cdk-iam-floyd 0.647.0 → 0.650.0

package/README.md

@@ -17,9 +17,9 @@
 Support for:
 
 - 399 Services
-- 16897 Actions
-- 1808 Resource Types
-- 1767 Condition keys
+- 16935 Actions
+- 1812 Resource Types
+- 1771 Condition keys
 <!-- /stats -->
 
 ![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**

package/lib/generated/aws-managed-policies/cdk-iam-floyd.d.ts

@@ -886,6 +886,10 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AmazonWorkSpacesApplicationManagerAdminAccess(): aws_iam.IManagedPolicy;
     /** This managed policy provides full administrative access to AWS Certificate Manager Private CA resources in your AWS account for certificate-based authentication. */
     AmazonWorkspacesPCAAccess(): aws_iam.IManagedPolicy;
+    /** This policy provides AWS WorkSpaces service access to required customer account resources for launching Workspaces Pools */
+    AmazonWorkSpacesPoolServiceAccess(): aws_iam.IManagedPolicy;
+    /** Provides read-only access to Amazon WorkSpaces Secure Browser and its dependencies through the AWS Management Console, SDK, and CLI. */
+    AmazonWorkSpacesSecureBrowserReadOnly(): aws_iam.IManagedPolicy;
     /** Provides access to Amazon WorkSpaces backend service to perform Workspace Self Service actions */
     AmazonWorkSpacesSelfServiceAccess(): aws_iam.IManagedPolicy;
     /** Provides customer account access to AWS WorkSpaces service for launching a Workspace. */
@@ -1806,6 +1810,24 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AWSProtonSyncServiceRolePolicy(): aws_iam.IManagedPolicy;
     /** Grants permissions to view and modify purchase orders on billing console */
     AWSPurchaseOrdersServiceRolePolicy(): aws_iam.IManagedPolicy;
+    /** The AWSQuickSetupCFGCPacksPermissionsBoundary policy defines the list of permissions that are permitted in an IAM role created by Quick Setup. Quick Setup uses a role created with this policy to deploy AWS Config conformance packs. */
+    AWSQuickSetupCFGCPacksPermissionsBoundary(): aws_iam.IManagedPolicy;
+    /** Provides permissions for AWS Systems Manager Quick Setup to deploy multiple configuration types. These configuration types create IAM roles and automations that configure frequently used Amazon Web Services services and features with recommended best practices. */
+    AWSQuickSetupDeploymentRolePolicy(): aws_iam.IManagedPolicy;
+    /** The AWSQuickSetupDevOpsGuruPermissionsBoundary policy defines the list of permissions that are permitted in an IAM role created by Quick Setup. Quick Setup uses a role created with this policy to enable and configure Amazon DevOps Guru. This policy also provides permissions to enable Systems Manager Explorer. */
+    AWSQuickSetupDevOpsGuruPermissionsBoundary(): aws_iam.IManagedPolicy;
+    /** QuickSetup creates IAM roles which enable it to configure the Systems Manager Distributor feature on your behalf, and uses this policy when creating such roles to define the boundary of their permissions. */
+    AWSQuickSetupDistributorPermissionsBoundary(): aws_iam.IManagedPolicy;
+    /** Provides read-only permissions to access patch baselines that have been configured by an administrator in the current AWS account or organization using Quick Setup. */
+    AWSQuickSetupPatchPolicyBaselineAccess(): aws_iam.IManagedPolicy;
+    /** Provides permissions that allow Quick Setup to create resources associated with a patch policy configuration. */
+    AWSQuickSetupPatchPolicyDeploymentRolePolicy(): aws_iam.IManagedPolicy;
+    /** QuickSetup creates IAM roles which enable it to configure the Systems Manager Patch Manager feature on your behalf, and uses this policy when creating such roles to define the boundary of their permissions. */
+    AWSQuickSetupPatchPolicyPermissionsBoundary(): aws_iam.IManagedPolicy;
+    /** The AWSQuickSetupSchedulerPermissionsBoundary policy defines the list of permissions that are permitted in an IAM role created by Quick Setup. Quick Setup uses a role created with this policy to enable and configure scheduled operations on Amazon EC2 instances and other resources. */
+    AWSQuickSetupSchedulerPermissionsBoundary(): aws_iam.IManagedPolicy;
+    /** Quick Setup creates IAM roles which enable it to configure the Host Manager Quick Setup type on your behalf, and uses this policy when creating such roles to define the boundary of their permissions. */
+    AWSQuickSetupSSMHostMgmtPermissionsBoundary(): aws_iam.IManagedPolicy;
     /** Provides the set of permissions required to perform QuickSight Asset Bundle Export Operations */
     AWSQuickSightAssetBundleExportPolicy(): aws_iam.IManagedPolicy;
     /** Provides the set of permissions required to perform QuickSight Asset Bundle Import Operations */
@@ -1986,6 +2008,10 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AWSSystemsManagerAccountDiscoveryServicePolicy(): aws_iam.IManagedPolicy;
     /** Provides access to AWS resources managed or used by the AWS Systems Manager change management framework. */
     AWSSystemsManagerChangeManagementServicePolicy(): aws_iam.IManagedPolicy;
+    /** Provides permissions for AWS Systems Manager Quick Setup to enable and configure AWS Config configuration recording. */
+    AWSSystemsManagerEnableConfigRecordingExecutionPolicy(): aws_iam.IManagedPolicy;
+    /** This policy grants administrative permissions for enabling Explorer, a capability of AWS Systems Manager. This includes permissions to update related Systems Manager service settings, and to create a service-linked role for Systems Manager. */
+    AWSSystemsManagerEnableExplorerExecutionPolicy(): aws_iam.IManagedPolicy;
     /** Provides full access to AWS Systems Manager for SAP service */
     AWSSystemsManagerForSAPFullAccess(): aws_iam.IManagedPolicy;
     /** Provides read only access to AWS Systems Manager for SAP service */
@@ -2386,6 +2412,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     SimpleWorkflowFullAccess(): aws_iam.IManagedPolicy;
     /** Allows split cost allocation data to retrieve AWS Organizations information, if applicable, and collect telemetry data for the split cost allocation data services that the customer has opted in to. */
     SplitCostAllocationDataServiceRolePolicy(): aws_iam.IManagedPolicy;
+    /** Provides permissions to check Quick Setup configuration health, ensure consistent use of parameters and provisioned resources, and remediate resources when drift is detected. */
+    SSMQuickSetupRolePolicy(): aws_iam.IManagedPolicy;
     /** This policy grants permissions to troubleshoot and resolve issues in an AWS account. This policy also enables the user to contact AWS support to create and manage cases. */
     SupportUser(): aws_iam.IManagedPolicy;
     /** Grants full access permissions necessary for resources required for application and development operations. */