iam-floyd 0.796.0 → 0.797.0

package/lib/generated/policy-statements/sagemaker.d.ts

@@ -133,6 +133,25 @@ export declare class Sagemaker extends PolicyStatement {
      * https://docs.aws.amazon.com/sagemaker/latest/dg/partner-apps-onboard.html
      */
     toCallPartnerAppApi(): this;
+    /**
+     * Grants permission to use bearer token in SageMaker Job and Inference runtime endpoints APIs
+     *
+     * Access Level: Read
+     *
+     * Possible conditions:
+     * - .ifBearerTokenType()
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CallWithBearerToken.html
+     */
+    toCallWithBearerToken(): this;
+    /**
+     * Grants permission to mark a rollout as complete for a job
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CompleteRollout.html
+     */
+    toCompleteRollout(): this;
     /**
      * Grants permission to create an AI benchmark job
      *
@@ -259,8 +278,8 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifAwsRequestTag()
      * - .ifAwsTagKeys()
      * - .ifInterContainerTrafficEncryption()
-     * - .ifOutputKmsKey()
-     * - .ifVolumeKmsKey()
+     * - .ifOutputKmsKeyArn()
+     * - .ifVolumeKmsKeyArn()
      * - .ifVpcSecurityGroupIds()
      * - .ifVpcSubnets()
      *
@@ -280,8 +299,8 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifAwsRequestTag()
      * - .ifAwsTagKeys()
      * - .ifInterContainerTrafficEncryption()
-     * - .ifOutputKmsKey()
-     * - .ifVolumeKmsKey()
+     * - .ifOutputKmsKeyArn()
+     * - .ifVolumeKmsKeyArn()
      * - .ifVpcSecurityGroupIds()
      * - .ifVpcSubnets()
      *
@@ -417,8 +436,8 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifInterContainerTrafficEncryption()
      * - .ifMaxRuntimeInSeconds()
      * - .ifNetworkIsolation()
-     * - .ifOutputKmsKey()
-     * - .ifVolumeKmsKey()
+     * - .ifOutputKmsKeyArn()
+     * - .ifVolumeKmsKeyArn()
      * - .ifVpcSecurityGroupIds()
      * - .ifVpcSubnets()
      *
@@ -457,8 +476,8 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifInstanceTypes()
      * - .ifVpcSecurityGroupIds()
      * - .ifVpcSubnets()
-     * - .ifDomainSharingOutputKmsKey()
-     * - .ifVolumeKmsKey()
+     * - .ifDomainSharingOutputKmsKeyArn()
+     * - .ifVolumeKmsKeyArn()
      * - .ifImageArns()
      * - .ifImageVersionArns()
      * - .ifStudioLifecycleConfigArns()
@@ -545,7 +564,7 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifAcceleratorTypes()
      * - .ifInstanceTypes()
      * - .ifModelArn()
-     * - .ifVolumeKmsKey()
+     * - .ifVolumeKmsKeyArn()
      * - .ifServerlessMaxConcurrency()
      * - .ifServerlessMemorySize()
      * - .ifNetworkIsolation()
@@ -582,8 +601,8 @@ export declare class Sagemaker extends PolicyStatement {
      * Possible conditions:
      * - .ifAwsRequestTag()
      * - .ifAwsTagKeys()
-     * - .ifFeatureGroupOnlineStoreKmsKey()
-     * - .ifFeatureGroupOfflineStoreKmsKey()
+     * - .ifFeatureGroupOnlineStoreKmsKeyArn()
+     * - .ifFeatureGroupOfflineStoreKmsKeyArn()
      * - .ifFeatureGroupOfflineStoreS3Uri()
      * - .ifFeatureGroupEnableOnlineStore()
      * - .ifFeatureGroupOfflineStoreConfig()
@@ -683,8 +702,8 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifInterContainerTrafficEncryption()
      * - .ifMaxRuntimeInSeconds()
      * - .ifNetworkIsolation()
-     * - .ifOutputKmsKey()
-     * - .ifVolumeKmsKey()
+     * - .ifOutputKmsKeyArn()
+     * - .ifVolumeKmsKeyArn()
      * - .ifVpcSecurityGroupIds()
      * - .ifVpcSubnets()
      *
@@ -767,6 +786,25 @@ export declare class Sagemaker extends PolicyStatement {
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateInferenceRecommendationsJob.html
      */
     toCreateInferenceRecommendationsJob(): this;
+    /**
+     * Grants permission to create a SageMaker model customization job
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsTagKeys()
+     * - .ifOutputKmsKeyArn()
+     * - .ifVpcSecurityGroupIds()
+     * - .ifVpcSubnets()
+     *
+     * Dependent actions:
+     * - iam:PassRole
+     * - sagemaker:AddTags
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateJob.html
+     */
+    toCreateJob(): this;
     /**
      * Grants permission to start a labeling job. A labeling job takes unlabeled data in and produces labeled data as output, which can be used for training SageMaker models
      *
@@ -775,8 +813,8 @@ export declare class Sagemaker extends PolicyStatement {
      * Possible conditions:
      * - .ifWorkteamArn()
      * - .ifWorkteamType()
-     * - .ifVolumeKmsKey()
-     * - .ifOutputKmsKey()
+     * - .ifVolumeKmsKeyArn()
+     * - .ifOutputKmsKeyArn()
      * - .ifAwsRequestTag()
      * - .ifAwsTagKeys()
      *
@@ -859,8 +897,8 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifInterContainerTrafficEncryption()
      * - .ifMaxRuntimeInSeconds()
      * - .ifNetworkIsolation()
-     * - .ifOutputKmsKey()
-     * - .ifVolumeKmsKey()
+     * - .ifOutputKmsKeyArn()
+     * - .ifVolumeKmsKeyArn()
      * - .ifVpcSecurityGroupIds()
      * - .ifVpcSubnets()
      *
@@ -906,8 +944,8 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifInterContainerTrafficEncryption()
      * - .ifMaxRuntimeInSeconds()
      * - .ifNetworkIsolation()
-     * - .ifOutputKmsKey()
-     * - .ifVolumeKmsKey()
+     * - .ifOutputKmsKeyArn()
+     * - .ifVolumeKmsKeyArn()
      * - .ifVpcSecurityGroupIds()
      * - .ifVpcSubnets()
      *
@@ -964,8 +1002,8 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifInterContainerTrafficEncryption()
      * - .ifMaxRuntimeInSeconds()
      * - .ifNetworkIsolation()
-     * - .ifOutputKmsKey()
-     * - .ifVolumeKmsKey()
+     * - .ifOutputKmsKeyArn()
+     * - .ifVolumeKmsKeyArn()
      * - .ifVpcSecurityGroupIds()
      * - .ifVpcSubnets()
      *
@@ -988,8 +1026,8 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifInterContainerTrafficEncryption()
      * - .ifMaxRuntimeInSeconds()
      * - .ifNetworkIsolation()
-     * - .ifOutputKmsKey()
-     * - .ifVolumeKmsKey()
+     * - .ifOutputKmsKeyArn()
+     * - .ifVolumeKmsKeyArn()
      * - .ifVpcSecurityGroupIds()
      * - .ifVpcSubnets()
      *
@@ -1014,7 +1052,7 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifMinimumInstanceMetadataServiceVersion()
      * - .ifNotebookInstanceLifecycleConfigArns()
      * - .ifRootAccess()
-     * - .ifVolumeKmsKey()
+     * - .ifVolumeKmsKeyArn()
      * - .ifVpcSecurityGroupIds()
      * - .ifVpcSubnets()
      *
@@ -1138,8 +1176,8 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifInstanceTypes()
      * - .ifMaxRuntimeInSeconds()
      * - .ifNetworkIsolation()
-     * - .ifOutputKmsKey()
-     * - .ifVolumeKmsKey()
+     * - .ifOutputKmsKeyArn()
+     * - .ifVolumeKmsKeyArn()
      * - .ifVpcSecurityGroupIds()
      * - .ifVpcSubnets()
      * - .ifInterContainerTrafficEncryption()
@@ -1242,8 +1280,8 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifInterContainerTrafficEncryption()
      * - .ifMaxRuntimeInSeconds()
      * - .ifNetworkIsolation()
-     * - .ifOutputKmsKey()
-     * - .ifVolumeKmsKey()
+     * - .ifOutputKmsKeyArn()
+     * - .ifVolumeKmsKeyArn()
      * - .ifVpcSecurityGroupIds()
      * - .ifVpcSubnets()
      * - .ifKeepAlivePeriod()
@@ -1283,8 +1321,8 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifAwsTagKeys()
      * - .ifInstanceTypes()
      * - .ifModelArn()
-     * - .ifOutputKmsKey()
-     * - .ifVolumeKmsKey()
+     * - .ifOutputKmsKeyArn()
+     * - .ifVolumeKmsKeyArn()
      *
      * Dependent actions:
      * - sagemaker:AddTags
@@ -1332,7 +1370,7 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifAwsTagKeys()
      * - .ifVpcSecurityGroupIds()
      * - .ifInstanceTypes()
-     * - .ifDomainSharingOutputKmsKey()
+     * - .ifDomainSharingOutputKmsKeyArn()
      * - .ifImageArns()
      * - .ifImageVersionArns()
      * - .ifStudioLifecycleConfigArns()
@@ -1664,6 +1702,14 @@ export declare class Sagemaker extends PolicyStatement {
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteInferenceExperiment.html
      */
     toDeleteInferenceExperiment(): this;
+    /**
+     * Grants permission to delete a SageMaker model customization job
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteJob.html
+     */
+    toDeleteJob(): this;
     /**
      * Grants permission to delete a lineage group policy
      *
@@ -2255,6 +2301,22 @@ export declare class Sagemaker extends PolicyStatement {
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DescribeInferenceRecommendationsJob.html
      */
     toDescribeInferenceRecommendationsJob(): this;
+    /**
+     * Grants permission to return information about a SageMaker model customization job
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DescribeJob.html
+     */
+    toDescribeJob(): this;
+    /**
+     * Grants permission to return information about a job schema version for a particular JobCategory for the CreateJob API
+     *
+     * Access Level: Read
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DescribeJobSchemaVersion.html
+     */
+    toDescribeJobSchemaVersion(): this;
     /**
      * Grants permission to return information about a labeling job
      *
@@ -3041,6 +3103,22 @@ export declare class Sagemaker extends PolicyStatement {
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_ListInferenceRecommendationsJobs.html
      */
     toListInferenceRecommendationsJobs(): this;
+    /**
+     * Grants permission to list job schema versions for a particular JobCategory for the CreateJob API
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_ListJobSchemaVersions.html
+     */
+    toListJobSchemaVersions(): this;
+    /**
+     * Grants permission to list SageMaker model customization jobs
+     *
+     * Access Level: List
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_ListJobs.html
+     */
+    toListJobs(): this;
     /**
      * Grants permission to list labeling jobs
      *
@@ -3504,6 +3582,22 @@ export declare class Sagemaker extends PolicyStatement {
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_RetryPipelineExecution.html
      */
     toRetryPipelineExecution(): this;
+    /**
+     * Grants permission to invoke a sample request against a job
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_Sample.html
+     */
+    toSample(): this;
+    /**
+     * Grants permission to invoke a streaming sample request against a job
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_SampleWithResponseStream.html
+     */
+    toSampleWithResponseStream(): this;
     /**
      * Grants permission to search for SageMaker objects
      *
@@ -3710,6 +3804,14 @@ export declare class Sagemaker extends PolicyStatement {
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_StopInferenceRecommendationsJob.html
      */
     toStopInferenceRecommendationsJob(): this;
+    /**
+     * Grants permission to stop a SageMaker model customization job
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_StopJob.html
+     */
+    toStopJob(): this;
     /**
      * Grants permission to stop a labeling job. Any labels already generated will be exported before stopping
      *
@@ -3927,7 +4029,7 @@ export declare class Sagemaker extends PolicyStatement {
      * Possible conditions:
      * - .ifVpcSecurityGroupIds()
      * - .ifInstanceTypes()
-     * - .ifDomainSharingOutputKmsKey()
+     * - .ifDomainSharingOutputKmsKeyArn()
      * - .ifImageArns()
      * - .ifImageVersionArns()
      * - .ifAppNetworkAccessType()
@@ -4102,8 +4204,8 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifInstanceTypes()
      * - .ifMaxRuntimeInSeconds()
      * - .ifNetworkIsolation()
-     * - .ifOutputKmsKey()
-     * - .ifVolumeKmsKey()
+     * - .ifOutputKmsKeyArn()
+     * - .ifVolumeKmsKeyArn()
      * - .ifVpcSecurityGroupIds()
      * - .ifVpcSubnets()
      * - .ifInterContainerTrafficEncryption()
@@ -4187,6 +4289,14 @@ export declare class Sagemaker extends PolicyStatement {
      * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_UpdateProject.html
      */
     toUpdateProject(): this;
+    /**
+     * Grants permission to submit reward scores for a trajectory in a job
+     *
+     * Access Level: Write
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_UpdateReward.html
+     */
+    toUpdateReward(): this;
     /**
      * Grants permission to update a shared model
      *
@@ -4250,7 +4360,7 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifInstanceTypes()
      * - .ifVpcSecurityGroupIds()
      * - .ifInstanceTypes()
-     * - .ifDomainSharingOutputKmsKey()
+     * - .ifDomainSharingOutputKmsKeyArn()
      * - .ifImageArns()
      * - .ifImageVersionArns()
      * - .ifStudioLifecycleConfigArns()
@@ -4715,6 +4825,22 @@ export declare class Sagemaker extends PolicyStatement {
      * - .ifResourceTag()
      */
     onProcessingJob(processingJobName: string, account?: string, region?: string, partition?: string): this;
+    /**
+     * Adds a resource of type job to the statement
+     *
+     * https://docs.aws.amazon.com/sagemaker/latest/dg/how-it-works-training.html
+     *
+     * @param jobCategory - Identifier for the jobCategory.
+     * @param jobName - Identifier for the jobName.
+     * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
+     * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
+     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     *
+     * Possible conditions:
+     * - .ifAwsResourceTag()
+     * - .ifResourceTag()
+     */
+    onJob(jobCategory: string, jobName: string, account?: string, region?: string, partition?: string): this;
     /**
      * Adds a resource of type hyper-parameter-tuning-job to the statement
      *
@@ -5388,6 +5514,7 @@ export declare class Sagemaker extends PolicyStatement {
      * - .toCreateInferenceComponent()
      * - .toCreateInferenceExperiment()
      * - .toCreateInferenceRecommendationsJob()
+     * - .toCreateJob()
      * - .toCreateLabelingJob()
      * - .toCreateMlflowApp()
      * - .toCreateMlflowTrackingServer()
@@ -5471,6 +5598,7 @@ export declare class Sagemaker extends PolicyStatement {
      * - cluster
      * - training-job
      * - processing-job
+     * - job
      * - hyper-parameter-tuning-job
      * - training-plan
      * - reserved-capacity
@@ -5557,6 +5685,7 @@ export declare class Sagemaker extends PolicyStatement {
      * - .toCreateInferenceComponent()
      * - .toCreateInferenceExperiment()
      * - .toCreateInferenceRecommendationsJob()
+     * - .toCreateJob()
      * - .toCreateLabelingJob()
      * - .toCreateMlflowApp()
      * - .toCreateMlflowTrackingServer()
@@ -5623,6 +5752,18 @@ export declare class Sagemaker extends PolicyStatement {
      * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
      */
     ifAppNetworkAccessType(value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by the type of bearer token used in the request
+     *
+     * https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys
+     *
+     * Applies to actions:
+     * - .toCallWithBearerToken()
+     *
+     * @param value The value(s) to check
+     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+     */
+    ifBearerTokenType(value: string | string[], operator?: Operator | string): this;
     /**
      * Filters access by a current metadata key and value pair associated with the model-package resource
      *
@@ -5751,7 +5892,16 @@ export declare class Sagemaker extends PolicyStatement {
      */
     ifDomainId(value: string | string[], operator?: Operator | string): this;
     /**
-     * Filters access by the Domain sharing output KMS key associated with the resource in the request
+     * Filters access by the Domain sharing output KMS key associated with the resource in the request. This key has been deprecated. It has been replaced by sagemaker:DomainSharingOutputKmsKeyArn
+     *
+     * https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys
+     *
+     * @param value The value(s) to check
+     * @param operator Works with [arn operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_ARN). **Default:** `ArnLike`
+     */
+    ifDomainSharingOutputKmsKey(value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by the Domain sharing output KMS key associated with the resource in the request. The ARN of the key-id must be used
      *
      * https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys
      *
@@ -5764,7 +5914,7 @@ export declare class Sagemaker extends PolicyStatement {
      * @param value The value(s) to check
      * @param operator Works with [arn operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_ARN). **Default:** `ArnLike`
      */
-    ifDomainSharingOutputKmsKey(value: string | string[], operator?: Operator | string): this;
+    ifDomainSharingOutputKmsKeyArn(value: string | string[], operator?: Operator | string): this;
     /**
      * Filters access by the remote debug config in the request
      *
@@ -5811,7 +5961,16 @@ export declare class Sagemaker extends PolicyStatement {
      */
     ifFeatureGroupOfflineStoreConfig(value?: boolean): this;
     /**
-     * Filters access by the offline store kms key associated with the feature group resource in the request
+     * Filters access by the offline store kms key associated with the feature group resource in the request. This key has been deprecated. It has been replaced by sagemaker:FeatureGroupOfflineStoreKmsKeyArn
+     *
+     * https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys
+     *
+     * @param value The value(s) to check
+     * @param operator Works with [arn operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_ARN). **Default:** `ArnLike`
+     */
+    ifFeatureGroupOfflineStoreKmsKey(value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by the offline store kms key associated with the feature group resource in the request. The ARN of the key-id must be used
      *
      * https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys
      *
@@ -5821,7 +5980,7 @@ export declare class Sagemaker extends PolicyStatement {
      * @param value The value(s) to check
      * @param operator Works with [arn operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_ARN). **Default:** `ArnLike`
      */
-    ifFeatureGroupOfflineStoreKmsKey(value: string | string[], operator?: Operator | string): this;
+    ifFeatureGroupOfflineStoreKmsKeyArn(value: string | string[], operator?: Operator | string): this;
     /**
      * Filters access by the offline store s3 uri associated with the feature group resource in the request
      *
@@ -5835,7 +5994,16 @@ export declare class Sagemaker extends PolicyStatement {
      */
     ifFeatureGroupOfflineStoreS3Uri(value: string | string[], operator?: Operator | string): this;
     /**
-     * Filters access by the online store kms key associated with the feature group resource in the request
+     * Filters access by the online store kms key associated with the feature group resource in the request. This key has been deprecated. It has been replaced by sagemaker:FeatureGroupOnlineStoreKmsKeyArn
+     *
+     * https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys
+     *
+     * @param value The value(s) to check
+     * @param operator Works with [arn operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_ARN). **Default:** `ArnLike`
+     */
+    ifFeatureGroupOnlineStoreKmsKey(value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by the online store kms key associated with the feature group resource in the request. The ARN of the key-id must be used
      *
      * https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys
      *
@@ -5845,7 +6013,7 @@ export declare class Sagemaker extends PolicyStatement {
      * @param value The value(s) to check
      * @param operator Works with [arn operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_ARN). **Default:** `ArnLike`
      */
-    ifFeatureGroupOnlineStoreKmsKey(value: string | string[], operator?: Operator | string): this;
+    ifFeatureGroupOnlineStoreKmsKeyArn(value: string | string[], operator?: Operator | string): this;
     /**
      * Filters access by a file system access mode associated with the resource in the request
      *
@@ -5899,7 +6067,7 @@ export declare class Sagemaker extends PolicyStatement {
      */
     ifFileSystemType(value: string | string[], operator?: Operator | string): this;
     /**
-     * Filters access by a key that is present in the request the user makes to the SageMaker service. This key is deprecated. It has been replaced by sagemaker:VolumeKmsKey
+     * Filters access by a key that is present in the request the user makes to the SageMaker service. This key has been deprecated. It has been replaced by sagemaker:VolumeKmsKeyArn
      *
      * https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys
      *
@@ -6119,7 +6287,16 @@ export declare class Sagemaker extends PolicyStatement {
      */
     ifNotebookInstanceLifecycleConfigArns(value: string | string[], operator?: Operator | string): this;
     /**
-     * Filters access by the output kms key associated with the resource in the request
+     * Filters access by the output kms key associated with the resource in the request. This key has been deprecated. It has been replaced by sagemaker:OutputKmsKeyArn
+     *
+     * https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys
+     *
+     * @param value The value(s) to check
+     * @param operator Works with [arn operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_ARN). **Default:** `ArnLike`
+     */
+    ifOutputKmsKey(value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by the output kms key associated with the resource in the request. The ARN of the key-id must be used
      *
      * https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys
      *
@@ -6128,6 +6305,7 @@ export declare class Sagemaker extends PolicyStatement {
      * - .toCreateAutoMLJobV2()
      * - .toCreateDataQualityJobDefinition()
      * - .toCreateHyperParameterTuningJob()
+     * - .toCreateJob()
      * - .toCreateLabelingJob()
      * - .toCreateModelBiasJobDefinition()
      * - .toCreateModelExplainabilityJobDefinition()
@@ -6141,7 +6319,7 @@ export declare class Sagemaker extends PolicyStatement {
      * @param value The value(s) to check
      * @param operator Works with [arn operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_ARN). **Default:** `ArnLike`
      */
-    ifOutputKmsKey(value: string | string[], operator?: Operator | string): this;
+    ifOutputKmsKeyArn(value: string | string[], operator?: Operator | string): this;
     /**
      * Filters access by the OwnerUserProfile arn associated with the space in the request
      *
@@ -6237,6 +6415,7 @@ export declare class Sagemaker extends PolicyStatement {
      * - cluster
      * - training-job
      * - processing-job
+     * - job
      * - hyper-parameter-tuning-job
      * - training-plan
      * - reserved-capacity
@@ -6399,7 +6578,16 @@ export declare class Sagemaker extends PolicyStatement {
      */
     ifUserProfileName(value: string | string[], operator?: Operator | string): this;
     /**
-     * Filters access by the volume kms key associated with the resource in the request
+     * Filters access by the volume kms key associated with the resource in the request. This key has been deprecated. It has been replaced by sagemaker:VolumeKmsKeyArn
+     *
+     * https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys
+     *
+     * @param value The value(s) to check
+     * @param operator Works with [arn operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_ARN). **Default:** `ArnLike`
+     */
+    ifVolumeKmsKey(value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by the volume kms key associated with the resource in the request. The ARN of the key-id must be used
      *
      * https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonsagemaker.html#amazonsagemaker-policy-keys
      *
@@ -6424,7 +6612,7 @@ export declare class Sagemaker extends PolicyStatement {
      * @param value The value(s) to check
      * @param operator Works with [arn operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_ARN). **Default:** `ArnLike`
      */
-    ifVolumeKmsKey(value: string | string[], operator?: Operator | string): this;
+    ifVolumeKmsKeyArn(value: string | string[], operator?: Operator | string): this;
     /**
      * Filters access by the list of all VPC security group ids associated with the resource in the request
      *
@@ -6438,6 +6626,7 @@ export declare class Sagemaker extends PolicyStatement {
      * - .toCreateDomain()
      * - .toCreateEndpointConfig()
      * - .toCreateHyperParameterTuningJob()
+     * - .toCreateJob()
      * - .toCreateModel()
      * - .toCreateModelBiasJobDefinition()
      * - .toCreateModelExplainabilityJobDefinition()
@@ -6469,6 +6658,7 @@ export declare class Sagemaker extends PolicyStatement {
      * - .toCreateDomain()
      * - .toCreateEndpointConfig()
      * - .toCreateHyperParameterTuningJob()
+     * - .toCreateJob()
      * - .toCreateModel()
      * - .toCreateModelBiasJobDefinition()
      * - .toCreateModelExplainabilityJobDefinition()