iam-floyd 0.734.0 → 0.737.0

package/README.md

@@ -16,10 +16,10 @@
 <!-- stats -->
 Support for:
 
-- 434 Services
-- 19602 Actions
-- 2084 Resource Types
-- 2210 Condition keys
+- 441 Services
+- 20079 Actions
+- 2137 Resource Types
+- 2235 Condition keys
 <!-- /stats -->
 
 ![EXPERIMENTAL](https://img.shields.io/badge/stability-experimantal-orange?style=for-the-badge)**<br>This is an early version of the package. The API will change while I implement new features. Therefore make sure you use an exact version in your `package.json` before it reaches 1.0.0.**

package/lib/generated/aws-managed-policies/cdk-iam-floyd.d.ts

@@ -82,6 +82,12 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AmazonBedrockFullAccess(): aws_iam.IManagedPolicy;
     /** Provides limited access to Amazon Bedrock as well as to related services that are required by it */
     AmazonBedrockLimitedAccess(): aws_iam.IManagedPolicy;
+    /** Provides full access to Amazon Bedrock Mantle as well as limited access to related services that are required by it */
+    AmazonBedrockMantleFullAccess(): aws_iam.IManagedPolicy;
+    /** Provides read and inference creation access to Amazon Bedrock Mantle */
+    AmazonBedrockMantleInferenceAccess(): aws_iam.IManagedPolicy;
+    /** Provides read only access to Amazon Bedrock Mantle */
+    AmazonBedrockMantleReadOnly(): aws_iam.IManagedPolicy;
     /** Provides limited access to Amazon Bedrock Marketplace as well as to related services that are required by it */
     AmazonBedrockMarketplaceAccess(): aws_iam.IManagedPolicy;
     /** Provides read only access to Amazon Bedrock */
@@ -1810,6 +1816,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AWSLambdaFullAccess(): aws_iam.IManagedPolicy;
     /** Grants read-only access to AWS Lambda service, AWS Lambda console features, and other related AWS services. */
     AWSLambdaReadOnlyAccess(): aws_iam.IManagedPolicy;
+    /** Provides write permissions to CloudWatch Logs and read/write permissions to durable execution APIs used by Lambda durable functions */
+    AWSLambdaBasicDurableExecutionRolePolicy(): aws_iam.IManagedPolicy;
     /** Provides write permissions to CloudWatch Logs. */
     AWSLambdaBasicExecutionRole(): aws_iam.IManagedPolicy;
     /** Provides list and read access to DynamoDB streams and write permissions to CloudWatch logs. */
@@ -1822,12 +1830,16 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AWSLambdaInvocationDynamoDB(): aws_iam.IManagedPolicy;
     /** Provides list and read access to Kinesis streams and write permissions to CloudWatch logs. */
     AWSLambdaKinesisExecutionRole(): aws_iam.IManagedPolicy;
+    /** This policy grants permissions to to create and administer EC2 resources managed by the Lambda Managed Instances, and descriptive permissions. */
+    AWSLambdaManagedEC2ResourceOperator(): aws_iam.IManagedPolicy;
     /** Provides permissions required to access MSK Cluster within a VPC, manage ENIs (create, describe, delete) in the VPC and write permissions to CloudWatch Logs. */
     AWSLambdaMSKExecutionRole(): aws_iam.IManagedPolicy;
     /** Grants Lambda Replicator necessary permissions to replicate functions across regions */
     AWSLambdaReplicator(): aws_iam.IManagedPolicy;
     /** Default policy for AWS Lambda service role. */
     AWSLambdaRole(): aws_iam.IManagedPolicy;
+    /** Allows Lambda to describe and terminate managed instances from EC2 on your behalf. */
+    AWSLambdaServiceRolePolicy(): aws_iam.IManagedPolicy;
     /** Provides receive message, delete message, and read attribute access to SQS queues, and write permissions to CloudWatch logs. */
     AWSLambdaSQSQueueExecutionRole(): aws_iam.IManagedPolicy;
     /** Provides minimum permissions for a Lambda function to execute while accessing a resource within a VPC - create, describe, delete network interfaces and write permissions to CloudWatch Logs. */
@@ -1984,6 +1996,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AWSPartnerCentralChannelManagement(): aws_iam.IManagedPolicy;
     /** Provides full access to AWS Partner Central and related AWS Services. */
     AWSPartnerCentralFullAccess(): aws_iam.IManagedPolicy;
+    /** Provides necessary access for marketing activities. */
+    AWSPartnerCentralMarketingManagement(): aws_iam.IManagedPolicy;
     /** Provides necessary access for opportunity management activities. */
     AWSPartnerCentralOpportunityManagement(): aws_iam.IManagedPolicy;
     /** Provides necessary access for developer testing in the Sandbox catalog. */
@@ -2330,6 +2344,12 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     AWSTransformApplicationDeploymentPolicy(): aws_iam.IManagedPolicy;
     /** Enables the AWS Transform to deploy applications to Amazon Elastic Container Service (ECS) with Fargate. It grants permissions to provision, configure, and manage the underlying infrastructure required to run applications on ECS. */
     AWSTransformApplicationECSDeploymentPolicy(): aws_iam.IManagedPolicy;
+    /** Provides access to execute transformations in AWS Transform custom. */
+    AWSTransformCustomExecuteTransformations(): aws_iam.IManagedPolicy;
+    /** Provides full access to AWS Transform custom. */
+    AWSTransformCustomFullAccess(): aws_iam.IManagedPolicy;
+    /** Enables the management of transformation resources and execution of transformations in AWS Transform custom. */
+    AWSTransformCustomManageTransformations(): aws_iam.IManagedPolicy;
     /** Provides full access to AWS Trusted Advisor Priority. This policy also enables the user to add Trusted Advisor as a trusted service with AWS Organizations and to specify delegated administrator accounts for Trusted Advisor Priority. */
     AWSTrustedAdvisorPriorityFullAccess(): aws_iam.IManagedPolicy;
     /** Provides read-only access to AWS Trusted Advisor Priority. This includes permission to view the delegated administrator accounts. */
@@ -2668,6 +2688,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     NetworkAdministrator(): aws_iam.IManagedPolicy;
     /** Provides permissions for the AWS Shield network security director service linked role to assess specified environments. */
     NetworkSecurityDirectorServiceLinkedRolePolicy(): aws_iam.IManagedPolicy;
+    /** This policy allows NovaAct to create and manage the necessary resources to operate the Nova Act agents. */
+    NovaActServiceRolePolicy(): aws_iam.IManagedPolicy;
     /** Provides full access to CloudWatch Observability Access Manager */
     OAMFullAccess(): aws_iam.IManagedPolicy;
     /** Provides Read Only access to CloudWatch Observability Access Manager */
@@ -2790,6 +2812,8 @@ export declare class AwsManagedPolicy extends AwsManagedPolicyStatic {
     SageMakerStudioUserIAMPermissiveExecutionPolicy(): aws_iam.IManagedPolicy;
     /** Provides read/write access to AWS Secrets Manager via the AWS Management Console. Note: this exludes IAM actions, so combine with IAMFullAccess if rotation configuration is required. */
     SecretsManagerReadWrite(): aws_iam.IManagedPolicy;
+    /** Provides permissions for authenticated users to access the Security Agent Web Application for configuring and executing automated security penetration tests. This policy enables users to manage pentests, view findings, monitor test execution, and interact with AWS resources required for security testing operations. */
+    SecurityAgentWebAppAPIPolicy(): aws_iam.IManagedPolicy;
     /** The security audit template grants access to read security configuration metadata. It is useful for software that audits the configuration of an AWS account. */
     SecurityAudit(): aws_iam.IManagedPolicy;
     /** Provides access to manage resources created by Security Lake. */