iam-floyd 0.395.0 → 0.396.0

package/.jsii

@@ -32,7 +32,7 @@
   },
   "name": "iam-floyd",
   "readme": {
-    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Twitter](https://badgen.net/twitter/follow/heyiamfloyd?icon=twitter)][twitter]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n[![Maintainability](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/maintainability)](https://codeclimate.com/github/udondan/iam-floyd/maintainability)\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 316 Services\n- 12499 Actions\n- 1317 Resource Types\n- 1328 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n\n  **Starting with version 0.300.0, the packages are compatible with CDK v2.** For CDK v1 you can use any version up to:<br>\n  [![npm CDK v1](https://img.shields.io/badge/npm-0.286.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.286.0)\n  [![PyPI CDK v1](https://img.shields.io/badge/pypi-0.286.0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.286.0/)\n\n  Find them all on [libraries.io].\n\n## CDK Compatibility Matrix\n\n| CDK        | cdk-iam-floyd              |\n| ---------- | -------------              |\n| <= 1.151.0 | <= 0.285.0                 |\n| >= 1.152.0 | 0.286.0                    |\n| >= 1.158.0 | **No compatible version!** |\n| >= 2.0.0   | >= 0.300.0                 |\n| >= 2.20.0  | >= 0.351.0                 |\n| >= 2.26.0  | >= 0.377.0                 |\n| 2.29.x     | **No compatible version!** |\n| >= 2.30.0  | >= 0.391.0                 |\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [twitter]: https://twitter.com/heyiamfloyd\n"
+    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Twitter](https://badgen.net/twitter/follow/heyiamfloyd?icon=twitter)][twitter]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n[![Maintainability](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/maintainability)](https://codeclimate.com/github/udondan/iam-floyd/maintainability)\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 316 Services\n- 12505 Actions\n- 1317 Resource Types\n- 1331 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n\n  **Starting with version 0.300.0, the packages are compatible with CDK v2.** For CDK v1 you can use any version up to:<br>\n  [![npm CDK v1](https://img.shields.io/badge/npm-0.286.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.286.0)\n  [![PyPI CDK v1](https://img.shields.io/badge/pypi-0.286.0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.286.0/)\n\n  Find them all on [libraries.io].\n\n## CDK Compatibility Matrix\n\n| CDK        | cdk-iam-floyd              |\n| ---------- | -------------              |\n| <= 1.151.0 | <= 0.285.0                 |\n| >= 1.152.0 | 0.286.0                    |\n| >= 1.158.0 | **No compatible version!** |\n| >= 2.0.0   | >= 0.300.0                 |\n| >= 2.20.0  | >= 0.351.0                 |\n| >= 2.26.0  | >= 0.377.0                 |\n| 2.29.x     | **No compatible version!** |\n| >= 2.30.0  | >= 0.391.0                 |\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [twitter]: https://twitter.com/heyiamfloyd\n"
   },
   "repository": {
     "type": "git",
@@ -120585,6 +120585,67 @@
         "line": 9
       },
       "methods": [
+        {
+          "docs": {
+            "remarks": "This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-policy-keys\n\nApplies to actions:\n- .toGetMessages()\n- .toSendReply()",
+            "stability": "experimental",
+            "summary": "Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/messagedeliveryservice.ts",
+            "line": 118
+          },
+          "name": "ifSsmSourceInstanceARN",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The value(s) to check."
+              },
+              "name": "value",
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+              },
+              "name": "operator",
+              "optional": true,
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "iam-floyd.Operator"
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Ec2messages"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
@@ -120655,13 +120716,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
+            "remarks": "Access Level: Read\n\nPossible conditions:\n- .ifSsmSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
             "stability": "experimental",
             "summary": "Grants permission to deliver messages to clients/instances using long polling."
           },
           "locationInModule": {
             "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 72
+            "line": 75
           },
           "name": "toGetMessages",
           "returns": {
@@ -120672,13 +120733,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSsmSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
             "stability": "experimental",
             "summary": "Grants permission to send replies from clients/instances to upstream service."
           },
           "locationInModule": {
             "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 83
+            "line": 89
           },
           "name": "toSendReply",
           "returns": {
@@ -120696,7 +120757,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 87
+            "line": 93
           },
           "name": "accessLevelList",
           "overrides": "iam-floyd.PolicyStatementWithActions",
@@ -330335,7 +330396,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2157
+            "line": 2170
           },
           "name": "ifAutoApprove",
           "parameters": [
@@ -330396,7 +330457,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2175
+            "line": 2188
           },
           "name": "ifDocumentCategories",
           "parameters": [
@@ -330453,11 +330514,11 @@
           "docs": {
             "remarks": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions\n\nApplies to actions:\n- .toPutParameter()",
             "stability": "experimental",
-            "summary": "Controls whether Systems Manager parameters can be overwritten."
+            "summary": "Filters access by allowing Systems Manager parameters to be overwritten."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2190
+            "line": 2203
           },
           "name": "ifOverwrite",
           "parameters": [
@@ -330514,11 +330575,11 @@
           "docs": {
             "remarks": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions\n\nApplies to actions:\n- .toGetParametersByPath()",
             "stability": "experimental",
-            "summary": "Filters access to Systems Manager parameters created in a hierarchical structure."
+            "summary": "Filters access by allowing traversing hierarchical structure of the Systems Manager parameters."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2205
+            "line": 2218
           },
           "name": "ifRecursive",
           "parameters": [
@@ -330575,11 +330636,11 @@
           "docs": {
             "remarks": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions\n\nApplies to actions:\n- .toDeregisterManagedInstance()\n- .toGetConnectionStatus()\n- .toSendCommand()\n- .toStartSession()\n- .toUpdateManagedInstanceRole()\n\nApplies to resource types:\n- automation-execution\n- instance\n- maintenancewindow\n- managed-instance\n- opsmetadata\n- parameter\n- patchbaseline",
             "stability": "experimental",
-            "summary": "Filters access by based on a tag key-value pair assigned to the Systems Manager resource."
+            "summary": "Filters access by allowing access based on a tag key-value pair assigned to the Systems Manager resource."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2266
+            "line": 2296
           },
           "name": "ifResourceTag",
           "parameters": [
@@ -330649,7 +330710,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2219
+            "line": 2232
           },
           "name": "ifSessionDocumentAccessCheck",
           "parameters": [
@@ -330671,6 +330732,67 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-policy-keys\n\nApplies to actions:\n- .toUpdateAssociationStatus()\n- .toUpdateInstanceAssociationStatus()\n- .toUpdateInstanceInformation()",
+            "stability": "experimental",
+            "summary": "Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/systemsmanager.ts",
+            "line": 2249
+          },
+          "name": "ifSourceInstanceARN",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The value(s) to check."
+              },
+              "name": "value",
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+              },
+              "name": "operator",
+              "optional": true,
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "iam-floyd.Operator"
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Ssm"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions\n\nApplies to actions:\n- .toCreateResourceDataSync()\n- .toDeleteResourceDataSync()\n- .toListResourceDataSync()\n- .toUpdateResourceDataSync()",
@@ -330679,7 +330801,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2237
+            "line": 2267
           },
           "name": "ifSyncType",
           "parameters": [
@@ -330740,7 +330862,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1857
+            "line": 1866
           },
           "name": "onAssociation",
           "parameters": [
@@ -330801,7 +330923,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1890
+            "line": 1899
           },
           "name": "onAutomationDefinition",
           "parameters": [
@@ -330871,7 +330993,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1875
+            "line": 1884
           },
           "name": "onAutomationExecution",
           "parameters": [
@@ -330926,12 +331048,13 @@
         },
         {
           "docs": {
+            "remarks": "https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingBucket.html",
             "stability": "experimental",
             "summary": "Adds a resource of type bucket to the statement."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1900
+            "line": 1911
           },
           "name": "onBucket",
           "parameters": [
@@ -330970,7 +331093,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1918
+            "line": 1929
           },
           "name": "onDocument",
           "parameters": [
@@ -331025,12 +331148,13 @@
         },
         {
           "docs": {
+            "remarks": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policy-structure.html#EC2_ARN_Format",
             "stability": "experimental",
             "summary": "Adds a resource of type instance to the statement."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1934
+            "line": 1947
           },
           "name": "onInstance",
           "parameters": [
@@ -331091,7 +331215,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1952
+            "line": 1965
           },
           "name": "onMaintenancewindow",
           "parameters": [
@@ -331152,7 +331276,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1970
+            "line": 1983
           },
           "name": "onManagedInstance",
           "parameters": [
@@ -331213,7 +331337,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1984
+            "line": 1997
           },
           "name": "onManagedInstanceInventory",
           "parameters": [
@@ -331274,7 +331398,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2001
+            "line": 2014
           },
           "name": "onOpsitem",
           "parameters": [
@@ -331335,7 +331459,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2019
+            "line": 2032
           },
           "name": "onOpsmetadata",
           "parameters": [
@@ -331396,7 +331520,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2037
+            "line": 2050
           },
           "name": "onParameter",
           "parameters": [
@@ -331457,7 +331581,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2055
+            "line": 2068
           },
           "name": "onPatchbaseline",
           "parameters": [
@@ -331518,7 +331642,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2083
+            "line": 2096
           },
           "name": "onResourcedatasync",
           "parameters": [
@@ -331579,7 +331703,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2097
+            "line": 2110
           },
           "name": "onServicesetting",
           "parameters": [
@@ -331640,7 +331764,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2069
+            "line": 2082
           },
           "name": "onSession",
           "parameters": [
@@ -331701,7 +331825,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2142
+            "line": 2155
           },
           "name": "onTask",
           "parameters": [
@@ -331762,7 +331886,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2111
+            "line": 2124
           },
           "name": "onWindowtarget",
           "parameters": [
@@ -331823,7 +331947,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2125
+            "line": 2138
           },
           "name": "onWindowtask",
           "parameters": [
@@ -334088,13 +334212,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateAssociationStatus.html",
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateAssociationStatus.html",
             "stability": "experimental",
             "summary": "Grants permission to update the status of the SSM document associated with a specified instance."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1527
+            "line": 1530
           },
           "name": "toUpdateAssociationStatus",
           "returns": {
@@ -334111,7 +334235,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1538
+            "line": 1541
           },
           "name": "toUpdateDocument",
           "returns": {
@@ -334128,7 +334252,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1549
+            "line": 1552
           },
           "name": "toUpdateDocumentDefaultVersion",
           "returns": {
@@ -334145,7 +334269,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1560
+            "line": 1563
           },
           "name": "toUpdateDocumentMetadata",
           "returns": {
@@ -334156,13 +334280,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write",
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSourceInstanceARN()",
             "stability": "experimental",
             "summary": "Grants permission to SSM Agent to update the status of the association that it is currently running (internal Systems Manager call)."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1569
+            "line": 1575
           },
           "name": "toUpdateInstanceAssociationStatus",
           "returns": {
@@ -334173,13 +334297,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html",
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html",
             "stability": "experimental",
             "summary": "Grants permission to SSM Agent to send a heartbeat signal to the Systems Manager service in the cloud."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1580
+            "line": 1589
           },
           "name": "toUpdateInstanceInformation",
           "returns": {
@@ -334196,7 +334320,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1591
+            "line": 1600
           },
           "name": "toUpdateMaintenanceWindow",
           "returns": {
@@ -334213,7 +334337,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1602
+            "line": 1611
           },
           "name": "toUpdateMaintenanceWindowTarget",
           "returns": {
@@ -334230,7 +334354,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1613
+            "line": 1622
           },
           "name": "toUpdateMaintenanceWindowTask",
           "returns": {
@@ -334247,7 +334371,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1627
+            "line": 1636
           },
           "name": "toUpdateManagedInstanceRole",
           "returns": {
@@ -334264,7 +334388,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1638
+            "line": 1647
           },
           "name": "toUpdateOpsItem",
           "returns": {
@@ -334281,7 +334405,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1649
+            "line": 1658
           },
           "name": "toUpdateOpsMetadata",
           "returns": {
@@ -334298,7 +334422,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1660
+            "line": 1669
           },
           "name": "toUpdatePatchBaseline",
           "returns": {
@@ -334315,7 +334439,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1674
+            "line": 1683
           },
           "name": "toUpdateResourceDataSync",
           "returns": {
@@ -334332,7 +334456,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1685
+            "line": 1694
           },
           "name": "toUpdateServiceSetting",
           "returns": {
@@ -334350,7 +334474,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1689
+            "line": 1698
           },
           "name": "accessLevelList",
           "overrides": "iam-floyd.PolicyStatementWithActions",
@@ -336115,13 +336239,74 @@
       "methods": [
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-create-iam-instance-profile.html",
+            "remarks": "This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-policy-keys\n\nApplies to actions:\n- .toCreateControlChannel()",
+            "stability": "experimental",
+            "summary": "Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
+            "line": 88
+          },
+          "name": "ifSsmSourceInstanceARN",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The value(s) to check."
+              },
+              "name": "value",
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+              },
+              "name": "operator",
+              "optional": true,
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "iam-floyd.Operator"
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Ssmmessages"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSsmSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-create-iam-instance-profile.html",
             "stability": "experimental",
             "summary": "Grants permission to register a control channel for an instance to send control messages to Systems Manager service."
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 28
+            "line": 31
           },
           "name": "toCreateControlChannel",
           "returns": {
@@ -336138,7 +336323,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 39
+            "line": 42
           },
           "name": "toCreateDataChannel",
           "returns": {
@@ -336155,7 +336340,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 50
+            "line": 53
           },
           "name": "toOpenControlChannel",
           "returns": {
@@ -336172,7 +336357,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 61
+            "line": 64
           },
           "name": "toOpenDataChannel",
           "returns": {
@@ -336190,7 +336375,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 65
+            "line": 68
           },
           "name": "accessLevelList",
           "overrides": "iam-floyd.PolicyStatementWithActions",
@@ -336261,7 +336446,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 1088
+            "line": 1172
           },
           "name": "onAccount",
           "parameters": [
@@ -336302,7 +336487,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 1100
+            "line": 1184
           },
           "name": "onInstance",
           "parameters": [
@@ -336341,7 +336526,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 1076
+            "line": 1160
           },
           "name": "onPermissionSet",
           "parameters": [
@@ -336415,6 +336600,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_AttachCustomerManagedPolicyReferenceToPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to attach a customer managed policy reference to a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 53
+          },
+          "name": "toAttachCustomerManagedPolicyReferenceToPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_AttachManagedPolicyToPermissionSet.html",
@@ -336423,7 +336625,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 53
+            "line": 64
           },
           "name": "toAttachManagedPolicyToPermissionSet",
           "returns": {
@@ -336440,7 +336642,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 64
+            "line": 75
           },
           "name": "toCreateAccountAssignment",
           "returns": {
@@ -336457,7 +336659,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 75
+            "line": 86
           },
           "name": "toCreateApplicationInstance",
           "returns": {
@@ -336474,7 +336676,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 86
+            "line": 97
           },
           "name": "toCreateApplicationInstanceCertificate",
           "returns": {
@@ -336485,13 +336687,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateInstanceAccessControlAttributeConfiguration.html",
+            "remarks": "Access Level: Write\n\nDependent actions:\n- iam:AttachRolePolicy\n- iam:CreateRole\n- iam:DeleteRole\n- iam:DeleteRolePolicy\n- iam:DetachRolePolicy\n- iam:GetRole\n- iam:ListAttachedRolePolicies\n- iam:ListRolePolicies\n- iam:PutRolePolicy\n- iam:UpdateAssumeRolePolicy\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateInstanceAccessControlAttributeConfiguration.html",
             "stability": "experimental",
             "summary": "Grants permission to enable the instance for ABAC and specify the attributes."
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 97
+            "line": 120
           },
           "name": "toCreateInstanceAccessControlAttributeConfiguration",
           "returns": {
@@ -336508,7 +336710,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 108
+            "line": 131
           },
           "name": "toCreateManagedApplicationInstance",
           "returns": {
@@ -336525,7 +336727,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 123
+            "line": 146
           },
           "name": "toCreatePermissionSet",
           "returns": {
@@ -336542,7 +336744,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 134
+            "line": 157
           },
           "name": "toCreateProfile",
           "returns": {
@@ -336559,7 +336761,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 145
+            "line": 168
           },
           "name": "toCreateTrust",
           "returns": {
@@ -336576,7 +336778,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 156
+            "line": 179
           },
           "name": "toDeleteAccountAssignment",
           "returns": {
@@ -336593,7 +336795,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 167
+            "line": 190
           },
           "name": "toDeleteApplicationInstance",
           "returns": {
@@ -336610,7 +336812,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 178
+            "line": 201
           },
           "name": "toDeleteApplicationInstanceCertificate",
           "returns": {
@@ -336627,7 +336829,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 189
+            "line": 212
           },
           "name": "toDeleteInlinePolicyFromPermissionSet",
           "returns": {
@@ -336644,7 +336846,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 200
+            "line": 223
           },
           "name": "toDeleteInstanceAccessControlAttributeConfiguration",
           "returns": {
@@ -336661,7 +336863,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 211
+            "line": 234
           },
           "name": "toDeleteManagedApplicationInstance",
           "returns": {
@@ -336670,6 +336872,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeletePermissionsBoundaryFromPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to remove permissions boundary from a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 254
+          },
+          "name": "toDeletePermissionsBoundaryFromPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write",
@@ -336678,7 +336897,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 220
+            "line": 243
           },
           "name": "toDeletePermissionSet",
           "returns": {
@@ -336695,7 +336914,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 231
+            "line": 265
           },
           "name": "toDeletePermissionsPolicy",
           "returns": {
@@ -336712,7 +336931,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 242
+            "line": 276
           },
           "name": "toDeleteProfile",
           "returns": {
@@ -336729,7 +336948,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 253
+            "line": 287
           },
           "name": "toDescribeAccountAssignmentCreationStatus",
           "returns": {
@@ -336746,7 +336965,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 264
+            "line": 298
           },
           "name": "toDescribeAccountAssignmentDeletionStatus",
           "returns": {
@@ -336763,7 +336982,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 275
+            "line": 309
           },
           "name": "toDescribeInstanceAccessControlAttributeConfiguration",
           "returns": {
@@ -336780,7 +336999,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 286
+            "line": 320
           },
           "name": "toDescribePermissionSet",
           "returns": {
@@ -336797,7 +337016,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 297
+            "line": 331
           },
           "name": "toDescribePermissionSetProvisioningStatus",
           "returns": {
@@ -336814,7 +337033,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 308
+            "line": 342
           },
           "name": "toDescribePermissionsPolicies",
           "returns": {
@@ -336831,7 +337050,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 319
+            "line": 353
           },
           "name": "toDescribeRegisteredRegions",
           "returns": {
@@ -336840,6 +337059,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DetachCustomerManagedPolicyReferenceFromPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to detach a customer managed policy reference from a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 364
+          },
+          "name": "toDetachCustomerManagedPolicyReferenceFromPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DetachManagedPolicyFromPermissionSet.html",
@@ -336848,7 +337084,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 330
+            "line": 375
           },
           "name": "toDetachManagedPolicyFromPermissionSet",
           "returns": {
@@ -336865,7 +337101,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 344
+            "line": 389
           },
           "name": "toDisassociateDirectory",
           "returns": {
@@ -336882,7 +337118,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 355
+            "line": 400
           },
           "name": "toDisassociateProfile",
           "returns": {
@@ -336899,7 +337135,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 366
+            "line": 411
           },
           "name": "toGetApplicationInstance",
           "returns": {
@@ -336916,7 +337152,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 377
+            "line": 422
           },
           "name": "toGetApplicationTemplate",
           "returns": {
@@ -336933,7 +337169,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 388
+            "line": 433
           },
           "name": "toGetInlinePolicyForPermissionSet",
           "returns": {
@@ -336950,7 +337186,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 399
+            "line": 444
           },
           "name": "toGetManagedApplicationInstance",
           "returns": {
@@ -336967,7 +337203,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 410
+            "line": 455
           },
           "name": "toGetMfaDeviceManagementForDirectory",
           "returns": {
@@ -336976,6 +337212,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetPermissionsBoundaryForPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to get permissions boundary for a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 477
+          },
+          "name": "toGetPermissionsBoundaryForPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
@@ -336984,7 +337237,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 421
+            "line": 466
           },
           "name": "toGetPermissionSet",
           "returns": {
@@ -337001,7 +337254,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 435
+            "line": 491
           },
           "name": "toGetPermissionsPolicy",
           "returns": {
@@ -337018,7 +337271,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 446
+            "line": 502
           },
           "name": "toGetProfile",
           "returns": {
@@ -337035,7 +337288,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 468
+            "line": 524
           },
           "name": "toGetSharedSsoConfiguration",
           "returns": {
@@ -337052,7 +337305,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 479
+            "line": 535
           },
           "name": "toGetSsoConfiguration",
           "returns": {
@@ -337069,7 +337322,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 457
+            "line": 513
           },
           "name": "toGetSSOStatus",
           "returns": {
@@ -337086,7 +337339,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 490
+            "line": 546
           },
           "name": "toGetTrust",
           "returns": {
@@ -337103,7 +337356,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 501
+            "line": 557
           },
           "name": "toImportApplicationInstanceServiceProviderMetadata",
           "returns": {
@@ -337120,7 +337373,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 512
+            "line": 568
           },
           "name": "toListAccountAssignmentCreationStatus",
           "returns": {
@@ -337137,7 +337390,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 523
+            "line": 579
           },
           "name": "toListAccountAssignmentDeletionStatus",
           "returns": {
@@ -337154,7 +337407,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 534
+            "line": 590
           },
           "name": "toListAccountAssignments",
           "returns": {
@@ -337171,7 +337424,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 545
+            "line": 601
           },
           "name": "toListAccountsForProvisionedPermissionSet",
           "returns": {
@@ -337188,7 +337441,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 556
+            "line": 612
           },
           "name": "toListApplicationInstanceCertificates",
           "returns": {
@@ -337205,7 +337458,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 570
+            "line": 626
           },
           "name": "toListApplicationInstances",
           "returns": {
@@ -337222,7 +337475,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 595
+            "line": 651
           },
           "name": "toListApplications",
           "returns": {
@@ -337239,7 +337492,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 584
+            "line": 640
           },
           "name": "toListApplicationTemplates",
           "returns": {
@@ -337248,6 +337501,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListCustomerManagedPolicyReferencesInPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to list the customer managed policy references that are attached to a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 662
+          },
+          "name": "toListCustomerManagedPolicyReferencesInPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
@@ -337256,7 +337526,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 606
+            "line": 673
           },
           "name": "toListDirectoryAssociations",
           "returns": {
@@ -337273,7 +337543,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 617
+            "line": 684
           },
           "name": "toListInstances",
           "returns": {
@@ -337290,7 +337560,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 628
+            "line": 695
           },
           "name": "toListManagedPoliciesInPermissionSet",
           "returns": {
@@ -337307,7 +337577,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 639
+            "line": 706
           },
           "name": "toListPermissionSetProvisioningStatus",
           "returns": {
@@ -337324,7 +337594,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 648
+            "line": 715
           },
           "name": "toListPermissionSets",
           "returns": {
@@ -337341,7 +337611,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 659
+            "line": 726
           },
           "name": "toListPermissionSetsProvisionedToAccount",
           "returns": {
@@ -337358,7 +337628,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 670
+            "line": 737
           },
           "name": "toListProfileAssociations",
           "returns": {
@@ -337375,7 +337645,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 684
+            "line": 751
           },
           "name": "toListProfiles",
           "returns": {
@@ -337392,7 +337662,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 695
+            "line": 762
           },
           "name": "toListTagsForResource",
           "returns": {
@@ -337409,7 +337679,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 706
+            "line": 773
           },
           "name": "toProvisionPermissionSet",
           "returns": {
@@ -337426,7 +337696,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 717
+            "line": 784
           },
           "name": "toPutInlinePolicyToPermissionSet",
           "returns": {
@@ -337443,7 +337713,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 728
+            "line": 795
           },
           "name": "toPutMfaDeviceManagementForDirectory",
           "returns": {
@@ -337452,6 +337722,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutPermissionsBoundaryToPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to add permissions boundary to a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 806
+          },
+          "name": "toPutPermissionsBoundaryToPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
@@ -337460,7 +337747,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 739
+            "line": 817
           },
           "name": "toPutPermissionsPolicy",
           "returns": {
@@ -337477,7 +337764,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 753
+            "line": 831
           },
           "name": "toSearchGroups",
           "returns": {
@@ -337494,7 +337781,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 767
+            "line": 845
           },
           "name": "toSearchUsers",
           "returns": {
@@ -337511,7 +337798,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 782
+            "line": 860
           },
           "name": "toStartSSO",
           "returns": {
@@ -337528,7 +337815,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 797
+            "line": 875
           },
           "name": "toTagResource",
           "returns": {
@@ -337545,7 +337832,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 812
+            "line": 890
           },
           "name": "toUntagResource",
           "returns": {
@@ -337562,7 +337849,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 823
+            "line": 901
           },
           "name": "toUpdateApplicationInstanceActiveCertificate",
           "returns": {
@@ -337579,7 +337866,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 834
+            "line": 912
           },
           "name": "toUpdateApplicationInstanceDisplayData",
           "returns": {
@@ -337596,7 +337883,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 845
+            "line": 923
           },
           "name": "toUpdateApplicationInstanceResponseConfiguration",
           "returns": {
@@ -337613,7 +337900,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 856
+            "line": 934
           },
           "name": "toUpdateApplicationInstanceResponseSchemaConfiguration",
           "returns": {
@@ -337630,7 +337917,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 867
+            "line": 945
           },
           "name": "toUpdateApplicationInstanceSecurityConfiguration",
           "returns": {
@@ -337647,7 +337934,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 878
+            "line": 956
           },
           "name": "toUpdateApplicationInstanceServiceProviderConfiguration",
           "returns": {
@@ -337664,7 +337951,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 889
+            "line": 967
           },
           "name": "toUpdateApplicationInstanceStatus",
           "returns": {
@@ -337681,7 +337968,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 900
+            "line": 978
           },
           "name": "toUpdateDirectoryAssociation",
           "returns": {
@@ -337698,7 +337985,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 911
+            "line": 989
           },
           "name": "toUpdateInstanceAccessControlAttributeConfiguration",
           "returns": {
@@ -337715,7 +338002,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 922
+            "line": 1000
           },
           "name": "toUpdateManagedApplicationInstanceStatus",
           "returns": {
@@ -337732,7 +338019,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 931
+            "line": 1009
           },
           "name": "toUpdatePermissionSet",
           "returns": {
@@ -337749,7 +338036,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 942
+            "line": 1020
           },
           "name": "toUpdateProfile",
           "returns": {
@@ -337766,7 +338053,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 953
+            "line": 1031
           },
           "name": "toUpdateSSOConfiguration",
           "returns": {
@@ -337783,7 +338070,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 964
+            "line": 1042
           },
           "name": "toUpdateTrust",
           "returns": {
@@ -337801,7 +338088,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 968
+            "line": 1046
           },
           "name": "accessLevelList",
           "overrides": "iam-floyd.PolicyStatementWithActions",
@@ -368484,6 +368771,6 @@
       "symbolId": "lib/generated/x-ray:Xray"
     }
   },
-  "version": "0.395.0",
-  "fingerprint": "1FKaWmNlOomRg8infPSa61pmY9Dz/Tc05v89pIe9pm8="
+  "version": "0.396.0",
+  "fingerprint": "SgdnMEShJbaOXu1YoiodkZs+KEK1bduaAt8jNOjdUk0="
 }