@ -343333,7 +343801,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3955
+            "line": 3977
           },
           "name": "toUpdateMonitoringAlert",
           "returns": {
@@ -343350,7 +343818,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3981
+            "line": 4003
           },
           "name": "toUpdateMonitoringSchedule",
           "returns": {
@@ -343367,7 +343835,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 3998
+            "line": 4020
           },
           "name": "toUpdateNotebookInstance",
           "returns": {
@@ -343384,7 +343852,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4009
+            "line": 4031
           },
           "name": "toUpdateNotebookInstanceLifecycleConfig",
           "returns": {
@@ -343401,7 +343869,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4023
+            "line": 4045
           },
           "name": "toUpdatePipeline",
           "returns": {
@@ -343418,7 +343886,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4034
+            "line": 4056
           },
           "name": "toUpdatePipelineExecution",
           "returns": {
@@ -343435,7 +343903,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4049
+            "line": 4071
           },
           "name": "toUpdateProject",
           "returns": {
@@ -343452,7 +343920,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4060
+            "line": 4082
           },
           "name": "toUpdateSharedModel",
           "returns": {
@@ -343469,7 +343937,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4076
+            "line": 4098
           },
           "name": "toUpdateSpace",
           "returns": {
@@ -343486,7 +343954,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4091
+            "line": 4113
           },
           "name": "toUpdateTrainingJob",
           "returns": {
@@ -343503,7 +343971,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4102
+            "line": 4124
           },
           "name": "toUpdateTrial",
           "returns": {
@@ -343520,7 +343988,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4113
+            "line": 4135
           },
           "name": "toUpdateTrialComponent",
           "returns": {
@@ -343537,7 +344005,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4132
+            "line": 4154
           },
           "name": "toUpdateUserProfile",
           "returns": {
@@ -343554,7 +344022,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4143
+            "line": 4165
           },
           "name": "toUpdateWorkforce",
           "returns": {
@@ -343571,7 +344039,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4154
+            "line": 4176
           },
           "name": "toUpdateWorkteam",
           "returns": {
@@ -343589,7 +344057,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sagemaker.ts",
-            "line": 4158
+            "line": 4180
           },
           "name": "accessLevelList",
           "overrides": "cdk-iam-floyd.PolicyStatementWithActions",
@@ -412943,6 +413411,6 @@
       "symbolId": "lib/generated/x-ray:Xray"
     }
   },
-  "version": "0.488.0",
-  "fingerprint": "UUEj1qo9BsnAuwwpjko/+7TkaWR41bcS9njqEjeEjik="
+  "version": "0.490.0",
+  "fingerprint": "zbLVvrpowGTEIHNEGFobRzWMTY0glpxNk9lfDG20mZQ="
 }