iam-floyd 0.694.0 → 0.696.0

package/README.md

@@ -17,9 +17,9 @@
 Support for:
 
 - 418 Services
-- 18428 Actions
-- 1977 Resource Types
-- 1938 Condition keys
+- 18451 Actions
+- 1981 Resource Types
+- 1940 Condition keys
 <!-- /stats -->
 
 ![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**

package/lib/generated/aws-managed-policies/cdk-iam-floyd.d.ts

@@ -900,6 +900,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AmazonTimestreamFullAccess(): aws_iam.IManagedPolicy;
     /** Provides full administrative access to create, update, delete and list Amazon Timestream InfluxDB instances and create and list parameter groups. Please refer to documentation for additional permissions needed. */
     AmazonTimestreamInfluxDBFullAccess(): aws_iam.IManagedPolicy;
+    /** Provides administrative access to manage Amazon Timestream InfluxDB instances and parameter groups except marketplace operations. */
+    AmazonTimestreamInfluxDBFullAccessWithoutMarketplaceAccess(): aws_iam.IManagedPolicy;
     /** Provides full administrative access to create, update, delete and list Amazon Timestream InfluxDB instances and create and list parameter groups. Please refer to documentation for additional permissions needed. */
     AmazonTimestreamInfluxDBServiceRolePolicy(): aws_iam.IManagedPolicy;
     /** Provides read only access to Amazon Timestream. Policy also provides permission to cancel any running query. If using Customer managed CMK, please refer to documentation for additional permissions needed. */
@@ -1814,6 +1816,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AWSMarketplaceSellerProductsReadOnly(): aws_iam.IManagedPolicy;
     /** The default policy that enables access to AWS Services and Resources used or managed by MediaConnect. */
     AWSMediaConnectServicePolicy(): aws_iam.IManagedPolicy;
+    /** Allows MediaLive Anywhere to create and manage AWS resources on your behalf. */
+    AWSMediaLiveAnywhereServiceRolePolicy(): aws_iam.IManagedPolicy;
     /** Enable access to AWS Resources used or managed by MediaTailor */
     AWSMediaTailorServiceRolePolicy(): aws_iam.IManagedPolicy;
     /** Policy allows AWSMigrationHubService to call AWSApplicationDiscoveryService on behalf of the customer. */
@@ -1956,8 +1960,12 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AWSQuickSetupEnableAREXExecutionPolicy(): aws_iam.IManagedPolicy;
     /** This policy grants permissions that allow principals to run the AWSQuickSetupType-EnableDHMC Automation runbook, which enables Default Host Management Configuration. */
     AWSQuickSetupEnableDHMCExecutionPolicy(): aws_iam.IManagedPolicy;
+    /** This policy allows Quick Setup to deploy the configuration type required to set up just-in-time node access. */
+    AWSQuickSetupJITNADeploymentRolePolicy(): aws_iam.IManagedPolicy;
     /** This policy grants administrative permissions that allow Systems Manager to create a default IAM instance profile for the Quick Setup capability and attach it to Amazon EC2 instances that don't already have an instance. profile attached. */
     AWSQuickSetupManagedInstanceProfileExecutionPolicy(): aws_iam.IManagedPolicy;
+    /** This policy provides permissions to enable just-in-time node access for Systems Manager. */
+    AWSQuickSetupManageJITNAResourcesExecutionPolicy(): aws_iam.IManagedPolicy;
     /** Provides read-only permissions to access patch baselines that have been configured by an administrator in the current AWS account or organization using Quick Setup. */
     AWSQuickSetupPatchPolicyBaselineAccess(): aws_iam.IManagedPolicy;
     /** Provides permissions that allow Quick Setup to create resources associated with a patch policy configuration. */
@@ -2178,6 +2186,12 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AWSSystemsManagerForSAPFullAccess(): aws_iam.IManagedPolicy;
     /** Provides read only access to AWS Systems Manager for SAP service */
     AWSSystemsManagerForSAPReadOnlyAccess(): aws_iam.IManagedPolicy;
+    /** The managed policy AWSSystemsManagerJustInTimeAccessTokenPolicy allows Systems Manager to generate access tokens used for just-in-time node access. */
+    AWSSystemsManagerJustInTimeAccessTokenPolicy(): aws_iam.IManagedPolicy;
+    /** The managed policy AWSSystemsManagerJustInTimeAccessTokenSessionPolicy allows Systems Manager to apply scoped down permissions to a just-in-time node access session once it is started. */
+    AWSSystemsManagerJustInTimeAccessTokenSessionPolicy(): aws_iam.IManagedPolicy;
+    /** Permissions required to collect information about a user for Just-In-Time-Node-Access notifications. */
+    AWSSystemsManagerNotificationsServicePolicy(): aws_iam.IManagedPolicy;
     /** IAM role for SSM Explorer to manage OpsData related operations */
     AWSSystemsManagerOpsDataSyncServiceRolePolicy(): aws_iam.IManagedPolicy;
     /** This policy grants the AWS Portal Asset Server the necessary permissions required for normal operation. */
@@ -2442,6 +2456,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     GameLiftContainerFleetPolicy(): aws_iam.IManagedPolicy;
     /** Policy to allow Gamelift GameServerGroups to manage customer resources */
     GameLiftGameServerGroupPolicy(): aws_iam.IManagedPolicy;
+    /** This managed policy grants permission to connect with Amazon Q and utilize the features in the GitLab Duo with Amazon Q integration. */
+    GitLabDuoWithAmazonQPermissionsPolicy(): aws_iam.IManagedPolicy;
     /** Allow GlobalAccelerator Users full Access to all APIs */
     GlobalAcceleratorFullAccess(): aws_iam.IManagedPolicy;
     /** Allow GlobalAccelerator Users Access to Read Only APIs */