iam-floyd 0.799.0 → 0.800.0

package/README.md

@@ -16,8 +16,8 @@
 Support for:
 
 - 450 Services
-- 21072 Actions
-- 2230 Resource Types
+- 21083 Actions
+- 2232 Resource Types
 - 2360 Condition keys
 <!-- /stats -->
 

package/lib/generated/policy-statements/ec2.d.ts

@@ -49,6 +49,17 @@ export declare class Ec2 extends PolicyStatement {
      * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_AcceptReservedInstancesExchangeQuote.html
      */
     toAcceptReservedInstancesExchangeQuote(): this;
+    /**
+     * Grants permission to accept a transit gateway attachment request for a Client VPN endpoint
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_AcceptTransitGatewayClientVpnAttachment.html
+     */
+    toAcceptTransitGatewayClientVpnAttachment(): this;
     /**
      * Grants permission to accept a request to associate subnets with a transit gateway multicast domain
      *
@@ -151,6 +162,9 @@ export declare class Ec2 extends PolicyStatement {
      * Possible conditions:
      * - .ifRegion()
      *
+     * Dependent actions:
+     * - ec2:CreateTags
+     *
      * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_AllocateIpamPoolCidr.html
      */
     toAllocateIpamPoolCidr(): this;
@@ -792,6 +806,20 @@ export declare class Ec2 extends PolicyStatement {
      * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateCapacityReservationBySplitting.html
      */
     toCreateCapacityReservationBySplitting(): this;
+    /**
+     * Grants permission to generate a cancellation quote for a future-dated Capacity Reservation
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * Dependent actions:
+     * - ec2:CreateTags
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateCapacityReservationCancellationQuote.html
+     */
+    toCreateCapacityReservationCancellationQuote(): this;
     /**
      * Grants permission to create a Capacity Reservation Fleet
      *
@@ -2972,6 +3000,17 @@ export declare class Ec2 extends PolicyStatement {
      * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DeleteTransitGateway.html
      */
     toDeleteTransitGateway(): this;
+    /**
+     * Grants permission to delete a transit gateway attachment for a Client VPN endpoint
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DeleteTransitGatewayClientVpnAttachment.html
+     */
+    toDeleteTransitGatewayClientVpnAttachment(): this;
     /**
      * Grants permission to delete a transit gateway connect attachment
      *
@@ -3544,6 +3583,17 @@ export declare class Ec2 extends PolicyStatement {
      * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeCapacityReservationBillingRequests.html
      */
     toDescribeCapacityReservationBillingRequests(): this;
+    /**
+     * Grants permission to describe one or more Capacity Reservation cancellation quotes
+     *
+     * Access Level: List
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeCapacityReservationCancellationQuotes.html
+     */
+    toDescribeCapacityReservationCancellationQuotes(): this;
     /**
      * Grants permission to describe one or more Capacity Reservation Fleets
      *
@@ -4171,6 +4221,17 @@ export declare class Ec2 extends PolicyStatement {
      * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeIpamPolicies.html
      */
     toDescribeIpamPolicies(): this;
+    /**
+     * Grants permission to describe IPAM pool allocations
+     *
+     * Access Level: List
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeIpamPoolAllocations.html
+     */
+    toDescribeIpamPoolAllocations(): this;
     /**
      * Grants permission to describe Amazon VPC IP Address Manager (IPAM) pools
      *
@@ -6386,6 +6447,17 @@ export declare class Ec2 extends PolicyStatement {
      * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetCapacityManagerMetricDimensions.html
      */
     toGetCapacityManagerMetricDimensions(): this;
+    /**
+     * Grants permission to retrieve the tag keys that are currently being monitored by EC2 Capacity Manager
+     *
+     * Access Level: List
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetCapacityManagerMonitoredTagKeys.html
+     */
+    toGetCapacityManagerMonitoredTagKeys(): this;
     /**
      * Grants permission to get usage information about a Capacity Reservation
      *
@@ -6749,6 +6821,17 @@ export declare class Ec2 extends PolicyStatement {
      * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetManagedPrefixListEntries.html
      */
     toGetManagedPrefixListEntries(): this;
+    /**
+     * Grants permission to retrieve the managed resource visibility configuration for the account
+     *
+     * Access Level: List
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetManagedResourceVisibility.html
+     */
+    toGetManagedResourceVisibility(): this;
     /**
      * Grants permission to get the findings for one or more Network Access Scope analyses
      *
@@ -7534,6 +7617,17 @@ export declare class Ec2 extends PolicyStatement {
      * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyIpamPool.html
      */
     toModifyIpamPool(): this;
+    /**
+     * Grants permission to modify the description of an IPAM pool allocation
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyIpamPoolAllocation.html
+     */
+    toModifyIpamPoolAllocation(): this;
     /**
      * Grants permission to modify an IPAM prefix list resolver
      *
@@ -7622,6 +7716,17 @@ export declare class Ec2 extends PolicyStatement {
      * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyManagedPrefixList.html
      */
     toModifyManagedPrefixList(): this;
+    /**
+     * Grants permission to modify the managed resource visibility configuration for the account
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyManagedResourceVisibility.html
+     */
+    toModifyManagedResourceVisibility(): this;
     /**
      * Grants permission to modify an attribute of a network interface
      *
@@ -8324,6 +8429,17 @@ export declare class Ec2 extends PolicyStatement {
      * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RejectCapacityReservationBillingOwnership.html
      */
     toRejectCapacityReservationBillingOwnership(): this;
+    /**
+     * Grants permission to reject a transit gateway attachment request for a Client VPN endpoint
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RejectTransitGatewayClientVpnAttachment.html
+     */
+    toRejectTransitGatewayClientVpnAttachment(): this;
     /**
      * Grants permission to reject requests to associate cross-account subnets with a transit gateway multicast domain
      *
@@ -8950,6 +9066,17 @@ export declare class Ec2 extends PolicyStatement {
      * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_UnmonitorInstances.html
      */
     toUnmonitorInstances(): this;
+    /**
+     * Grants permission to activate or deactivate tag keys for monitoring by EC2 Capacity Manager
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_UpdateCapacityManagerMonitoredTagKeys.html
+     */
+    toUpdateCapacityManagerMonitoredTagKeys(): this;
     /**
      * Grants permission to update the Organizations access setting for EC2 Capacity Manager
      *
@@ -9069,6 +9196,26 @@ export declare class Ec2 extends PolicyStatement {
      * - .ifResourceTag()
      */
     onCapacityManagerDataExport(capacityManagerDataExportId: string, account?: string, region?: string, partition?: string): this;
+    /**
+     * Adds a resource of type capacity-reservation-cancellation-quote to the statement
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format
+     *
+     * @param capacityReservationCancellationQuoteId - Identifier for the capacityReservationCancellationQuoteId.
+     * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
+     * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
+     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsResourceTag()
+     * - .ifAwsTagKeys()
+     * - .ifAttribute()
+     * - .ifAttribute()
+     * - .ifRegion()
+     * - .ifResourceTag()
+     */
+    onCapacityReservationCancellationQuote(capacityReservationCancellationQuoteId: string, account?: string, region?: string, partition?: string): this;
     /**
      * Adds a resource of type capacity-reservation-fleet to the statement
      *
@@ -9657,6 +9804,26 @@ export declare class Ec2 extends PolicyStatement {
      * - .ifResourceTag()
      */
     onIpamPolicy(ipamPolicyId: string, account?: string, partition?: string): this;
+    /**
+     * Adds a resource of type ipam-pool-allocation to the statement
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format
+     *
+     * @param ipamPoolAllocationId - Identifier for the ipamPoolAllocationId.
+     * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
+     * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
+     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsResourceTag()
+     * - .ifAwsTagKeys()
+     * - .ifAttribute()
+     * - .ifAttribute()
+     * - .ifRegion()
+     * - .ifResourceTag()
+     */
+    onIpamPoolAllocation(ipamPoolAllocationId: string, account?: string, region?: string, partition?: string): this;
     /**
      * Adds a resource of type ipam-pool to the statement
      *
@@ -11242,6 +11409,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toAcceptAddressTransfer()
      * - .toAllocateAddress()
      * - .toAllocateHosts()
+     * - .toAllocateIpamPoolCidr()
      * - .toAssociateIpamResourceDiscovery()
      * - .toAuthorizeSecurityGroupEgress()
      * - .toAuthorizeSecurityGroupIngress()
@@ -11250,6 +11418,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toCopyVolumes()
      * - .toCreateCapacityManagerDataExport()
      * - .toCreateCapacityReservation()
+     * - .toCreateCapacityReservationCancellationQuote()
      * - .toCreateCapacityReservationFleet()
      * - .toCreateCarrierGateway()
      * - .toCreateClientVpnEndpoint()
@@ -11350,6 +11519,7 @@ export declare class Ec2 extends PolicyStatement {
      * - elastic-ip
      * - capacity-block
      * - capacity-manager-data-export
+     * - capacity-reservation-cancellation-quote
      * - capacity-reservation-fleet
      * - capacity-reservation
      * - carrier-gateway
@@ -11376,6 +11546,7 @@ export declare class Ec2 extends PolicyStatement {
      * - ipam-external-resource-verification-token
      * - ipam
      * - ipam-policy
+     * - ipam-pool-allocation
      * - ipam-pool
      * - ipam-prefix-list-resolver
      * - ipam-prefix-list-resolver-target
@@ -11465,6 +11636,7 @@ export declare class Ec2 extends PolicyStatement {
      * Applies to actions:
      * - .toAcceptCapacityReservationBillingOwnership()
      * - .toAcceptReservedInstancesExchangeQuote()
+     * - .toAcceptTransitGatewayClientVpnAttachment()
      * - .toAcceptTransitGatewayMulticastDomainAssociations()
      * - .toAcceptTransitGatewayPeeringAttachment()
      * - .toAcceptTransitGatewayVpcAttachment()
@@ -11654,6 +11826,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toDeleteTrafficMirrorSession()
      * - .toDeleteTrafficMirrorTarget()
      * - .toDeleteTransitGateway()
+     * - .toDeleteTransitGatewayClientVpnAttachment()
      * - .toDeleteTransitGatewayConnect()
      * - .toDeleteTransitGatewayConnectPeer()
      * - .toDeleteTransitGatewayMeteringPolicy()
@@ -11835,6 +12008,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toModifyIpam()
      * - .toModifyIpamPolicyAllocationRules()
      * - .toModifyIpamPool()
+     * - .toModifyIpamPoolAllocation()
      * - .toModifyIpamPrefixListResolver()
      * - .toModifyIpamPrefixListResolverTarget()
      * - .toModifyIpamResourceCidr()
@@ -11899,6 +12073,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toRegisterTransitGatewayMulticastGroupMembers()
      * - .toRegisterTransitGatewayMulticastGroupSources()
      * - .toRejectCapacityReservationBillingOwnership()
+     * - .toRejectTransitGatewayClientVpnAttachment()
      * - .toRejectTransitGatewayMulticastDomainAssociations()
      * - .toRejectTransitGatewayPeeringAttachment()
      * - .toRejectTransitGatewayVpcAttachment()
@@ -11956,6 +12131,7 @@ export declare class Ec2 extends PolicyStatement {
      * - elastic-ip
      * - capacity-block
      * - capacity-manager-data-export
+     * - capacity-reservation-cancellation-quote
      * - capacity-reservation-fleet
      * - capacity-reservation
      * - carrier-gateway
@@ -11982,6 +12158,7 @@ export declare class Ec2 extends PolicyStatement {
      * - ipam-external-resource-verification-token
      * - ipam
      * - ipam-policy
+     * - ipam-pool-allocation
      * - ipam-pool
      * - ipam-prefix-list-resolver
      * - ipam-prefix-list-resolver-target
@@ -12072,6 +12249,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toAcceptAddressTransfer()
      * - .toAllocateAddress()
      * - .toAllocateHosts()
+     * - .toAllocateIpamPoolCidr()
      * - .toAssociateIpamResourceDiscovery()
      * - .toAuthorizeSecurityGroupEgress()
      * - .toAuthorizeSecurityGroupIngress()
@@ -12080,6 +12258,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toCopyVolumes()
      * - .toCreateCapacityManagerDataExport()
      * - .toCreateCapacityReservation()
+     * - .toCreateCapacityReservationCancellationQuote()
      * - .toCreateCapacityReservationFleet()
      * - .toCreateCarrierGateway()
      * - .toCreateClientVpnEndpoint()
@@ -12180,6 +12359,7 @@ export declare class Ec2 extends PolicyStatement {
      * - elastic-ip
      * - capacity-block
      * - capacity-manager-data-export
+     * - capacity-reservation-cancellation-quote
      * - capacity-reservation-fleet
      * - capacity-reservation
      * - carrier-gateway
@@ -12206,6 +12386,7 @@ export declare class Ec2 extends PolicyStatement {
      * - ipam-external-resource-verification-token
      * - ipam
      * - ipam-policy
+     * - ipam-pool-allocation
      * - ipam-pool
      * - ipam-prefix-list-resolver
      * - ipam-prefix-list-resolver-target
@@ -12403,6 +12584,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toModifyInstancePlacement()
      * - .toModifyIpam()
      * - .toModifyIpamPool()
+     * - .toModifyIpamPoolAllocation()
      * - .toModifyIpamPrefixListResolver()
      * - .toModifyIpamResourceCidr()
      * - .toModifyIpamResourceDiscovery()
@@ -12449,6 +12631,7 @@ export declare class Ec2 extends PolicyStatement {
      * - elastic-ip
      * - capacity-block
      * - capacity-manager-data-export
+     * - capacity-reservation-cancellation-quote
      * - capacity-reservation-fleet
      * - capacity-reservation
      * - client-vpn-endpoint
@@ -12462,6 +12645,7 @@ export declare class Ec2 extends PolicyStatement {
      * - ipam-external-resource-verification-token
      * - ipam
      * - ipam-policy
+     * - ipam-pool-allocation
      * - ipam-pool
      * - ipam-prefix-list-resolver
      * - ipam-prefix-list-resolver-target
@@ -12523,6 +12707,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toModifyInstancePlacement()
      * - .toModifyIpam()
      * - .toModifyIpamPool()
+     * - .toModifyIpamPoolAllocation()
      * - .toModifyIpamPrefixListResolver()
      * - .toModifyIpamResourceCidr()
      * - .toModifyIpamResourceDiscovery()
@@ -12577,6 +12762,7 @@ export declare class Ec2 extends PolicyStatement {
      * - elastic-ip
      * - capacity-block
      * - capacity-manager-data-export
+     * - capacity-reservation-cancellation-quote
      * - capacity-reservation-fleet
      * - capacity-reservation
      * - client-vpn-endpoint
@@ -12590,6 +12776,7 @@ export declare class Ec2 extends PolicyStatement {
      * - ipam-external-resource-verification-token
      * - ipam
      * - ipam-policy
+     * - ipam-pool-allocation
      * - ipam-pool
      * - ipam-prefix-list-resolver
      * - ipam-prefix-list-resolver-target
@@ -15439,6 +15626,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toAcceptAddressTransfer()
      * - .toAcceptCapacityReservationBillingOwnership()
      * - .toAcceptReservedInstancesExchangeQuote()
+     * - .toAcceptTransitGatewayClientVpnAttachment()
      * - .toAcceptTransitGatewayMulticastDomainAssociations()
      * - .toAcceptTransitGatewayPeeringAttachment()
      * - .toAcceptTransitGatewayVpcAttachment()
@@ -15503,6 +15691,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toCreateCapacityManagerDataExport()
      * - .toCreateCapacityReservation()
      * - .toCreateCapacityReservationBySplitting()
+     * - .toCreateCapacityReservationCancellationQuote()
      * - .toCreateCapacityReservationFleet()
      * - .toCreateCarrierGateway()
      * - .toCreateClientVpnEndpoint()
@@ -15675,6 +15864,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toDeleteTrafficMirrorSession()
      * - .toDeleteTrafficMirrorTarget()
      * - .toDeleteTransitGateway()
+     * - .toDeleteTransitGatewayClientVpnAttachment()
      * - .toDeleteTransitGatewayConnect()
      * - .toDeleteTransitGatewayConnectPeer()
      * - .toDeleteTransitGatewayMeteringPolicy()
@@ -15727,6 +15917,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toDescribeCapacityBlocks()
      * - .toDescribeCapacityManagerDataExports()
      * - .toDescribeCapacityReservationBillingRequests()
+     * - .toDescribeCapacityReservationCancellationQuotes()
      * - .toDescribeCapacityReservationFleets()
      * - .toDescribeCapacityReservationTopology()
      * - .toDescribeCapacityReservations()
@@ -15784,6 +15975,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toDescribeIpamByoasn()
      * - .toDescribeIpamExternalResourceVerificationTokens()
      * - .toDescribeIpamPolicies()
+     * - .toDescribeIpamPoolAllocations()
      * - .toDescribeIpamPools()
      * - .toDescribeIpamPrefixListResolverTargets()
      * - .toDescribeIpamPrefixListResolvers()
@@ -15982,6 +16174,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toGetCapacityManagerAttributes()
      * - .toGetCapacityManagerMetricData()
      * - .toGetCapacityManagerMetricDimensions()
+     * - .toGetCapacityManagerMonitoredTagKeys()
      * - .toGetCapacityReservationUsage()
      * - .toGetCoipPoolUsage()
      * - .toGetConsoleOutput()
@@ -16015,6 +16208,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toGetLaunchTemplateData()
      * - .toGetManagedPrefixListAssociations()
      * - .toGetManagedPrefixListEntries()
+     * - .toGetManagedResourceVisibility()
      * - .toGetNetworkInsightsAccessScopeAnalysisFindings()
      * - .toGetNetworkInsightsAccessScopeContent()
      * - .toGetPasswordData()
@@ -16085,6 +16279,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toModifyIpam()
      * - .toModifyIpamPolicyAllocationRules()
      * - .toModifyIpamPool()
+     * - .toModifyIpamPoolAllocation()
      * - .toModifyIpamPrefixListResolver()
      * - .toModifyIpamPrefixListResolverTarget()
      * - .toModifyIpamResourceCidr()
@@ -16093,6 +16288,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toModifyLaunchTemplate()
      * - .toModifyLocalGatewayRoute()
      * - .toModifyManagedPrefixList()
+     * - .toModifyManagedResourceVisibility()
      * - .toModifyNetworkInterfaceAttribute()
      * - .toModifyOdbNetworkPeering()
      * - .toModifyPrivateDnsNameOptions()
@@ -16156,6 +16352,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toRegisterTransitGatewayMulticastGroupMembers()
      * - .toRegisterTransitGatewayMulticastGroupSources()
      * - .toRejectCapacityReservationBillingOwnership()
+     * - .toRejectTransitGatewayClientVpnAttachment()
      * - .toRejectTransitGatewayMulticastDomainAssociations()
      * - .toRejectTransitGatewayPeeringAttachment()
      * - .toRejectTransitGatewayVpcAttachment()
@@ -16211,6 +16408,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toUnassignPrivateNatGatewayAddress()
      * - .toUnlockSnapshot()
      * - .toUnmonitorInstances()
+     * - .toUpdateCapacityManagerMonitoredTagKeys()
      * - .toUpdateCapacityManagerOrganizationsAccess()
      * - .toUpdateInterruptibleCapacityReservationAllocation()
      * - .toUpdateSecurityGroupRuleDescriptionsEgress()
@@ -16221,6 +16419,7 @@ export declare class Ec2 extends PolicyStatement {
      * - elastic-ip
      * - capacity-block
      * - capacity-manager-data-export
+     * - capacity-reservation-cancellation-quote
      * - capacity-reservation-fleet
      * - capacity-reservation
      * - carrier-gateway
@@ -16247,6 +16446,7 @@ export declare class Ec2 extends PolicyStatement {
      * - ipam-external-resource-verification-token
      * - ipam
      * - ipam-policy
+     * - ipam-pool-allocation
      * - ipam-pool
      * - ipam-prefix-list-resolver
      * - ipam-prefix-list-resolver-target
@@ -16458,6 +16658,7 @@ export declare class Ec2 extends PolicyStatement {
      * Applies to actions:
      * - .toAcceptCapacityReservationBillingOwnership()
      * - .toAcceptReservedInstancesExchangeQuote()
+     * - .toAcceptTransitGatewayClientVpnAttachment()
      * - .toAcceptTransitGatewayMulticastDomainAssociations()
      * - .toAcceptTransitGatewayPeeringAttachment()
      * - .toAcceptTransitGatewayVpcAttachment()
@@ -16497,6 +16698,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toAuthorizeClientVpnIngress()
      * - .toAuthorizeSecurityGroupEgress()
      * - .toAuthorizeSecurityGroupIngress()
+     * - .toCancelCapacityReservation()
      * - .toCancelCapacityReservationFleets()
      * - .toCancelDeclarativePoliciesReport()
      * - .toCancelExportTask()
@@ -16646,6 +16848,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toDeleteTrafficMirrorSession()
      * - .toDeleteTrafficMirrorTarget()
      * - .toDeleteTransitGateway()
+     * - .toDeleteTransitGatewayClientVpnAttachment()
      * - .toDeleteTransitGatewayConnect()
      * - .toDeleteTransitGatewayConnectPeer()
      * - .toDeleteTransitGatewayMeteringPolicy()
@@ -16825,6 +17028,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toModifyIpam()
      * - .toModifyIpamPolicyAllocationRules()
      * - .toModifyIpamPool()
+     * - .toModifyIpamPoolAllocation()
      * - .toModifyIpamPrefixListResolver()
      * - .toModifyIpamPrefixListResolverTarget()
      * - .toModifyIpamResourceCidr()
@@ -16888,6 +17092,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toRegisterTransitGatewayMulticastGroupMembers()
      * - .toRegisterTransitGatewayMulticastGroupSources()
      * - .toRejectCapacityReservationBillingOwnership()
+     * - .toRejectTransitGatewayClientVpnAttachment()
      * - .toRejectTransitGatewayMulticastDomainAssociations()
      * - .toRejectTransitGatewayPeeringAttachment()
      * - .toRejectTransitGatewayVpcAttachment()
@@ -16945,6 +17150,7 @@ export declare class Ec2 extends PolicyStatement {
      * - elastic-ip
      * - capacity-block
      * - capacity-manager-data-export
+     * - capacity-reservation-cancellation-quote
      * - capacity-reservation-fleet
      * - capacity-reservation
      * - carrier-gateway
@@ -16971,6 +17177,7 @@ export declare class Ec2 extends PolicyStatement {
      * - ipam-external-resource-verification-token
      * - ipam
      * - ipam-policy
+     * - ipam-pool-allocation
      * - ipam-pool
      * - ipam-prefix-list-resolver
      * - ipam-prefix-list-resolver-target
@@ -18257,6 +18464,7 @@ export declare class Ec2 extends PolicyStatement {
      * Filters access by the ID of a transit gateway attachment
      *
      * Applies to actions:
+     * - .toAcceptTransitGatewayClientVpnAttachment()
      * - .toAcceptTransitGatewayMulticastDomainAssociations()
      * - .toAcceptTransitGatewayPeeringAttachment()
      * - .toAcceptTransitGatewayVpcAttachment()
@@ -18275,6 +18483,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toCreateTransitGatewayRouteTableAnnouncement()
      * - .toCreateTransitGatewayVpcAttachment()
      * - .toCreateVpnConnection()
+     * - .toDeleteTransitGatewayClientVpnAttachment()
      * - .toDeleteTransitGatewayConnect()
      * - .toDeleteTransitGatewayPeeringAttachment()
      * - .toDeleteTransitGatewayVpcAttachment()
@@ -18286,6 +18495,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toModifyTransitGatewayMeteringPolicy()
      * - .toModifyTransitGatewayPrefixListReference()
      * - .toModifyTransitGatewayVpcAttachment()
+     * - .toRejectTransitGatewayClientVpnAttachment()
      * - .toRejectTransitGatewayMulticastDomainAssociations()
      * - .toRejectTransitGatewayPeeringAttachment()
      * - .toRejectTransitGatewayVpcAttachment()
@@ -18317,6 +18527,7 @@ export declare class Ec2 extends PolicyStatement {
      * Filters access by the ID of a transit gateway
      *
      * Applies to actions:
+     * - .toCreateClientVpnEndpoint()
      * - .toCreateFlowLogs()
      * - .toCreateNetworkInsightsPath()
      * - .toCreateTags()
@@ -18330,6 +18541,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toCreateVpnConcentrator()
      * - .toCreateVpnConnection()
      * - .toDeleteTransitGateway()
+     * - .toModifyClientVpnEndpoint()
      * - .toModifyTransitGateway()
      *
      * Applies to resource types: