cdk-iam-floyd 0.707.0 → 0.709.0

package/README.md

@@ -17,8 +17,8 @@
 Support for:
 
 - 418 Services
-- 18519 Actions
-- 1988 Resource Types
+- 18514 Actions
+- 1989 Resource Types
 - 1951 Condition keys
 <!-- /stats -->
 

package/lib/generated/aws-managed-policies/cdk-iam-floyd.d.ts

@@ -230,6 +230,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AmazonDRSVPCManagement(): aws_iam.IManagedPolicy;
     /** Provides full access to Amazon DynamoDB via the AWS Management Console. */
     AmazonDynamoDBFullAccess(): aws_iam.IManagedPolicy;
+    /** Provides full access to Amazon DynamoDB */
+    AmazonDynamoDBFullAccessV2(): aws_iam.IManagedPolicy;
     /** This policy is on a deprecation path. See documentation for guidance: https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/DynamoDBPipeline.html. Provides full access to Amazon DynamoDB including Export/Import using AWS Data Pipeline via the AWS Management Console. */
     AmazonDynamoDBFullAccesswithDataPipeline(): aws_iam.IManagedPolicy;
     /** Provides read only access to Amazon DynamoDB via the AWS Management Console. */
@@ -408,6 +410,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AmazonEventBridgeSchemasReadOnlyAccess(): aws_iam.IManagedPolicy;
     /** Grants permissions to Managed Rules created by Amazon EventBridge schemas. */
     AmazonEventBridgeSchemasServiceRolePolicy(): aws_iam.IManagedPolicy;
+    /** Grants permissions to EVS to manage resources on your behalf */
+    AmazonEVSServiceRolePolicy(): aws_iam.IManagedPolicy;
     /** Policy to enable AWS FIS to manage monitoring and resource selection for experiments. */
     AmazonFISServiceRolePolicy(): aws_iam.IManagedPolicy;
     /** Gives access to all actions for Amazon Forecast */
@@ -442,6 +446,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AmazonGrafanaServiceLinkedRolePolicy(): aws_iam.IManagedPolicy;
     /** Provides full access to use Amazon GuardDuty. */
     AmazonGuardDutyFullAccess(): aws_iam.IManagedPolicy;
+    /** Provides full access to use Amazon GuardDuty */
+    AmazonGuardDutyFullAccessV2(): aws_iam.IManagedPolicy;
     /** GuardDuty malware protection uses the service-linked role (SLR) named AWSServiceRoleForAmazonGuardDutyMalwareProtection. This service-linked role allows GuardDuty malware protection to perform agent-less scans to detect malware. It allows GuardDuty to create snapshots in your account, and share the snapshots with the GuardDuty service account to scan for malware. It evaluates these shared snapshots and includes the retrieved EC2 instance metadata in the GuardDuty Malware Protection findings. The AWSServiceRoleForAmazonGuardDutyMalwareProtection service-linked role trusts the malware-protection.guardduty.amazonaws.com service to assume the role. */
     AmazonGuardDutyMalwareProtectionServiceRolePolicy(): aws_iam.IManagedPolicy;
     /** Provides read only access to Amazon GuardDuty resources */
@@ -830,6 +836,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AmazonSageMakerPartnerServiceCatalogProductsLambdaServiceRolePolicy(): aws_iam.IManagedPolicy;
     /** This Amazon Managed Policy grants permissions commonly needed for use with Callback steps and Lambda steps in SageMaker Model Building Pipelines. It is added to the AmazonSageMaker-ExecutionRole that can be created when setting up SageMaker Studio. It can also be attached to any other role that will be used for authoring or executing pipelines. */
     AmazonSageMakerPipelinesIntegrations(): aws_iam.IManagedPolicy;
+    /** This policy will be used By SageMaker Unified Studios to create VPC related resources for QuickSight */
+    AmazonSageMakerQuickSightVPCPolicy(): aws_iam.IManagedPolicy;
     /** Provides read only access to Amazon SageMaker via the AWS Management Console and SDK. */
     AmazonSageMakerReadOnly(): aws_iam.IManagedPolicy;
     /** Service role policy used by the AWS APIGateway within the AWS ServiceCatalog provisioned products from Amazon SageMaker portfolio of products. Grants permissions to a set of related services including CloudWatch Logs and others. */
@@ -1790,8 +1798,6 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AWSMarketplaceFullAccess(): aws_iam.IManagedPolicy;
     /** Provides read access to AWS Marketplace Entitlements */
     AWSMarketplaceGetEntitlements(): aws_iam.IManagedPolicy;
-    /** Provides full access to AWS Marketplace Private Image Build Feature. In addition to create private images, it also provides permissions to add tags to images, launch and terminate ec2 instances. */
-    AWSMarketplaceImageBuildFullAccess(): aws_iam.IManagedPolicy;
     /** Enables access to AWS Services and Resources used or managed by AWS Marketplace for license management. */
     AWSMarketplaceLicenseManagementServiceRolePolicy(): aws_iam.IManagedPolicy;
     /** Provides the ability to subscribe and unsubscribe to AWS Marketplace software */
@@ -1920,6 +1926,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AWSPriceListServiceFullAccess(): aws_iam.IManagedPolicy;
     /** Provides auditor access to AWS Private Certificate Authority */
     AWSPrivateCAAuditor(): aws_iam.IManagedPolicy;
+    /** Grants essential permissions for the AWS Private CA Connector for Kubernetes. */
+    AWSPrivateCAConnectorForKubernetesPolicy(): aws_iam.IManagedPolicy;
     /** Provides full access to AWS Private Certificate Authority */
     AWSPrivateCAFullAccess(): aws_iam.IManagedPolicy;
     /** Provides privileged certificate user access to AWS Private Certificate Authority */
@@ -2007,6 +2015,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     /** Provides access to Amazon SageMaker resources from Amazon QuickSight */
     AWSQuickSightSageMakerPolicy(): aws_iam.IManagedPolicy;
     /** Policy used by QuickSight to create secrets in AWS Secrets Manager and to attach resource policies on existing QuickSight secrets. */
+    AWSQuickSightSecretsManagerWriteAccess(): aws_iam.IManagedPolicy;
+    /** Policy used by QuickSight to create secrets in AWS Secrets Manager and to attach resource policies on existing QuickSight secrets. */
     AWSQuickSightSecretsManagerWritePolicy(): aws_iam.IManagedPolicy;
     /** AWS QuickSight access to AWS Timestream APIs. Customers can attach this policy to AWS QuickSight role to allow retrieval of data and metadata. */
     AWSQuickSightTimestreamPolicy(): aws_iam.IManagedPolicy;
@@ -2096,6 +2106,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AWSServiceRoleForAmazonEKSNodegroup(): aws_iam.IManagedPolicy;
     /** This Service Linked Role provides Amazon Q Developer ability to provide usage information. */
     AWSServiceRoleForAmazonQDeveloper(): aws_iam.IManagedPolicy;
+    /** This Service-Linked Role provides AWS Transform with the ability to provide usage information. */
+    AWSServiceRoleForAWSTransform(): aws_iam.IManagedPolicy;
     /** Provides access to Systems Manager resources used by CloudWatch Alarms */
     AWSServiceRoleForCloudWatchAlarmsActionSSMServiceRolePolicy(): aws_iam.IManagedPolicy;
     /** Allows CloudWatch to access RDS Performance Insights metrics on your behalf */
@@ -2302,6 +2314,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     CloudSearchFullAccess(): aws_iam.IManagedPolicy;
     /** Provides read only access to the Amazon CloudSearch configuration service. */
     CloudSearchReadOnlyAccess(): aws_iam.IManagedPolicy;
+    /** This service linked role allows CloudTrail to get and add resource tags to the resource owner's CloudTrail events. */
+    CloudTrailEventContext(): aws_iam.IManagedPolicy;
     /** Permission policy for CloudTrail ServiceLinkedRole */
     CloudTrailServiceRolePolicy(): aws_iam.IManagedPolicy;
     /** Allows CloudWatch to assume CloudWatch-CrossAccountSharing roles in remote accounts on behalf of the current account in order to display data cross-account, cross-region */
@@ -2472,10 +2486,6 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     GlobalAcceleratorReadOnlyAccess(): aws_iam.IManagedPolicy;
     /** Provides read access to the Greengrass OTA Update artifacts in all Greengrass regions */
     GreengrassOTAUpdateArtifactAccess(): aws_iam.IManagedPolicy;
-    /** This policy grants permissions needed to use all features of the SageMaker Ground Truth Synthetic Console. */
-    GroundTruthSyntheticConsoleFullAccess(): aws_iam.IManagedPolicy;
-    /** This policy grants read-only access to SageMaker Ground Truth Synthetic via the AWS Management Console. */
-    GroundTruthSyntheticConsoleReadOnlyAccess(): aws_iam.IManagedPolicy;
     /** AWS Health policy to enable Organizational View feature */
     HealthOrganizationsServiceRolePolicy(): aws_iam.IManagedPolicy;
     /** This policy grants access to read all access information provided by IAM access advisor such as service last accessed information. */