iam-floyd 0.395.0 → 0.398.0

package/.jsii

@@ -32,7 +32,7 @@
   },
   "name": "iam-floyd",
   "readme": {
-    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Twitter](https://badgen.net/twitter/follow/heyiamfloyd?icon=twitter)][twitter]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n[![Maintainability](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/maintainability)](https://codeclimate.com/github/udondan/iam-floyd/maintainability)\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 316 Services\n- 12499 Actions\n- 1317 Resource Types\n- 1328 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n\n  **Starting with version 0.300.0, the packages are compatible with CDK v2.** For CDK v1 you can use any version up to:<br>\n  [![npm CDK v1](https://img.shields.io/badge/npm-0.286.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.286.0)\n  [![PyPI CDK v1](https://img.shields.io/badge/pypi-0.286.0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.286.0/)\n\n  Find them all on [libraries.io].\n\n## CDK Compatibility Matrix\n\n| CDK        | cdk-iam-floyd              |\n| ---------- | -------------              |\n| <= 1.151.0 | <= 0.285.0                 |\n| >= 1.152.0 | 0.286.0                    |\n| >= 1.158.0 | **No compatible version!** |\n| >= 2.0.0   | >= 0.300.0                 |\n| >= 2.20.0  | >= 0.351.0                 |\n| >= 2.26.0  | >= 0.377.0                 |\n| 2.29.x     | **No compatible version!** |\n| >= 2.30.0  | >= 0.391.0                 |\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [twitter]: https://twitter.com/heyiamfloyd\n"
+    "markdown": "# IAM Floyd\n\n[![Source](https://img.shields.io/github/stars/udondan/iam-floyd?logo=github&label=GitHub%20Stars)][source]\n[![iam-floyd](https://img.shields.io/github/v/release/udondan/iam-floyd)][source]\n[![Twitter](https://badgen.net/twitter/follow/heyiamfloyd?icon=twitter)][twitter]\n[![libraries.io](https://img.shields.io/badge/packages-libraries.io-yellow)][libraries.io]\n[![Documentation](https://img.shields.io/badge/Documentation-Read%20the%20Docs-orange)][documentation]\n[![GitHub](https://img.shields.io/github/license/udondan/iam-floyd)][license]\n[![Maintainability](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/maintainability)](https://codeclimate.com/github/udondan/iam-floyd/maintainability)\n<!-- put back - when we actually have tests\n[![Test Coverage](https://api.codeclimate.com/v1/badges/cdb84b5646c6805b1a23/test_coverage)](https://codeclimate.com/github/udondan/iam-floyd/test_coverage)\n-->\n\n**AWS [IAM policy statement][statement] generator with fluent interface.**\n\n<!-- stats -->\nSupport for:\n\n- 316 Services\n- 12511 Actions\n- 1317 Resource Types\n- 1334 Condition keys\n<!-- /stats -->\n\n![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**\n\n## Documentation\n\nFind the documentation at [Read the Docs][documentation].\n\n[![Auto completion demo](https://raw.githubusercontent.com/udondan/iam-floyd/main/docs/movie-preview.png)](https://www.youtube.com/watch?v=4dHY8qPHbKA \"Auto completion demo\")\n\n## Packages\n\nThere are two different package variants available:\n\n- **iam-floyd**: Can be used in AWS SDK, Boto 3 or for whatever you need an IAM policy statement for <br>[![npm](https://img.shields.io/npm/dt/iam-floyd?label=npm&color=blueviolet)](https://www.npmjs.com/package/iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/iam-floyd?label=pypi&color=blueviolet)](https://pypi.org/project/iam-floyd/)\n- **cdk-iam-floyd**: Integrates into [AWS CDK] and extends [`iam.PolicyStatement`](https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_aws-iam.PolicyStatement.html)<br>[![npm](https://img.shields.io/npm/dt/cdk-iam-floyd?label=npm&color=orange)](https://www.npmjs.com/package/cdk-iam-floyd)\n[![PyPI](https://img.shields.io/pypi/dm/cdk-iam-floyd?label=pypi&color=orange)](https://pypi.org/project/cdk-iam-floyd/)\n\n  **Starting with version 0.300.0, the packages are compatible with CDK v2.** For CDK v1 you can use any version up to:<br>\n  [![npm CDK v1](https://img.shields.io/badge/npm-0.286.0-yellow)](https://www.npmjs.com/package/cdk-iam-floyd/v/0.286.0)\n  [![PyPI CDK v1](https://img.shields.io/badge/pypi-0.286.0-yellow)](https://pypi.org/project/cdk-iam-floyd/0.286.0/)\n\n  Find them all on [libraries.io].\n\n## CDK Compatibility Matrix\n\n| CDK        | cdk-iam-floyd              |\n| ---------- | -------------              |\n| <= 1.151.0 | <= 0.285.0                 |\n| >= 1.152.0 | 0.286.0                    |\n| >= 1.158.0 | **No compatible version!** |\n| >= 2.0.0   | >= 0.300.0                 |\n| >= 2.20.0  | >= 0.351.0                 |\n| >= 2.26.0  | >= 0.377.0                 |\n| 2.29.x     | **No compatible version!** |\n| >= 2.30.0  | >= 0.391.0                 |\n\n---\n\n## Legal\n\nThe code contained in the [lib/generated](https://github.com/udondan/iam-floyd/tree/main/lib/generated) folder is generated from the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_actions-resources-contextkeys.html). The class- and function-names and their description therefore are property of AWS.\n\nAWS and their services are trademarks, registered trademarks or trade dress of AWS in the U.S. and/or other countries.\n\nThis project is not affiliated, funded, or in any way associated with AWS.\n\nIAM Floyd is licensed under [Apache License 2.0][license]. Dependencies might be released under different licenses. Especially the bundled packages [regex-parser](https://www.npmjs.com/package/regex-parser) and [common-substrings](https://www.npmjs.com/package/common-substrings) are released under the MIT License.\n\n   [source]: https://github.com/udondan/iam-floyd\n   [documentation]: https://iam-floyd.readthedocs.io/en/latest/\n   [npm]: https://www.npmjs.com/package/iam-floyd\n   [license]: https://github.com/udondan/iam-floyd/blob/main/LICENSE\n   [statement]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_statement.html\n   [libraries.io]: https://libraries.io/search?q=iam-floyd\n   [AWS CDK]: https://aws.amazon.com/cdk/\n   [twitter]: https://twitter.com/heyiamfloyd\n"
   },
   "repository": {
     "type": "git",
@@ -31130,12 +31130,13 @@
       "methods": [
         {
           "docs": {
+            "remarks": "https://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Filters access by the type of the agreement."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 204
+            "line": 242
           },
           "name": "ifAgreementType",
           "parameters": [
@@ -31190,12 +31191,13 @@
         },
         {
           "docs": {
+            "remarks": "https://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Filters access by the party type of the agreement."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 214
+            "line": 254
           },
           "name": "ifPartyType",
           "parameters": [
@@ -31250,13 +31252,13 @@
         },
         {
           "docs": {
-            "remarks": "Note: This condition key only applies to the RedHat console, and using it will not allow access to products in AWS Marketplace.",
+            "remarks": "Note: This condition key only applies to the RedHat console, and using it will not restrict access to products in AWS Marketplace\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
-            "summary": "Filters access to AWS Marketplace RedHat OpenShift products in the RedHat console, based on the ProductID of the product."
+            "summary": "Filters access by product id for AWS Marketplace RedHat OpenShift products in the RedHat console."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 224
+            "line": 266
           },
           "name": "ifProductId",
           "parameters": [
@@ -31311,7 +31313,7 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to approve an incoming subscription request (for providers who provide products that require subscription verification)."
           },
@@ -31328,14 +31330,48 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
-            "summary": "Grants permission to users to cancel pending subscription requests for products that require subscription verification."
+            "summary": "Grants permission to users to accept their agreement requests. Note that this action is not applicable to Marketplace purchases."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
             "line": 39
           },
+          "name": "toAcceptAgreementRequest",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.AwsMarketplace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
+            "stability": "experimental",
+            "summary": "Grants permission to users to cancel their agreements. Note that this action is not applicable to Marketplace purchases."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/marketplace.ts",
+            "line": 50
+          },
+          "name": "toCancelAgreement",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.AwsMarketplace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
+            "stability": "experimental",
+            "summary": "Grants permission to users to cancel pending subscription requests for products that require subscription verification."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/marketplace.ts",
+            "line": 61
+          },
           "name": "toCancelAgreementRequest",
           "returns": {
             "type": {
@@ -31345,13 +31381,30 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
+            "stability": "experimental",
+            "summary": "Grants permission to users to create an agreement request. Note that this action is not applicable to Marketplace purchases."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/marketplace.ts",
+            "line": 72
+          },
+          "name": "toCreateAgreementRequest",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.AwsMarketplace"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to describe the metadata about the agreement."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 50
+            "line": 83
           },
           "name": "toDescribeAgreement",
           "returns": {
@@ -31362,13 +31415,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to view the details of their incoming subscription requests (for providers who provide products that require subscription verification)."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 61
+            "line": 94
           },
           "name": "toGetAgreementApprovalRequest",
           "returns": {
@@ -31379,13 +31432,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to view the details of their subscription requests for data products that require subscription verification."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 72
+            "line": 105
           },
           "name": "toGetAgreementRequest",
           "returns": {
@@ -31396,13 +31449,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to get a list of terms for an agreement."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 83
+            "line": 116
           },
           "name": "toGetAgreementTerms",
           "returns": {
@@ -31413,13 +31466,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to list their incoming subscription requests (for providers who provide products that require subscription verification)."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 94
+            "line": 127
           },
           "name": "toListAgreementApprovalRequests",
           "returns": {
@@ -31430,13 +31483,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to list their subscription requests for products that require subscription verification."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 105
+            "line": 138
           },
           "name": "toListAgreementRequests",
           "returns": {
@@ -31447,13 +31500,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to decline an incoming subscription requests (for providers who provide products that require subscription verification)."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 116
+            "line": 149
           },
           "name": "toRejectAgreementApprovalRequest",
           "returns": {
@@ -31464,13 +31517,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to search their agreements."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 127
+            "line": 160
           },
           "name": "toSearchAgreements",
           "returns": {
@@ -31481,13 +31534,13 @@
         },
         {
           "docs": {
-            "remarks": "Includes the ability to send a subscription request for products that require subscription verification. Includes the ability to enable auto-renewal for an existing subscription\n\nAccess Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Includes the ability to send a subscription request for products that require subscription verification. Includes the ability to enable auto-renewal for an existing subscription\n\nAccess Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to subscribe to AWS Marketplace products."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 138
+            "line": 171
           },
           "name": "toSubscribe",
           "returns": {
@@ -31498,13 +31551,13 @@
         },
         {
           "docs": {
-            "remarks": "Includes the ability to disable auto-renewal for an existing subscription\n\nAccess Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Includes the ability to disable auto-renewal for an existing subscription\n\nAccess Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to remove subscriptions to AWS Marketplace products."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 149
+            "line": 182
           },
           "name": "toUnsubscribe",
           "returns": {
@@ -31515,13 +31568,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to make changes to an incoming subscription request, including the ability to delete the prospective subscriber's information (for providers who provide products that require subscription verification)."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 160
+            "line": 193
           },
           "name": "toUpdateAgreementApprovalRequest",
           "returns": {
@@ -31532,13 +31585,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.htmlControllingAccessToAWSMarketplaceSubscriptions.html#SummaryOfAWSMarketplaceSubscriptionsPermissions",
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-iam-users-groups-policies.html",
             "stability": "experimental",
             "summary": "Grants permission to users to see their account's subscriptions."
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 171
+            "line": 204
           },
           "name": "toViewSubscriptions",
           "returns": {
@@ -31556,7 +31609,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/marketplace.ts",
-            "line": 175
+            "line": 208
           },
           "name": "accessLevelList",
           "overrides": "iam-floyd.PolicyStatementWithActions",
@@ -99805,13 +99858,13 @@
       "methods": [
         {
           "docs": {
-            "remarks": "Applies to actions:\n- .toStartSnapshot()\n\nApplies to resource types:\n- snapshot",
+            "remarks": "https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonelasticblockstore.html#amazonelasticblockstore-policy-keys\n\nApplies to actions:\n- .toStartSnapshot()\n\nApplies to resource types:\n- snapshot",
             "stability": "experimental",
             "summary": "Filters access by the description of the snapshot being created."
           },
           "locationInModule": {
             "filename": "lib/generated/elasticblockstore.ts",
-            "line": 156
+            "line": 158
           },
           "name": "ifDescription",
           "parameters": [
@@ -99866,13 +99919,13 @@
         },
         {
           "docs": {
-            "remarks": "Applies to actions:\n- .toStartSnapshot()\n\nApplies to resource types:\n- snapshot",
+            "remarks": "https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonelasticblockstore.html#amazonelasticblockstore-policy-keys\n\nApplies to actions:\n- .toStartSnapshot()\n\nApplies to resource types:\n- snapshot",
             "stability": "experimental",
             "summary": "Filters access by the ID of the parent snapshot."
           },
           "locationInModule": {
             "filename": "lib/generated/elasticblockstore.ts",
-            "line": 172
+            "line": 176
           },
           "name": "ifParentSnapshot",
           "parameters": [
@@ -99927,13 +99980,13 @@
         },
         {
           "docs": {
-            "remarks": "Applies to actions:\n- .toStartSnapshot()\n\nApplies to resource types:\n- snapshot",
+            "remarks": "https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonelasticblockstore.html#amazonelasticblockstore-policy-keys\n\nApplies to actions:\n- .toStartSnapshot()\n\nApplies to resource types:\n- snapshot",
             "stability": "experimental",
             "summary": "Filters access by the size of the volume for the snapshot being created, in GiB."
           },
           "locationInModule": {
             "filename": "lib/generated/elasticblockstore.ts",
-            "line": 188
+            "line": 194
           },
           "name": "ifVolumeSize",
           "parameters": [
@@ -99988,7 +100041,7 @@
         },
         {
           "docs": {
-            "remarks": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policy-structure.html#EC2_ARN_Format",
+            "remarks": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSSnapshots.html",
             "stability": "experimental",
             "summary": "Adds a resource of type snapshot to the statement."
           },
@@ -120587,199 +120640,260 @@
       "methods": [
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
-            "stability": "experimental",
-            "summary": "Grants permission to acknowledge a message, ensuring it will not be delivered again."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 28
-          },
-          "name": "toAcknowledgeMessage",
-          "returns": {
-            "type": {
-              "fqn": "iam-floyd.Ec2messages"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
-            "stability": "experimental",
-            "summary": "Grants permission to delete a message."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 39
-          },
-          "name": "toDeleteMessage",
-          "returns": {
-            "type": {
-              "fqn": "iam-floyd.Ec2messages"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
-            "stability": "experimental",
-            "summary": "Grants permission to fail a message, signifying the message could not be processed successfully, ensuring it cannot be replied to or delivered again."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 50
-          },
-          "name": "toFailMessage",
-          "returns": {
-            "type": {
-              "fqn": "iam-floyd.Ec2messages"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
-            "stability": "experimental",
-            "summary": "Grants permission to route traffic to the correct endpoint based on the given destination for the messages."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 61
-          },
-          "name": "toGetEndpoint",
-          "returns": {
-            "type": {
-              "fqn": "iam-floyd.Ec2messages"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
-            "stability": "experimental",
-            "summary": "Grants permission to deliver messages to clients/instances using long polling."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 72
-          },
-          "name": "toGetMessages",
-          "returns": {
-            "type": {
-              "fqn": "iam-floyd.Ec2messages"
-            }
-          }
-        },
-        {
-          "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
-            "stability": "experimental",
-            "summary": "Grants permission to send replies from clients/instances to upstream service."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 83
-          },
-          "name": "toSendReply",
-          "returns": {
-            "type": {
-              "fqn": "iam-floyd.Ec2messages"
-            }
-          }
-        }
-      ],
-      "name": "Ec2messages",
-      "properties": [
-        {
-          "docs": {
-            "stability": "experimental"
-          },
-          "locationInModule": {
-            "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 87
-          },
-          "name": "accessLevelList",
-          "overrides": "iam-floyd.PolicyStatementWithActions",
-          "protected": true,
-          "type": {
-            "fqn": "iam-floyd.AccessLevelList"
-          }
-        },
-        {
-          "docs": {
+            "remarks": "This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-policy-keys\n\nApplies to actions:\n- .toGetMessages()\n- .toSendReply()",
             "stability": "experimental",
-            "summary": "Holds the prefix of the service actions, e.g. `ec2`."
+            "summary": "Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made."
           },
           "locationInModule": {
             "filename": "lib/generated/messagedeliveryservice.ts",
-            "line": 10
-          },
-          "name": "servicePrefix",
-          "overrides": "iam-floyd.PolicyStatementBase",
-          "type": {
-            "primitive": "string"
-          }
-        }
-      ],
-      "symbolId": "lib/generated/messagedeliveryservice:Ec2messages"
-    },
-    "iam-floyd.Ecr": {
-      "assembly": "iam-floyd",
-      "base": "iam-floyd.PolicyStatement",
-      "docs": {
-        "stability": "experimental",
-        "summary": "Statement provider for service [ecr](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html)."
-      },
-      "fqn": "iam-floyd.Ecr",
-      "initializer": {
-        "docs": {
-          "stability": "experimental",
-          "summary": "Statement provider for service [ecr](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html)."
-        },
-        "locationInModule": {
-          "filename": "lib/generated/elasticcontainerregistry.ts",
-          "line": 17
-        },
-        "parameters": [
-          {
-            "docs": {
-              "summary": "[SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement."
-            },
-            "name": "sid",
-            "optional": true,
-            "type": {
-              "primitive": "string"
-            }
-          }
-        ]
-      },
-      "kind": "class",
-      "locationInModule": {
-        "filename": "lib/generated/elasticcontainerregistry.ts",
-        "line": 9
-      },
-      "methods": [
-        {
-          "docs": {
-            "remarks": "https://docs.aws.amazon.com/AmazonECR/latest/userguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys\n\nApplies to resource types:\n- repository",
-            "stability": "experimental",
-            "summary": "Filters access by tag-value associated with the resource."
-          },
-          "locationInModule": {
-            "filename": "lib/generated/elasticcontainerregistry.ts",
-            "line": 596
+            "line": 118
           },
-          "name": "ifResourceTag",
+          "name": "ifSsmSourceInstanceARN",
           "parameters": [
-            {
-              "docs": {
-                "summary": "The tag key to check."
-              },
-              "name": "tagKey",
-              "type": {
-                "primitive": "string"
-              }
-            },
+            {
+              "docs": {
+                "summary": "The value(s) to check."
+              },
+              "name": "value",
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+              },
+              "name": "operator",
+              "optional": true,
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "iam-floyd.Operator"
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Ec2messages"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
+            "stability": "experimental",
+            "summary": "Grants permission to acknowledge a message, ensuring it will not be delivered again."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/messagedeliveryservice.ts",
+            "line": 28
+          },
+          "name": "toAcknowledgeMessage",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Ec2messages"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
+            "stability": "experimental",
+            "summary": "Grants permission to delete a message."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/messagedeliveryservice.ts",
+            "line": 39
+          },
+          "name": "toDeleteMessage",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Ec2messages"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
+            "stability": "experimental",
+            "summary": "Grants permission to fail a message, signifying the message could not be processed successfully, ensuring it cannot be replied to or delivered again."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/messagedeliveryservice.ts",
+            "line": 50
+          },
+          "name": "toFailMessage",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Ec2messages"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
+            "stability": "experimental",
+            "summary": "Grants permission to route traffic to the correct endpoint based on the given destination for the messages."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/messagedeliveryservice.ts",
+            "line": 61
+          },
+          "name": "toGetEndpoint",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Ec2messages"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nPossible conditions:\n- .ifSsmSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
+            "stability": "experimental",
+            "summary": "Grants permission to deliver messages to clients/instances using long polling."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/messagedeliveryservice.ts",
+            "line": 75
+          },
+          "name": "toGetMessages",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Ec2messages"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSsmSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonmessagedeliveryservice.html",
+            "stability": "experimental",
+            "summary": "Grants permission to send replies from clients/instances to upstream service."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/messagedeliveryservice.ts",
+            "line": 89
+          },
+          "name": "toSendReply",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Ec2messages"
+            }
+          }
+        }
+      ],
+      "name": "Ec2messages",
+      "properties": [
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "locationInModule": {
+            "filename": "lib/generated/messagedeliveryservice.ts",
+            "line": 93
+          },
+          "name": "accessLevelList",
+          "overrides": "iam-floyd.PolicyStatementWithActions",
+          "protected": true,
+          "type": {
+            "fqn": "iam-floyd.AccessLevelList"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Holds the prefix of the service actions, e.g. `ec2`."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/messagedeliveryservice.ts",
+            "line": 10
+          },
+          "name": "servicePrefix",
+          "overrides": "iam-floyd.PolicyStatementBase",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "lib/generated/messagedeliveryservice:Ec2messages"
+    },
+    "iam-floyd.Ecr": {
+      "assembly": "iam-floyd",
+      "base": "iam-floyd.PolicyStatement",
+      "docs": {
+        "stability": "experimental",
+        "summary": "Statement provider for service [ecr](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html)."
+      },
+      "fqn": "iam-floyd.Ecr",
+      "initializer": {
+        "docs": {
+          "stability": "experimental",
+          "summary": "Statement provider for service [ecr](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonelasticcontainerregistry.html)."
+        },
+        "locationInModule": {
+          "filename": "lib/generated/elasticcontainerregistry.ts",
+          "line": 17
+        },
+        "parameters": [
+          {
+            "docs": {
+              "summary": "[SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement."
+            },
+            "name": "sid",
+            "optional": true,
+            "type": {
+              "primitive": "string"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "lib/generated/elasticcontainerregistry.ts",
+        "line": 9
+      },
+      "methods": [
+        {
+          "docs": {
+            "remarks": "https://docs.aws.amazon.com/AmazonECR/latest/userguide/security_iam_service-with-iam.html#security_iam_service-with-iam-id-based-policies-conditionkeys\n\nApplies to resource types:\n- repository",
+            "stability": "experimental",
+            "summary": "Filters access by tag-value associated with the resource."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/elasticcontainerregistry.ts",
+            "line": 596
+          },
+          "name": "ifResourceTag",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The tag key to check."
+              },
+              "name": "tagKey",
+              "type": {
+                "primitive": "string"
+              }
+            },
             {
               "docs": {
                 "summary": "The value(s) to check."
@@ -172903,16 +173017,16 @@
       "base": "iam-floyd.PolicyStatement",
       "docs": {
         "stability": "experimental",
-        "summary": "Statement provider for service [identity-sync](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsidentitysynchronizationservice.html)."
+        "summary": "Statement provider for service [identity-sync](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsidentitysync.html)."
       },
       "fqn": "iam-floyd.IdentitySync",
       "initializer": {
         "docs": {
           "stability": "experimental",
-          "summary": "Statement provider for service [identity-sync](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsidentitysynchronizationservice.html)."
+          "summary": "Statement provider for service [identity-sync](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsidentitysync.html)."
         },
         "locationInModule": {
-          "filename": "lib/generated/identitysynchronizationservice.ts",
+          "filename": "lib/generated/identitysync.ts",
           "line": 17
         },
         "parameters": [
@@ -172930,7 +173044,7 @@
       },
       "kind": "class",
       "locationInModule": {
-        "filename": "lib/generated/identitysynchronizationservice.ts",
+        "filename": "lib/generated/identitysync.ts",
         "line": 9
       },
       "methods": [
@@ -172941,7 +173055,7 @@
             "summary": "Adds a resource of type SyncProfileResource to the statement."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 190
           },
           "name": "onSyncProfileResource",
@@ -173002,7 +173116,7 @@
             "summary": "Adds a resource of type SyncTargetResource to the statement."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 205
           },
           "name": "onSyncTargetResource",
@@ -173072,7 +173186,7 @@
             "summary": "Grants permission to create a sync filter on the sync profile."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 28
           },
           "name": "toCreateSyncFilter",
@@ -173086,10 +173200,10 @@
           "docs": {
             "remarks": "Access Level: Write\n\nDependent actions:\n- ds:AuthorizeApplication\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to create a sync profile for the source."
+            "summary": "Grants permission to create a sync profile for the identity source."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 42
           },
           "name": "toCreateSyncProfile",
@@ -173103,10 +173217,10 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to create a sync target for the source."
+            "summary": "Grants permission to create a sync target for the identity source."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 53
           },
           "name": "toCreateSyncTarget",
@@ -173120,10 +173234,10 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to delete a sync filter on the sync profile."
+            "summary": "Grants permission to delete a sync filter from the sync profile."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 64
           },
           "name": "toDeleteSyncFilter",
@@ -173137,10 +173251,10 @@
           "docs": {
             "remarks": "Access Level: Write\n\nDependent actions:\n- ds:UnauthorizeApplication\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to delete a sync profile on the source."
+            "summary": "Grants permission to delete a sync profile from the source."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 78
           },
           "name": "toDeleteSyncProfile",
@@ -173154,10 +173268,10 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to delete a sync target on the source."
+            "summary": "Grants permission to delete a sync target from the source."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 89
           },
           "name": "toDeleteSyncTarget",
@@ -173171,10 +173285,10 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to retrieve a sync profile using sync profile name."
+            "summary": "Grants permission to retrieve a sync profile by using a sync profile name."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 100
           },
           "name": "toGetSyncProfile",
@@ -173188,10 +173302,10 @@
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to retrieve a sync target on the sync profile."
+            "summary": "Grants permission to retrieve a sync target from the sync profile."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 111
           },
           "name": "toGetSyncTarget",
@@ -173205,10 +173319,10 @@
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to list the sync filters on the sync profile."
+            "summary": "Grants permission to list the sync filters from the sync profile."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 122
           },
           "name": "toListSyncFilters",
@@ -173222,10 +173336,10 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to start a synchronization process or to restart a synchronization that was previously stopped."
+            "summary": "Grants permission to start a sync process or to resume a sync process that was previously paused."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 133
           },
           "name": "toStartSync",
@@ -173239,10 +173353,10 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/security-iam-awsmanpol.html",
             "stability": "experimental",
-            "summary": "Grants permission to stop any planned synchronizations in the synchronization schedule from starting."
+            "summary": "Grants permission to stop any planned sync process in the sync schedule from starting."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 144
           },
           "name": "toStopSync",
@@ -173259,7 +173373,7 @@
             "summary": "Grants permission to update a sync target on the sync profile."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 155
           },
           "name": "toUpdateSyncTarget",
@@ -173277,7 +173391,7 @@
             "stability": "experimental"
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 159
           },
           "name": "accessLevelList",
@@ -173293,7 +173407,7 @@
             "summary": "Holds the prefix of the service actions, e.g. `ec2`."
           },
           "locationInModule": {
-            "filename": "lib/generated/identitysynchronizationservice.ts",
+            "filename": "lib/generated/identitysync.ts",
             "line": 10
           },
           "name": "servicePrefix",
@@ -173303,7 +173417,7 @@
           }
         }
       ],
-      "symbolId": "lib/generated/identitysynchronizationservice:IdentitySync"
+      "symbolId": "lib/generated/identitysync:IdentitySync"
     },
     "iam-floyd.Identitystore": {
       "assembly": "iam-floyd",
@@ -203760,7 +203874,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 446
+            "line": 506
           },
           "name": "onChannel",
           "parameters": [
@@ -203830,7 +203944,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 428
+            "line": 488
           },
           "name": "onStream",
           "parameters": [
@@ -203994,6 +204108,40 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/kinesisvideostreams/latest/dg/API_DescribeImageGenerationConfiguration.html",
+            "stability": "experimental",
+            "summary": "Grants permission to describe the image generation configuration of your Kinesis video stream."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/kinesisvideostreams.ts",
+            "line": 102
+          },
+          "name": "toDescribeImageGenerationConfiguration",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Kinesisvideo"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/kinesisvideostreams/latest/dg/API_DescribeNotificationConfiguration.html",
+            "stability": "experimental",
+            "summary": "Grants permission to describe the notification configuration of your Kinesis video stream."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/kinesisvideostreams.ts",
+            "line": 113
+          },
+          "name": "toDescribeNotificationConfiguration",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Kinesisvideo"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/kinesisvideostreams/latest/dg/API_DescribeSignalingChannel.html",
@@ -204002,7 +204150,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 102
+            "line": 124
           },
           "name": "toDescribeSignalingChannel",
           "returns": {
@@ -204019,7 +204167,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 113
+            "line": 135
           },
           "name": "toDescribeStream",
           "returns": {
@@ -204036,7 +204184,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 124
+            "line": 146
           },
           "name": "toGetClip",
           "returns": {
@@ -204053,7 +204201,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 135
+            "line": 157
           },
           "name": "toGetDASHStreamingSessionURL",
           "returns": {
@@ -204070,7 +204218,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 146
+            "line": 168
           },
           "name": "toGetDataEndpoint",
           "returns": {
@@ -204087,7 +204235,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 157
+            "line": 179
           },
           "name": "toGetHLSStreamingSessionURL",
           "returns": {
@@ -204104,7 +204252,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 168
+            "line": 190
           },
           "name": "toGetIceServerConfig",
           "returns": {
@@ -204113,6 +204261,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/kinesisvideostreams/latest/dg/API_GetImages.html",
+            "stability": "experimental",
+            "summary": "Grants permission to get generated images from your Kinesis video stream."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/kinesisvideostreams.ts",
+            "line": 201
+          },
+          "name": "toGetImages",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Kinesisvideo"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/kinesisvideostreams/latest/dg/API_GetMedia.html",
@@ -204121,7 +204286,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 179
+            "line": 212
           },
           "name": "toGetMedia",
           "returns": {
@@ -204138,7 +204303,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 190
+            "line": 223
           },
           "name": "toGetMediaForFragmentList",
           "returns": {
@@ -204155,7 +204320,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 201
+            "line": 234
           },
           "name": "toGetSignalingChannelEndpoint",
           "returns": {
@@ -204172,7 +204337,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 212
+            "line": 245
           },
           "name": "toListFragments",
           "returns": {
@@ -204189,7 +204354,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 223
+            "line": 256
           },
           "name": "toListSignalingChannels",
           "returns": {
@@ -204206,7 +204371,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 234
+            "line": 267
           },
           "name": "toListStreams",
           "returns": {
@@ -204223,7 +204388,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 245
+            "line": 278
           },
           "name": "toListTagsForResource",
           "returns": {
@@ -204240,7 +204405,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 256
+            "line": 289
           },
           "name": "toListTagsForStream",
           "returns": {
@@ -204257,7 +204422,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 267
+            "line": 300
           },
           "name": "toPutMedia",
           "returns": {
@@ -204274,7 +204439,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 278
+            "line": 311
           },
           "name": "toSendAlexaOfferToMaster",
           "returns": {
@@ -204291,7 +204456,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 293
+            "line": 326
           },
           "name": "toTagResource",
           "returns": {
@@ -204308,7 +204473,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 308
+            "line": 341
           },
           "name": "toTagStream",
           "returns": {
@@ -204325,7 +204490,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 322
+            "line": 355
           },
           "name": "toUntagResource",
           "returns": {
@@ -204342,7 +204507,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 336
+            "line": 369
           },
           "name": "toUntagStream",
           "returns": {
@@ -204359,7 +204524,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 347
+            "line": 380
           },
           "name": "toUpdateDataRetention",
           "returns": {
@@ -204368,6 +204533,40 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/kinesisvideostreams/latest/dg/API_UpdateImageGenerationConfiguration.html",
+            "stability": "experimental",
+            "summary": "Grants permission to update the image generation configuration of your Kinesis video stream."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/kinesisvideostreams.ts",
+            "line": 391
+          },
+          "name": "toUpdateImageGenerationConfiguration",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Kinesisvideo"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/kinesisvideostreams/latest/dg/API_UpdateNotificationConfiguration.html",
+            "stability": "experimental",
+            "summary": "Grants permission to update the notification configuration of your Kinesis video stream."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/kinesisvideostreams.ts",
+            "line": 402
+          },
+          "name": "toUpdateNotificationConfiguration",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Kinesisvideo"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/kinesisvideostreams/latest/dg/API_UpdateSignalingChannel.html",
@@ -204376,7 +204575,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 358
+            "line": 413
           },
           "name": "toUpdateSignalingChannel",
           "returns": {
@@ -204393,7 +204592,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 369
+            "line": 424
           },
           "name": "toUpdateStream",
           "returns": {
@@ -204411,7 +204610,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/kinesisvideostreams.ts",
-            "line": 373
+            "line": 428
           },
           "name": "accessLevelList",
           "overrides": "iam-floyd.PolicyStatementWithActions",
@@ -208203,7 +208402,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 994
+            "line": 1012
           },
           "name": "ifCodeSigningConfigArn",
           "parameters": [
@@ -208264,7 +208463,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 1017
+            "line": 1035
           },
           "name": "ifFunctionArn",
           "parameters": [
@@ -208325,7 +208524,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 1039
+            "line": 1057
           },
           "name": "ifFunctionUrlAuthType",
           "parameters": [
@@ -208386,7 +208585,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 1055
+            "line": 1073
           },
           "name": "ifLayer",
           "parameters": [
@@ -208447,7 +208646,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 1071
+            "line": 1089
           },
           "name": "ifPrincipal",
           "parameters": [
@@ -208508,7 +208707,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 1087
+            "line": 1105
           },
           "name": "ifSecurityGroupIds",
           "parameters": [
@@ -208569,7 +208768,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 1103
+            "line": 1121
           },
           "name": "ifSubnetIds",
           "parameters": [
@@ -208630,7 +208829,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 1119
+            "line": 1137
           },
           "name": "ifVpcIds",
           "parameters": [
@@ -208691,7 +208890,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 891
+            "line": 900
           },
           "name": "onCodeSigningConfig",
           "parameters": [
@@ -208752,7 +208951,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 905
+            "line": 914
           },
           "name": "onEventSourceMapping",
           "parameters": [
@@ -208813,7 +209012,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 919
+            "line": 931
           },
           "name": "onFunction",
           "parameters": [
@@ -208850,7 +209049,7 @@
             },
             {
               "docs": {
-                "remarks": "defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.",
+                "remarks": "defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.\n\nPossible conditions:\n- .ifAwsResourceTag()",
                 "summary": "- Partition of the AWS account [aws, aws-cn, aws-us-gov];"
               },
               "name": "partition",
@@ -208874,7 +209073,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 934
+            "line": 949
           },
           "name": "onFunctionAlias",
           "parameters": [
@@ -208920,7 +209119,7 @@
             },
             {
               "docs": {
-                "remarks": "defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.",
+                "remarks": "defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.\n\nPossible conditions:\n- .ifAwsResourceTag()",
                 "summary": "- Partition of the AWS account [aws, aws-cn, aws-us-gov];"
               },
               "name": "partition",
@@ -208944,7 +209143,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 949
+            "line": 967
           },
           "name": "onFunctionVersion",
           "parameters": [
@@ -208990,7 +209189,7 @@
             },
             {
               "docs": {
-                "remarks": "defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.",
+                "remarks": "defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.\n\nPossible conditions:\n- .ifAwsResourceTag()",
                 "summary": "- Partition of the AWS account [aws, aws-cn, aws-us-gov];"
               },
               "name": "partition",
@@ -209014,7 +209213,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 963
+            "line": 981
           },
           "name": "onLayer",
           "parameters": [
@@ -209075,7 +209274,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 978
+            "line": 996
           },
           "name": "onLayerVersion",
           "parameters": [
@@ -209224,13 +209423,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifLayer()\n- .ifVpcIds()\n- .ifSubnetIds()\n- .ifSecurityGroupIds()\n- .ifCodeSigningConfigArn()\n\nhttps://docs.aws.amazon.com/lambda/latest/dg/API_CreateFunction.html",
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifLayer()\n- .ifVpcIds()\n- .ifSubnetIds()\n- .ifSecurityGroupIds()\n- .ifCodeSigningConfigArn()\n- .ifAwsRequestTag()\n- .ifAwsTagKeys()\n\nhttps://docs.aws.amazon.com/lambda/latest/dg/API_CreateFunction.html",
             "stability": "experimental",
             "summary": "Grants permission to create an AWS Lambda function."
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 97
+            "line": 99
           },
           "name": "toCreateFunction",
           "returns": {
@@ -209247,7 +209446,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 112
+            "line": 114
           },
           "name": "toCreateFunctionUrlConfig",
           "returns": {
@@ -209264,7 +209463,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 123
+            "line": 125
           },
           "name": "toDeleteAlias",
           "returns": {
@@ -209281,7 +209480,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 134
+            "line": 136
           },
           "name": "toDeleteCodeSigningConfig",
           "returns": {
@@ -209298,7 +209497,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 148
+            "line": 150
           },
           "name": "toDeleteEventSourceMapping",
           "returns": {
@@ -209315,7 +209514,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 159
+            "line": 161
           },
           "name": "toDeleteFunction",
           "returns": {
@@ -209332,7 +209531,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 170
+            "line": 172
           },
           "name": "toDeleteFunctionCodeSigningConfig",
           "returns": {
@@ -209349,7 +209548,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 181
+            "line": 183
           },
           "name": "toDeleteFunctionConcurrency",
           "returns": {
@@ -209366,7 +209565,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 192
+            "line": 194
           },
           "name": "toDeleteFunctionEventInvokeConfig",
           "returns": {
@@ -209383,7 +209582,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 207
+            "line": 209
           },
           "name": "toDeleteFunctionUrlConfig",
           "returns": {
@@ -209400,7 +209599,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 218
+            "line": 220
           },
           "name": "toDeleteLayerVersion",
           "returns": {
@@ -209417,7 +209616,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 229
+            "line": 231
           },
           "name": "toDeleteProvisionedConcurrencyConfig",
           "returns": {
@@ -209434,7 +209633,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 238
+            "line": 240
           },
           "name": "toDisableReplication",
           "returns": {
@@ -209451,7 +209650,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 247
+            "line": 249
           },
           "name": "toEnableReplication",
           "returns": {
@@ -209468,7 +209667,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 258
+            "line": 260
           },
           "name": "toGetAccountSettings",
           "returns": {
@@ -209485,7 +209684,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 269
+            "line": 271
           },
           "name": "toGetAlias",
           "returns": {
@@ -209502,7 +209701,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 280
+            "line": 282
           },
           "name": "toGetCodeSigningConfig",
           "returns": {
@@ -209519,7 +209718,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 294
+            "line": 296
           },
           "name": "toGetEventSourceMapping",
           "returns": {
@@ -209536,7 +209735,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 305
+            "line": 307
           },
           "name": "toGetFunction",
           "returns": {
@@ -209553,7 +209752,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 316
+            "line": 318
           },
           "name": "toGetFunctionCodeSigningConfig",
           "returns": {
@@ -209570,7 +209769,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 327
+            "line": 329
           },
           "name": "toGetFunctionConcurrency",
           "returns": {
@@ -209587,7 +209786,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 338
+            "line": 340
           },
           "name": "toGetFunctionConfiguration",
           "returns": {
@@ -209604,7 +209803,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 349
+            "line": 351
           },
           "name": "toGetFunctionEventInvokeConfig",
           "returns": {
@@ -209621,7 +209820,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 364
+            "line": 366
           },
           "name": "toGetFunctionUrlConfig",
           "returns": {
@@ -209638,7 +209837,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 375
+            "line": 377
           },
           "name": "toGetLayerVersion",
           "returns": {
@@ -209655,7 +209854,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 386
+            "line": 388
           },
           "name": "toGetLayerVersionPolicy",
           "returns": {
@@ -209672,7 +209871,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 397
+            "line": 399
           },
           "name": "toGetPolicy",
           "returns": {
@@ -209689,7 +209888,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 408
+            "line": 410
           },
           "name": "toGetProvisionedConcurrencyConfig",
           "returns": {
@@ -209706,7 +209905,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 419
+            "line": 421
           },
           "name": "toInvokeAsync",
           "returns": {
@@ -209723,7 +209922,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 430
+            "line": 432
           },
           "name": "toInvokeFunction",
           "returns": {
@@ -209740,7 +209939,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 445
+            "line": 447
           },
           "name": "toInvokeFunctionUrl",
           "returns": {
@@ -209757,7 +209956,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 456
+            "line": 458
           },
           "name": "toListAliases",
           "returns": {
@@ -209774,7 +209973,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 467
+            "line": 469
           },
           "name": "toListCodeSigningConfigs",
           "returns": {
@@ -209791,7 +209990,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 478
+            "line": 480
           },
           "name": "toListEventSourceMappings",
           "returns": {
@@ -209808,7 +210007,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 489
+            "line": 491
           },
           "name": "toListFunctionEventInvokeConfigs",
           "returns": {
@@ -209825,7 +210024,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 514
+            "line": 516
           },
           "name": "toListFunctions",
           "returns": {
@@ -209842,7 +210041,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 525
+            "line": 527
           },
           "name": "toListFunctionsByCodeSigningConfig",
           "returns": {
@@ -209859,7 +210058,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 503
+            "line": 505
           },
           "name": "toListFunctionUrlConfigs",
           "returns": {
@@ -209876,7 +210075,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 547
+            "line": 549
           },
           "name": "toListLayers",
           "returns": {
@@ -209893,7 +210092,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 536
+            "line": 538
           },
           "name": "toListLayerVersions",
           "returns": {
@@ -209910,7 +210109,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 558
+            "line": 560
           },
           "name": "toListProvisionedConcurrencyConfigs",
           "returns": {
@@ -209927,7 +210126,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 569
+            "line": 571
           },
           "name": "toListTags",
           "returns": {
@@ -209944,7 +210143,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 580
+            "line": 582
           },
           "name": "toListVersionsByFunction",
           "returns": {
@@ -209961,7 +210160,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 591
+            "line": 593
           },
           "name": "toPublishLayerVersion",
           "returns": {
@@ -209978,7 +210177,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 602
+            "line": 604
           },
           "name": "toPublishVersion",
           "returns": {
@@ -209995,7 +210194,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 616
+            "line": 618
           },
           "name": "toPutFunctionCodeSigningConfig",
           "returns": {
@@ -210012,7 +210211,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 627
+            "line": 629
           },
           "name": "toPutFunctionConcurrency",
           "returns": {
@@ -210029,7 +210228,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 638
+            "line": 640
           },
           "name": "toPutFunctionEventInvokeConfig",
           "returns": {
@@ -210046,7 +210245,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 649
+            "line": 651
           },
           "name": "toPutProvisionedConcurrencyConfig",
           "returns": {
@@ -210063,7 +210262,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 660
+            "line": 662
           },
           "name": "toRemoveLayerVersionPermission",
           "returns": {
@@ -210080,7 +210279,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 675
+            "line": 677
           },
           "name": "toRemovePermission",
           "returns": {
@@ -210091,13 +210290,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Tagging\n\nhttps://docs.aws.amazon.com/lambda/latest/dg/API_TagResources.html",
+            "remarks": "Access Level: Tagging\n\nPossible conditions:\n- .ifAwsRequestTag()\n- .ifAwsTagKeys()\n\nhttps://docs.aws.amazon.com/lambda/latest/dg/API_TagResources.html",
             "stability": "experimental",
             "summary": "Grants permission to add tags to an AWS Lambda function."
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 686
+            "line": 692
           },
           "name": "toTagResource",
           "returns": {
@@ -210108,13 +210307,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Tagging\n\nhttps://docs.aws.amazon.com/lambda/latest/dg/API_UntagResource.html",
+            "remarks": "Access Level: Tagging\n\nPossible conditions:\n- .ifAwsTagKeys()\n\nhttps://docs.aws.amazon.com/lambda/latest/dg/API_UntagResource.html",
             "stability": "experimental",
             "summary": "Grants permission to remove tags from an AWS Lambda function."
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 697
+            "line": 706
           },
           "name": "toUntagResource",
           "returns": {
@@ -210131,7 +210330,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 708
+            "line": 717
           },
           "name": "toUpdateAlias",
           "returns": {
@@ -210148,7 +210347,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 719
+            "line": 728
           },
           "name": "toUpdateCodeSigningConfig",
           "returns": {
@@ -210165,7 +210364,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 733
+            "line": 742
           },
           "name": "toUpdateEventSourceMapping",
           "returns": {
@@ -210182,7 +210381,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 744
+            "line": 753
           },
           "name": "toUpdateFunctionCode",
           "returns": {
@@ -210199,7 +210398,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 755
+            "line": 764
           },
           "name": "toUpdateFunctionCodeSigningConfig",
           "returns": {
@@ -210216,7 +210415,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 772
+            "line": 781
           },
           "name": "toUpdateFunctionConfiguration",
           "returns": {
@@ -210233,7 +210432,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 783
+            "line": 792
           },
           "name": "toUpdateFunctionEventInvokeConfig",
           "returns": {
@@ -210250,7 +210449,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 798
+            "line": 807
           },
           "name": "toUpdateFunctionUrlConfig",
           "returns": {
@@ -210268,7 +210467,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/lambda.ts",
-            "line": 802
+            "line": 811
           },
           "name": "accessLevelList",
           "overrides": "iam-floyd.PolicyStatementWithActions",
@@ -328944,7 +329143,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
-            "line": 615
+            "line": 627
           },
           "name": "onChart",
           "parameters": [
@@ -329005,7 +329204,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
-            "line": 581
+            "line": 593
           },
           "name": "onConnection",
           "parameters": [
@@ -329066,7 +329265,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
-            "line": 598
+            "line": 610
           },
           "name": "onQuery",
           "parameters": [
@@ -329718,13 +329917,13 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/redshift/latest/mgmt/redshift-policy-resources.resource-permissions.html",
             "stability": "experimental",
-            "summary": "Grants permission to update account-wide export settings."
+            "summary": "Grants permission to update account-wide connection settings."
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
             "line": 433
           },
-          "name": "toUpdateAccountExportSettings",
+          "name": "toUpdateAccountConnectionSettings",
           "returns": {
             "type": {
               "fqn": "iam-floyd.Sqlworkbench"
@@ -329735,12 +329934,29 @@
           "docs": {
             "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/redshift/latest/mgmt/redshift-policy-resources.resource-permissions.html",
             "stability": "experimental",
-            "summary": "Grants permission to update general account-wide settings."
+            "summary": "Grants permission to update account-wide export settings."
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
             "line": 444
           },
+          "name": "toUpdateAccountExportSettings",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Sqlworkbench"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/redshift/latest/mgmt/redshift-policy-resources.resource-permissions.html",
+            "stability": "experimental",
+            "summary": "Grants permission to update account-wide general settings."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sqlworkbench.ts",
+            "line": 455
+          },
           "name": "toUpdateAccountGeneralSettings",
           "returns": {
             "type": {
@@ -329756,7 +329972,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
-            "line": 459
+            "line": 470
           },
           "name": "toUpdateChart",
           "returns": {
@@ -329773,7 +329989,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
-            "line": 474
+            "line": 485
           },
           "name": "toUpdateConnection",
           "returns": {
@@ -329790,7 +330006,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
-            "line": 485
+            "line": 496
           },
           "name": "toUpdateFileFolder",
           "returns": {
@@ -329807,7 +330023,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
-            "line": 496
+            "line": 507
           },
           "name": "toUpdateFolder",
           "returns": {
@@ -329824,7 +330040,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
-            "line": 511
+            "line": 522
           },
           "name": "toUpdateSavedQuery",
           "returns": {
@@ -329842,7 +330058,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sqlworkbench.ts",
-            "line": 515
+            "line": 526
           },
           "name": "accessLevelList",
           "overrides": "iam-floyd.PolicyStatementWithActions",
@@ -330335,7 +330551,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2157
+            "line": 2170
           },
           "name": "ifAutoApprove",
           "parameters": [
@@ -330396,7 +330612,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2175
+            "line": 2188
           },
           "name": "ifDocumentCategories",
           "parameters": [
@@ -330453,11 +330669,11 @@
           "docs": {
             "remarks": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions\n\nApplies to actions:\n- .toPutParameter()",
             "stability": "experimental",
-            "summary": "Controls whether Systems Manager parameters can be overwritten."
+            "summary": "Filters access by allowing Systems Manager parameters to be overwritten."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2190
+            "line": 2203
           },
           "name": "ifOverwrite",
           "parameters": [
@@ -330514,11 +330730,11 @@
           "docs": {
             "remarks": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions\n\nApplies to actions:\n- .toGetParametersByPath()",
             "stability": "experimental",
-            "summary": "Filters access to Systems Manager parameters created in a hierarchical structure."
+            "summary": "Filters access by allowing traversing hierarchical structure of the Systems Manager parameters."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2205
+            "line": 2218
           },
           "name": "ifRecursive",
           "parameters": [
@@ -330575,11 +330791,11 @@
           "docs": {
             "remarks": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions\n\nApplies to actions:\n- .toDeregisterManagedInstance()\n- .toGetConnectionStatus()\n- .toSendCommand()\n- .toStartSession()\n- .toUpdateManagedInstanceRole()\n\nApplies to resource types:\n- automation-execution\n- instance\n- maintenancewindow\n- managed-instance\n- opsmetadata\n- parameter\n- patchbaseline",
             "stability": "experimental",
-            "summary": "Filters access by based on a tag key-value pair assigned to the Systems Manager resource."
+            "summary": "Filters access by allowing access based on a tag key-value pair assigned to the Systems Manager resource."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2266
+            "line": 2296
           },
           "name": "ifResourceTag",
           "parameters": [
@@ -330649,7 +330865,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2219
+            "line": 2232
           },
           "name": "ifSessionDocumentAccessCheck",
           "parameters": [
@@ -330671,6 +330887,67 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-policy-keys\n\nApplies to actions:\n- .toUpdateAssociationStatus()\n- .toUpdateInstanceAssociationStatus()\n- .toUpdateInstanceInformation()",
+            "stability": "experimental",
+            "summary": "Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/systemsmanager.ts",
+            "line": 2249
+          },
+          "name": "ifSourceInstanceARN",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The value(s) to check."
+              },
+              "name": "value",
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+              },
+              "name": "operator",
+              "optional": true,
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "iam-floyd.Operator"
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Ssm"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "https://docs.aws.amazon.com/systems-manager/latest/userguide/auth-and-access-control-iam-access-control-identity-based.html#policy-conditions\n\nApplies to actions:\n- .toCreateResourceDataSync()\n- .toDeleteResourceDataSync()\n- .toListResourceDataSync()\n- .toUpdateResourceDataSync()",
@@ -330679,7 +330956,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2237
+            "line": 2267
           },
           "name": "ifSyncType",
           "parameters": [
@@ -330740,7 +331017,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1857
+            "line": 1866
           },
           "name": "onAssociation",
           "parameters": [
@@ -330801,7 +331078,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1890
+            "line": 1899
           },
           "name": "onAutomationDefinition",
           "parameters": [
@@ -330871,7 +331148,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1875
+            "line": 1884
           },
           "name": "onAutomationExecution",
           "parameters": [
@@ -330926,12 +331203,13 @@
         },
         {
           "docs": {
+            "remarks": "https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingBucket.html",
             "stability": "experimental",
             "summary": "Adds a resource of type bucket to the statement."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1900
+            "line": 1911
           },
           "name": "onBucket",
           "parameters": [
@@ -330970,7 +331248,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1918
+            "line": 1929
           },
           "name": "onDocument",
           "parameters": [
@@ -331025,12 +331303,13 @@
         },
         {
           "docs": {
+            "remarks": "https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policy-structure.html#EC2_ARN_Format",
             "stability": "experimental",
             "summary": "Adds a resource of type instance to the statement."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1934
+            "line": 1947
           },
           "name": "onInstance",
           "parameters": [
@@ -331091,7 +331370,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1952
+            "line": 1965
           },
           "name": "onMaintenancewindow",
           "parameters": [
@@ -331152,7 +331431,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1970
+            "line": 1983
           },
           "name": "onManagedInstance",
           "parameters": [
@@ -331213,7 +331492,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1984
+            "line": 1997
           },
           "name": "onManagedInstanceInventory",
           "parameters": [
@@ -331274,7 +331553,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2001
+            "line": 2014
           },
           "name": "onOpsitem",
           "parameters": [
@@ -331335,7 +331614,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2019
+            "line": 2032
           },
           "name": "onOpsmetadata",
           "parameters": [
@@ -331396,7 +331675,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2037
+            "line": 2050
           },
           "name": "onParameter",
           "parameters": [
@@ -331457,7 +331736,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2055
+            "line": 2068
           },
           "name": "onPatchbaseline",
           "parameters": [
@@ -331518,7 +331797,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2083
+            "line": 2096
           },
           "name": "onResourcedatasync",
           "parameters": [
@@ -331579,7 +331858,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2097
+            "line": 2110
           },
           "name": "onServicesetting",
           "parameters": [
@@ -331640,7 +331919,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2069
+            "line": 2082
           },
           "name": "onSession",
           "parameters": [
@@ -331701,7 +331980,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2142
+            "line": 2155
           },
           "name": "onTask",
           "parameters": [
@@ -331762,7 +332041,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2111
+            "line": 2124
           },
           "name": "onWindowtarget",
           "parameters": [
@@ -331823,7 +332102,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 2125
+            "line": 2138
           },
           "name": "onWindowtask",
           "parameters": [
@@ -334088,13 +334367,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateAssociationStatus.html",
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateAssociationStatus.html",
             "stability": "experimental",
             "summary": "Grants permission to update the status of the SSM document associated with a specified instance."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1527
+            "line": 1530
           },
           "name": "toUpdateAssociationStatus",
           "returns": {
@@ -334111,7 +334390,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1538
+            "line": 1541
           },
           "name": "toUpdateDocument",
           "returns": {
@@ -334128,7 +334407,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1549
+            "line": 1552
           },
           "name": "toUpdateDocumentDefaultVersion",
           "returns": {
@@ -334145,7 +334424,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1560
+            "line": 1563
           },
           "name": "toUpdateDocumentMetadata",
           "returns": {
@@ -334156,13 +334435,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write",
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSourceInstanceARN()",
             "stability": "experimental",
             "summary": "Grants permission to SSM Agent to update the status of the association that it is currently running (internal Systems Manager call)."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1569
+            "line": 1575
           },
           "name": "toUpdateInstanceAssociationStatus",
           "returns": {
@@ -334173,13 +334452,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html",
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up-messageAPIs.html",
             "stability": "experimental",
             "summary": "Grants permission to SSM Agent to send a heartbeat signal to the Systems Manager service in the cloud."
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1580
+            "line": 1589
           },
           "name": "toUpdateInstanceInformation",
           "returns": {
@@ -334196,7 +334475,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1591
+            "line": 1600
           },
           "name": "toUpdateMaintenanceWindow",
           "returns": {
@@ -334213,7 +334492,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1602
+            "line": 1611
           },
           "name": "toUpdateMaintenanceWindowTarget",
           "returns": {
@@ -334230,7 +334509,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1613
+            "line": 1622
           },
           "name": "toUpdateMaintenanceWindowTask",
           "returns": {
@@ -334247,7 +334526,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1627
+            "line": 1636
           },
           "name": "toUpdateManagedInstanceRole",
           "returns": {
@@ -334264,7 +334543,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1638
+            "line": 1647
           },
           "name": "toUpdateOpsItem",
           "returns": {
@@ -334281,7 +334560,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1649
+            "line": 1658
           },
           "name": "toUpdateOpsMetadata",
           "returns": {
@@ -334298,7 +334577,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1660
+            "line": 1669
           },
           "name": "toUpdatePatchBaseline",
           "returns": {
@@ -334315,7 +334594,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1674
+            "line": 1683
           },
           "name": "toUpdateResourceDataSync",
           "returns": {
@@ -334332,7 +334611,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1685
+            "line": 1694
           },
           "name": "toUpdateServiceSetting",
           "returns": {
@@ -334350,7 +334629,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/systemsmanager.ts",
-            "line": 1689
+            "line": 1698
           },
           "name": "accessLevelList",
           "overrides": "iam-floyd.PolicyStatementWithActions",
@@ -336115,13 +336394,74 @@
       "methods": [
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-create-iam-instance-profile.html",
+            "remarks": "This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile\n\nhttps://docs.aws.amazon.com/service-authorization/latest/reference/list_awssystemsmanager.html#awssystemsmanager-policy-keys\n\nApplies to actions:\n- .toCreateControlChannel()",
+            "stability": "experimental",
+            "summary": "Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
+            "line": 88
+          },
+          "name": "ifSsmSourceInstanceARN",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "The value(s) to check."
+              },
+              "name": "value",
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "collection": {
+                        "elementtype": {
+                          "primitive": "string"
+                        },
+                        "kind": "array"
+                      }
+                    }
+                  ]
+                }
+              }
+            },
+            {
+              "docs": {
+                "summary": "Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`."
+              },
+              "name": "operator",
+              "optional": true,
+              "type": {
+                "union": {
+                  "types": [
+                    {
+                      "primitive": "string"
+                    },
+                    {
+                      "fqn": "iam-floyd.Operator"
+                    }
+                  ]
+                }
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Ssmmessages"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Access Level: Write\n\nPossible conditions:\n- .ifSsmSourceInstanceARN()\n\nhttps://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-create-iam-instance-profile.html",
             "stability": "experimental",
             "summary": "Grants permission to register a control channel for an instance to send control messages to Systems Manager service."
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 28
+            "line": 31
           },
           "name": "toCreateControlChannel",
           "returns": {
@@ -336138,7 +336478,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 39
+            "line": 42
           },
           "name": "toCreateDataChannel",
           "returns": {
@@ -336155,7 +336495,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 50
+            "line": 53
           },
           "name": "toOpenControlChannel",
           "returns": {
@@ -336172,7 +336512,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 61
+            "line": 64
           },
           "name": "toOpenDataChannel",
           "returns": {
@@ -336190,7 +336530,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sessionmanagermessagegatewayservice.ts",
-            "line": 65
+            "line": 68
           },
           "name": "accessLevelList",
           "overrides": "iam-floyd.PolicyStatementWithActions",
@@ -336261,7 +336601,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 1088
+            "line": 1172
           },
           "name": "onAccount",
           "parameters": [
@@ -336302,7 +336642,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 1100
+            "line": 1184
           },
           "name": "onInstance",
           "parameters": [
@@ -336341,7 +336681,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 1076
+            "line": 1160
           },
           "name": "onPermissionSet",
           "parameters": [
@@ -336415,6 +336755,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_AttachCustomerManagedPolicyReferenceToPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to attach a customer managed policy reference to a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 53
+          },
+          "name": "toAttachCustomerManagedPolicyReferenceToPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_AttachManagedPolicyToPermissionSet.html",
@@ -336423,7 +336780,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 53
+            "line": 64
           },
           "name": "toAttachManagedPolicyToPermissionSet",
           "returns": {
@@ -336440,7 +336797,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 64
+            "line": 75
           },
           "name": "toCreateAccountAssignment",
           "returns": {
@@ -336457,7 +336814,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 75
+            "line": 86
           },
           "name": "toCreateApplicationInstance",
           "returns": {
@@ -336474,7 +336831,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 86
+            "line": 97
           },
           "name": "toCreateApplicationInstanceCertificate",
           "returns": {
@@ -336485,13 +336842,13 @@
         },
         {
           "docs": {
-            "remarks": "Access Level: Write\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateInstanceAccessControlAttributeConfiguration.html",
+            "remarks": "Access Level: Write\n\nDependent actions:\n- iam:AttachRolePolicy\n- iam:CreateRole\n- iam:DeleteRole\n- iam:DeleteRolePolicy\n- iam:DetachRolePolicy\n- iam:GetRole\n- iam:ListAttachedRolePolicies\n- iam:ListRolePolicies\n- iam:PutRolePolicy\n- iam:UpdateAssumeRolePolicy\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateInstanceAccessControlAttributeConfiguration.html",
             "stability": "experimental",
             "summary": "Grants permission to enable the instance for ABAC and specify the attributes."
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 97
+            "line": 120
           },
           "name": "toCreateInstanceAccessControlAttributeConfiguration",
           "returns": {
@@ -336508,7 +336865,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 108
+            "line": 131
           },
           "name": "toCreateManagedApplicationInstance",
           "returns": {
@@ -336525,7 +336882,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 123
+            "line": 146
           },
           "name": "toCreatePermissionSet",
           "returns": {
@@ -336542,7 +336899,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 134
+            "line": 157
           },
           "name": "toCreateProfile",
           "returns": {
@@ -336559,7 +336916,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 145
+            "line": 168
           },
           "name": "toCreateTrust",
           "returns": {
@@ -336576,7 +336933,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 156
+            "line": 179
           },
           "name": "toDeleteAccountAssignment",
           "returns": {
@@ -336593,7 +336950,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 167
+            "line": 190
           },
           "name": "toDeleteApplicationInstance",
           "returns": {
@@ -336610,7 +336967,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 178
+            "line": 201
           },
           "name": "toDeleteApplicationInstanceCertificate",
           "returns": {
@@ -336627,7 +336984,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 189
+            "line": 212
           },
           "name": "toDeleteInlinePolicyFromPermissionSet",
           "returns": {
@@ -336644,7 +337001,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 200
+            "line": 223
           },
           "name": "toDeleteInstanceAccessControlAttributeConfiguration",
           "returns": {
@@ -336661,7 +337018,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 211
+            "line": 234
           },
           "name": "toDeleteManagedApplicationInstance",
           "returns": {
@@ -336670,6 +337027,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeletePermissionsBoundaryFromPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to remove permissions boundary from a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 254
+          },
+          "name": "toDeletePermissionsBoundaryFromPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Write",
@@ -336678,7 +337052,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 220
+            "line": 243
           },
           "name": "toDeletePermissionSet",
           "returns": {
@@ -336695,7 +337069,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 231
+            "line": 265
           },
           "name": "toDeletePermissionsPolicy",
           "returns": {
@@ -336712,7 +337086,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 242
+            "line": 276
           },
           "name": "toDeleteProfile",
           "returns": {
@@ -336729,7 +337103,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 253
+            "line": 287
           },
           "name": "toDescribeAccountAssignmentCreationStatus",
           "returns": {
@@ -336746,7 +337120,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 264
+            "line": 298
           },
           "name": "toDescribeAccountAssignmentDeletionStatus",
           "returns": {
@@ -336763,7 +337137,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 275
+            "line": 309
           },
           "name": "toDescribeInstanceAccessControlAttributeConfiguration",
           "returns": {
@@ -336780,7 +337154,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 286
+            "line": 320
           },
           "name": "toDescribePermissionSet",
           "returns": {
@@ -336797,7 +337171,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 297
+            "line": 331
           },
           "name": "toDescribePermissionSetProvisioningStatus",
           "returns": {
@@ -336814,7 +337188,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 308
+            "line": 342
           },
           "name": "toDescribePermissionsPolicies",
           "returns": {
@@ -336831,7 +337205,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 319
+            "line": 353
           },
           "name": "toDescribeRegisteredRegions",
           "returns": {
@@ -336840,6 +337214,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DetachCustomerManagedPolicyReferenceFromPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to detach a customer managed policy reference from a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 364
+          },
+          "name": "toDetachCustomerManagedPolicyReferenceFromPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DetachManagedPolicyFromPermissionSet.html",
@@ -336848,7 +337239,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 330
+            "line": 375
           },
           "name": "toDetachManagedPolicyFromPermissionSet",
           "returns": {
@@ -336865,7 +337256,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 344
+            "line": 389
           },
           "name": "toDisassociateDirectory",
           "returns": {
@@ -336882,7 +337273,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 355
+            "line": 400
           },
           "name": "toDisassociateProfile",
           "returns": {
@@ -336899,7 +337290,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 366
+            "line": 411
           },
           "name": "toGetApplicationInstance",
           "returns": {
@@ -336916,7 +337307,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 377
+            "line": 422
           },
           "name": "toGetApplicationTemplate",
           "returns": {
@@ -336933,7 +337324,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 388
+            "line": 433
           },
           "name": "toGetInlinePolicyForPermissionSet",
           "returns": {
@@ -336950,7 +337341,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 399
+            "line": 444
           },
           "name": "toGetManagedApplicationInstance",
           "returns": {
@@ -336967,7 +337358,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 410
+            "line": 455
           },
           "name": "toGetMfaDeviceManagementForDirectory",
           "returns": {
@@ -336976,6 +337367,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetPermissionsBoundaryForPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to get permissions boundary for a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 477
+          },
+          "name": "toGetPermissionsBoundaryForPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
@@ -336984,7 +337392,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 421
+            "line": 466
           },
           "name": "toGetPermissionSet",
           "returns": {
@@ -337001,7 +337409,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 435
+            "line": 491
           },
           "name": "toGetPermissionsPolicy",
           "returns": {
@@ -337018,7 +337426,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 446
+            "line": 502
           },
           "name": "toGetProfile",
           "returns": {
@@ -337035,7 +337443,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 468
+            "line": 524
           },
           "name": "toGetSharedSsoConfiguration",
           "returns": {
@@ -337052,7 +337460,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 479
+            "line": 535
           },
           "name": "toGetSsoConfiguration",
           "returns": {
@@ -337069,7 +337477,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 457
+            "line": 513
           },
           "name": "toGetSSOStatus",
           "returns": {
@@ -337086,7 +337494,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 490
+            "line": 546
           },
           "name": "toGetTrust",
           "returns": {
@@ -337103,7 +337511,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 501
+            "line": 557
           },
           "name": "toImportApplicationInstanceServiceProviderMetadata",
           "returns": {
@@ -337120,7 +337528,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 512
+            "line": 568
           },
           "name": "toListAccountAssignmentCreationStatus",
           "returns": {
@@ -337137,7 +337545,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 523
+            "line": 579
           },
           "name": "toListAccountAssignmentDeletionStatus",
           "returns": {
@@ -337154,7 +337562,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 534
+            "line": 590
           },
           "name": "toListAccountAssignments",
           "returns": {
@@ -337171,7 +337579,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 545
+            "line": 601
           },
           "name": "toListAccountsForProvisionedPermissionSet",
           "returns": {
@@ -337188,7 +337596,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 556
+            "line": 612
           },
           "name": "toListApplicationInstanceCertificates",
           "returns": {
@@ -337205,7 +337613,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 570
+            "line": 626
           },
           "name": "toListApplicationInstances",
           "returns": {
@@ -337222,7 +337630,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 595
+            "line": 651
           },
           "name": "toListApplications",
           "returns": {
@@ -337239,7 +337647,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 584
+            "line": 640
           },
           "name": "toListApplicationTemplates",
           "returns": {
@@ -337248,6 +337656,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: List\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_ListCustomerManagedPolicyReferencesInPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to list the customer managed policy references that are attached to a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 662
+          },
+          "name": "toListCustomerManagedPolicyReferencesInPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Read\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
@@ -337256,7 +337681,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 606
+            "line": 673
           },
           "name": "toListDirectoryAssociations",
           "returns": {
@@ -337273,7 +337698,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 617
+            "line": 684
           },
           "name": "toListInstances",
           "returns": {
@@ -337290,7 +337715,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 628
+            "line": 695
           },
           "name": "toListManagedPoliciesInPermissionSet",
           "returns": {
@@ -337307,7 +337732,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 639
+            "line": 706
           },
           "name": "toListPermissionSetProvisioningStatus",
           "returns": {
@@ -337324,7 +337749,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 648
+            "line": 715
           },
           "name": "toListPermissionSets",
           "returns": {
@@ -337341,7 +337766,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 659
+            "line": 726
           },
           "name": "toListPermissionSetsProvisionedToAccount",
           "returns": {
@@ -337358,7 +337783,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 670
+            "line": 737
           },
           "name": "toListProfileAssociations",
           "returns": {
@@ -337375,7 +337800,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 684
+            "line": 751
           },
           "name": "toListProfiles",
           "returns": {
@@ -337392,7 +337817,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 695
+            "line": 762
           },
           "name": "toListTagsForResource",
           "returns": {
@@ -337409,7 +337834,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 706
+            "line": 773
           },
           "name": "toProvisionPermissionSet",
           "returns": {
@@ -337426,7 +337851,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 717
+            "line": 784
           },
           "name": "toPutInlinePolicyToPermissionSet",
           "returns": {
@@ -337443,7 +337868,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 728
+            "line": 795
           },
           "name": "toPutMfaDeviceManagementForDirectory",
           "returns": {
@@ -337452,6 +337877,23 @@
             }
           }
         },
+        {
+          "docs": {
+            "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutPermissionsBoundaryToPermissionSet.html",
+            "stability": "experimental",
+            "summary": "Grants permission to add permissions boundary to a permission set."
+          },
+          "locationInModule": {
+            "filename": "lib/generated/sso.ts",
+            "line": 806
+          },
+          "name": "toPutPermissionsBoundaryToPermissionSet",
+          "returns": {
+            "type": {
+              "fqn": "iam-floyd.Sso"
+            }
+          }
+        },
         {
           "docs": {
             "remarks": "Access Level: Permissions management\n\nhttps://docs.aws.amazon.com/singlesignon/latest/userguide/iam-auth-access-using-id-policies.html#policyexample",
@@ -337460,7 +337902,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 739
+            "line": 817
           },
           "name": "toPutPermissionsPolicy",
           "returns": {
@@ -337477,7 +337919,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 753
+            "line": 831
           },
           "name": "toSearchGroups",
           "returns": {
@@ -337494,7 +337936,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 767
+            "line": 845
           },
           "name": "toSearchUsers",
           "returns": {
@@ -337511,7 +337953,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 782
+            "line": 860
           },
           "name": "toStartSSO",
           "returns": {
@@ -337528,7 +337970,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 797
+            "line": 875
           },
           "name": "toTagResource",
           "returns": {
@@ -337545,7 +337987,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 812
+            "line": 890
           },
           "name": "toUntagResource",
           "returns": {
@@ -337562,7 +338004,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 823
+            "line": 901
           },
           "name": "toUpdateApplicationInstanceActiveCertificate",
           "returns": {
@@ -337579,7 +338021,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 834
+            "line": 912
           },
           "name": "toUpdateApplicationInstanceDisplayData",
           "returns": {
@@ -337596,7 +338038,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 845
+            "line": 923
           },
           "name": "toUpdateApplicationInstanceResponseConfiguration",
           "returns": {
@@ -337613,7 +338055,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 856
+            "line": 934
           },
           "name": "toUpdateApplicationInstanceResponseSchemaConfiguration",
           "returns": {
@@ -337630,7 +338072,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 867
+            "line": 945
           },
           "name": "toUpdateApplicationInstanceSecurityConfiguration",
           "returns": {
@@ -337647,7 +338089,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 878
+            "line": 956
           },
           "name": "toUpdateApplicationInstanceServiceProviderConfiguration",
           "returns": {
@@ -337664,7 +338106,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 889
+            "line": 967
           },
           "name": "toUpdateApplicationInstanceStatus",
           "returns": {
@@ -337681,7 +338123,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 900
+            "line": 978
           },
           "name": "toUpdateDirectoryAssociation",
           "returns": {
@@ -337698,7 +338140,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 911
+            "line": 989
           },
           "name": "toUpdateInstanceAccessControlAttributeConfiguration",
           "returns": {
@@ -337715,7 +338157,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 922
+            "line": 1000
           },
           "name": "toUpdateManagedApplicationInstanceStatus",
           "returns": {
@@ -337732,7 +338174,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 931
+            "line": 1009
           },
           "name": "toUpdatePermissionSet",
           "returns": {
@@ -337749,7 +338191,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 942
+            "line": 1020
           },
           "name": "toUpdateProfile",
           "returns": {
@@ -337766,7 +338208,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 953
+            "line": 1031
           },
           "name": "toUpdateSSOConfiguration",
           "returns": {
@@ -337783,7 +338225,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 964
+            "line": 1042
           },
           "name": "toUpdateTrust",
           "returns": {
@@ -337801,7 +338243,7 @@
           },
           "locationInModule": {
             "filename": "lib/generated/sso.ts",
-            "line": 968
+            "line": 1046
           },
           "name": "accessLevelList",
           "overrides": "iam-floyd.PolicyStatementWithActions",
@@ -368484,6 +368926,6 @@
       "symbolId": "lib/generated/x-ray:Xray"
     }
   },
-  "version": "0.395.0",
-  "fingerprint": "1FKaWmNlOomRg8infPSa61pmY9Dz/Tc05v89pIe9pm8="
+  "version": "0.398.0",
+  "fingerprint": "guX8nza4oBQU62iJ5TLiGw7HSUXjvfhgfZmGwL6nhMI="
 }