iam-floyd 0.728.0 → 0.729.0

package/README.md

@@ -17,9 +17,9 @@
 Support for:
 
 - 430 Services
-- 19302 Actions
-- 2062 Resource Types
-- 2172 Condition keys
+- 19341 Actions
+- 2065 Resource Types
+- 2174 Condition keys
 <!-- /stats -->
 
 ![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**

package/lib/generated/aws-managed-policies/cdk-iam-floyd.d.ts

@@ -50,6 +50,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AmazonAppFlowFullAccess(): aws_iam.IManagedPolicy;
     /** Provides read only access to Amazon Appflow flows */
     AmazonAppFlowReadOnlyAccess(): aws_iam.IManagedPolicy;
+    /** Grants permissions to ARC Region switch for plan execution and plan evaluation. */
+    AmazonApplicationRecoveryControllerRegionSwitchPlanExecutionPolicy(): aws_iam.IManagedPolicy;
     /** Provides full access to Amazon AppStream via the AWS Management Console. */
     AmazonAppStreamFullAccess(): aws_iam.IManagedPolicy;
     /** Amazon AppStream 2.0 access to AWS Certificate Manager Private CA in customer accounts for certificate-based authentication */
@@ -1116,6 +1118,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AWSApplicationMigrationFullAccess(): aws_iam.IManagedPolicy;
     /** This policy allows AWS Application Migration Service (MGN) to send meta-data about the progress of servers being migrated using MGN to AWS Migration Hub (MGH). MGN automatically creates an IAM role with this policy attached, and assumes this role. We do not recommend that you attach this policy to your IAM users or roles. */
     AWSApplicationMigrationMGHAccess(): aws_iam.IManagedPolicy;
+    /** Provides permissions for Network Migration custom resource */
+    AWSApplicationMigrationNetworkMigrationCustomResource(): aws_iam.IManagedPolicy;
     /** This policy provides permissions to all read-only public APIs of Application Migration Service (MGN), as well as some read-only APIs of other AWS services that are required in order to make full read-only use of the MGN console. Attach this policy to your IAM users or roles. */
     AWSApplicationMigrationReadOnlyAccess(): aws_iam.IManagedPolicy;
     /** This policy allows the Application Migration Service (MGN) Replication Servers, which are EC2 instances launched by Application Migration Service - to communicate with the MGN service, and to create EBS snapshots in your AWS account. An IAM role with this policy is attached (as an EC2 Instance Profile) by Application Migration Service to the MGN Replication Servers which are automatically launched and terminated by MGN, as needed. MGN Replication Servers are used to facilitate data replication from your external servers to AWS, as part of the migration process managed using MGN. We do not recommend that you attach this policy to your IAM users or roles. */
@@ -1370,6 +1374,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AWSConnector(): aws_iam.IManagedPolicy;
     /** Allows AWS Control Tower to call AWS services that provide automated account configuration and centralized governance on your behalf. */
     AWSControlTowerAccountServiceRolePolicy(): aws_iam.IManagedPolicy;
+    /** AWS Control Tower enables AWS CloudTrail as a best practice and provides this role to AWS CloudTrail. AWS CloudTrail assumes this role to create and publish CloudTrail logs */
+    AWSControlTowerCloudTrailRolePolicy(): aws_iam.IManagedPolicy;
     /** Provides permissions to manage the IAM Identity Center (IdC) resources in the member accounts enrolled with AWS Control Tower. The policy is attached to the AWSControlTowerAdmin role only if the customer has opted-into IAM IdC integration in their AWS Control Tower Landing Zone. */
     AWSControlTowerIdentityCenterManagementPolicy(): aws_iam.IManagedPolicy;
     /** Provides access to AWS Resources managed or used by AWS Control Tower */
@@ -2108,6 +2114,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AWSSavingsPlansFullAccess(): aws_iam.IManagedPolicy;
     /** Provides read only access to Savings Plans service */
     AWSSavingsPlansReadOnlyAccess(): aws_iam.IManagedPolicy;
+    /** Provides access to retrieve and describe secrets from Secrets Manager. This policy also allows decrypting KMS keys for Secrets Manager secrets. */
+    AWSSecretsManagerClientReadOnlyAccess(): aws_iam.IManagedPolicy;
     /** Provides full access to use AWS Security Hub. */
     AWSSecurityHubFullAccess(): aws_iam.IManagedPolicy;
     /** Grants permission to enable and manage AWS Security Hub within an organization. Includes enabling the service across the organization, and determining the delegated administrator account for the service. */