p6-cdk-s3-protector 0.0.38 → 0.0.40

package/node_modules/cdk-iam-floyd/lib/generated/policy-statements/ec2.d.ts

@@ -709,6 +709,34 @@ export declare class Ec2 extends PolicyStatement {
      * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CopySnapshot.html
      */
     toCopySnapshot(): this;
+    /**
+     * Grants permission to create a copy of an EBS volume. Resource-level permissions specified for this action apply to the source and copied volume. Condition keys for the copied volume correspond to parameters specified in the CopyVolumes API request
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * Dependent actions:
+     * - ec2:CreateTags
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CopyVolumes.html
+     */
+    toCopyVolumes(): this;
+    /**
+     * Grants permission to create a new S3 Data Export for Capacity Manager
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * Dependent actions:
+     * - ec2:CreateTags
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateCapacityManagerDataExport.html
+     */
+    toCreateCapacityManagerDataExport(): this;
     /**
      * Grants permission to create a Capacity Reservation
      *
@@ -2009,6 +2037,17 @@ export declare class Ec2 extends PolicyStatement {
      * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateVpnGateway.html
      */
     toCreateVpnGateway(): this;
+    /**
+     * Grants permission to delete an existing Capacity Manager data export configuration
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DeleteCapacityManagerDataExport.html
+     */
+    toDeleteCapacityManagerDataExport(): this;
     /**
      * Grants permission to delete a carrier gateway
      *
@@ -3198,6 +3237,17 @@ export declare class Ec2 extends PolicyStatement {
      * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeCapacityBlocks.html
      */
     toDescribeCapacityBlocks(): this;
+    /**
+     * Grants permission to describe one or more Capacity Manager data export configurations
+     *
+     * Access Level: List
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeCapacityManagerDataExports.html
+     */
+    toDescribeCapacityManagerDataExports(): this;
     /**
      * Grants permission to describe one or more requests to assign the billing of the unused capacity of a Capacity Reservation
      *
@@ -5060,6 +5110,17 @@ export declare class Ec2 extends PolicyStatement {
      * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DisableAwsNetworkPerformanceMetricSubscription.html
      */
     toDisableAwsNetworkPerformanceMetricSubscription(): this;
+    /**
+     * Grants permission to disable EC2 Capacity Manager for your account
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DisableCapacityManager.html
+     */
+    toDisableCapacityManager(): this;
     /**
      * Grants permission to disable EBS encryption by default for your account
      *
@@ -5470,6 +5531,17 @@ export declare class Ec2 extends PolicyStatement {
      * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_EnableAwsNetworkPerformanceMetricSubscription.html
      */
     toEnableAwsNetworkPerformanceMetricSubscription(): this;
+    /**
+     * Grants permission to enable EC2 Capacity Manager for your account
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_EnableCapacityManager.html
+     */
+    toEnableCapacityManager(): this;
     /**
      * Grants permission to enable EBS encryption by default for your account
      *
@@ -5798,6 +5870,39 @@ export declare class Ec2 extends PolicyStatement {
      * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetAwsNetworkPerformanceData.html
      */
     toGetAwsNetworkPerformanceData(): this;
+    /**
+     * Grants permission to retrieve the current configuration and status of EC2 Capacity Manager
+     *
+     * Access Level: Read
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetCapacityManagerAttributes.html
+     */
+    toGetCapacityManagerAttributes(): this;
+    /**
+     * Grants permission to retrieve capacity usage metrics for your EC2 resources
+     *
+     * Access Level: Read
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetCapacityManagerMetricData.html
+     */
+    toGetCapacityManagerMetricData(): this;
+    /**
+     * Grants permission to retrieve the available dimension values for capacity metrics within a specified time range
+     *
+     * Access Level: Read
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetCapacityManagerMetricDimensions.html
+     */
+    toGetCapacityManagerMetricDimensions(): this;
     /**
      * Grants permission to get usage information about a Capacity Reservation
      *
@@ -8164,6 +8269,17 @@ export declare class Ec2 extends PolicyStatement {
      * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_UnmonitorInstances.html
      */
     toUnmonitorInstances(): this;
+    /**
+     * Grants permission to update the Organizations access setting for EC2 Capacity Manager
+     *
+     * Access Level: Write
+     *
+     * Possible conditions:
+     * - .ifRegion()
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_UpdateCapacityManagerOrganizationsAccess.html
+     */
+    toUpdateCapacityManagerOrganizationsAccess(): this;
     /**
      * Grants permission to update descriptions for one or more outbound rules in a VPC security group
      *
@@ -8241,6 +8357,26 @@ export declare class Ec2 extends PolicyStatement {
      * - .ifResourceTag()
      */
     onCapacityBlock(capacityBlockId: string, account?: string, region?: string, partition?: string): this;
+    /**
+     * Adds a resource of type capacity-manager-data-export to the statement
+     *
+     * https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#EC2_ARN_Format
+     *
+     * @param capacityManagerDataExportId - Identifier for the capacityManagerDataExportId.
+     * @param account - Account of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's account.
+     * @param region - Region of the resource; defaults to `*`, unless using the CDK, where the default is the current Stack's region.
+     * @param partition - Partition of the AWS account [aws, aws-cn, aws-us-gov]; defaults to `aws`, unless using the CDK, where the default is the current Stack's partition.
+     *
+     * Possible conditions:
+     * - .ifAwsRequestTag()
+     * - .ifAwsResourceTag()
+     * - .ifAwsTagKeys()
+     * - .ifAttribute()
+     * - .ifAttribute()
+     * - .ifRegion()
+     * - .ifResourceTag()
+     */
+    onCapacityManagerDataExport(capacityManagerDataExportId: string, account?: string, region?: string, partition?: string): this;
     /**
      * Adds a resource of type capacity-reservation-fleet to the statement
      *
@@ -9974,6 +10110,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .ifLaunchTemplate()
      * - .ifManagedResourceOperator()
      * - .ifParentSnapshot()
+     * - .ifParentVolume()
      * - .ifRegion()
      * - .ifResourceTag()
      * - .ifVolumeID()
@@ -10040,9 +10177,9 @@ export declare class Ec2 extends PolicyStatement {
      * - .ifAttribute()
      * - .ifRegion()
      * - .ifResourceTag()
+     * - .ifVpceMultiRegion()
      * - .ifVpceServiceName()
      * - .ifVpceServiceOwner()
-     * - .ifVpceMultiRegion()
      * - .ifVpceServiceRegion()
      */
     onVpcEndpoint(vpcEndpointId: string, account?: string, region?: string, partition?: string): this;
@@ -10064,8 +10201,8 @@ export declare class Ec2 extends PolicyStatement {
      * - .ifAttribute()
      * - .ifRegion()
      * - .ifResourceTag()
-     * - .ifVpceServicePrivateDnsName()
      * - .ifVpceMultiRegion()
+     * - .ifVpceServicePrivateDnsName()
      * - .ifVpceServiceRegion()
      * - .ifVpceSupportedRegion()
      */
@@ -10237,6 +10374,8 @@ export declare class Ec2 extends PolicyStatement {
      * - .toAuthorizeSecurityGroupIngress()
      * - .toCopyImage()
      * - .toCopySnapshot()
+     * - .toCopyVolumes()
+     * - .toCreateCapacityManagerDataExport()
      * - .toCreateCapacityReservation()
      * - .toCreateCapacityReservationFleet()
      * - .toCreateCarrierGateway()
@@ -10328,6 +10467,7 @@ export declare class Ec2 extends PolicyStatement {
      * Applies to resource types:
      * - elastic-ip
      * - capacity-block
+     * - capacity-manager-data-export
      * - capacity-reservation-fleet
      * - capacity-reservation
      * - carrier-gateway
@@ -10546,6 +10686,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toCreateVpcPeeringConnection()
      * - .toCreateVpnConnection()
      * - .toCreateVpnConnectionRoute()
+     * - .toDeleteCapacityManagerDataExport()
      * - .toDeleteCarrierGateway()
      * - .toDeleteClientVpnEndpoint()
      * - .toDeleteClientVpnRoute()
@@ -10879,6 +11020,7 @@ export declare class Ec2 extends PolicyStatement {
      * Applies to resource types:
      * - elastic-ip
      * - capacity-block
+     * - capacity-manager-data-export
      * - capacity-reservation-fleet
      * - capacity-reservation
      * - carrier-gateway
@@ -10991,6 +11133,8 @@ export declare class Ec2 extends PolicyStatement {
      * - .toAuthorizeSecurityGroupIngress()
      * - .toCopyImage()
      * - .toCopySnapshot()
+     * - .toCopyVolumes()
+     * - .toCreateCapacityManagerDataExport()
      * - .toCreateCapacityReservation()
      * - .toCreateCapacityReservationFleet()
      * - .toCreateCarrierGateway()
@@ -11082,6 +11226,7 @@ export declare class Ec2 extends PolicyStatement {
      * Applies to resource types:
      * - elastic-ip
      * - capacity-block
+     * - capacity-manager-data-export
      * - capacity-reservation-fleet
      * - capacity-reservation
      * - carrier-gateway
@@ -11340,6 +11485,7 @@ export declare class Ec2 extends PolicyStatement {
      * Applies to resource types:
      * - elastic-ip
      * - capacity-block
+     * - capacity-manager-data-export
      * - capacity-reservation-fleet
      * - capacity-reservation
      * - client-vpn-endpoint
@@ -11460,6 +11606,7 @@ export declare class Ec2 extends PolicyStatement {
      * Applies to resource types:
      * - elastic-ip
      * - capacity-block
+     * - capacity-manager-data-export
      * - capacity-reservation-fleet
      * - capacity-reservation
      * - client-vpn-endpoint
@@ -11596,6 +11743,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toAttachClassicLinkVpc()
      * - .toAttachNetworkInterface()
      * - .toAttachVolume()
+     * - .toCopyVolumes()
      * - .toCreateCapacityReservation()
      * - .toCreateCapacityReservationBySplitting()
      * - .toCreateDelegateMacVolumeOwnershipTask()
@@ -11734,6 +11882,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toAttachClassicLinkVpc()
      * - .toAttachNetworkInterface()
      * - .toAttachVolume()
+     * - .toCopyVolumes()
      * - .toCreateCapacityReservation()
      * - .toCreateClientVpnRoute()
      * - .toCreateDelegateMacVolumeOwnershipTask()
@@ -12244,6 +12393,7 @@ export declare class Ec2 extends PolicyStatement {
      * Applies to actions:
      * - .toAttachVolume()
      * - .toCopySnapshot()
+     * - .toCopyVolumes()
      * - .toCreateFleet()
      * - .toCreateSnapshot()
      * - .toCreateSnapshots()
@@ -13231,6 +13381,15 @@ export declare class Ec2 extends PolicyStatement {
      * - .toAttachClassicLinkVpc()
      * - .toAttachNetworkInterface()
      * - .toAttachVolume()
+     * - .toCopyVolumes()
+     * - .toCreateImage()
+     * - .toCreateInstanceExportTask()
+     * - .toCreateLaunchTemplateVersion()
+     * - .toCreateNetworkInterfacePermission()
+     * - .toCreateReplaceRootVolumeTask()
+     * - .toCreateSnapshot()
+     * - .toCreateTags()
+     * - .toCreateTrafficMirrorSession()
      * - .toDeleteLaunchTemplate()
      * - .toDeleteLaunchTemplateVersions()
      * - .toDeleteNetworkInterface()
@@ -13667,6 +13826,7 @@ export declare class Ec2 extends PolicyStatement {
      * Applies to actions:
      * - .toAttachVolume()
      * - .toCopySnapshot()
+     * - .toCopyVolumes()
      * - .toCreateFleet()
      * - .toCreateTags()
      * - .toCreateVolume()
@@ -13696,7 +13856,9 @@ export declare class Ec2 extends PolicyStatement {
      * https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-policies-for-amazon-ec2.html#amazon-ec2-keys
      *
      * Applies to actions:
+     * - .toAttachVolume()
      * - .toCopySnapshot()
+     * - .toCopyVolumes()
      * - .toCreateImage()
      * - .toCreateReplaceRootVolumeTask()
      * - .toCreateSnapshot()
@@ -13704,7 +13866,10 @@ export declare class Ec2 extends PolicyStatement {
      * - .toCreateTags()
      * - .toCreateVolume()
      * - .toDeleteSnapshot()
+     * - .toDeleteVolume()
      * - .toDescribeSnapshotAttribute()
+     * - .toDescribeVolumeAttribute()
+     * - .toDetachVolume()
      * - .toDisableFastSnapshotRestores()
      * - .toEnableFastSnapshotRestores()
      * - .toImportImage()
@@ -13712,6 +13877,8 @@ export declare class Ec2 extends PolicyStatement {
      * - .toLockSnapshot()
      * - .toModifySnapshotAttribute()
      * - .toModifySnapshotTier()
+     * - .toModifyVolume()
+     * - .toModifyVolumeAttribute()
      * - .toRegisterImage()
      * - .toRequestSpotFleet()
      * - .toRequestSpotInstances()
@@ -13723,6 +13890,7 @@ export declare class Ec2 extends PolicyStatement {
      *
      * Applies to resource types:
      * - snapshot
+     * - volume
      *
      * @param value The value(s) to check
      * @param operator Works with [arn operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_ARN). **Default:** `ArnLike`
@@ -14207,6 +14375,8 @@ export declare class Ec2 extends PolicyStatement {
      * - .toCopyFpgaImage()
      * - .toCopyImage()
      * - .toCopySnapshot()
+     * - .toCopyVolumes()
+     * - .toCreateCapacityManagerDataExport()
      * - .toCreateCapacityReservation()
      * - .toCreateCapacityReservationBySplitting()
      * - .toCreateCapacityReservationFleet()
@@ -14302,6 +14472,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toCreateVpnConnection()
      * - .toCreateVpnConnectionRoute()
      * - .toCreateVpnGateway()
+     * - .toDeleteCapacityManagerDataExport()
      * - .toDeleteCarrierGateway()
      * - .toDeleteClientVpnEndpoint()
      * - .toDeleteClientVpnRoute()
@@ -14409,6 +14580,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toDescribeCapacityBlockOfferings()
      * - .toDescribeCapacityBlockStatus()
      * - .toDescribeCapacityBlocks()
+     * - .toDescribeCapacityManagerDataExports()
      * - .toDescribeCapacityReservationBillingRequests()
      * - .toDescribeCapacityReservationFleets()
      * - .toDescribeCapacityReservations()
@@ -14578,6 +14750,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toDisableAddressTransfer()
      * - .toDisableAllowedImagesSettings()
      * - .toDisableAwsNetworkPerformanceMetricSubscription()
+     * - .toDisableCapacityManager()
      * - .toDisableEbsEncryptionByDefault()
      * - .toDisableFastLaunch()
      * - .toDisableFastSnapshotRestores()
@@ -14615,6 +14788,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toEnableAddressTransfer()
      * - .toEnableAllowedImagesSettings()
      * - .toEnableAwsNetworkPerformanceMetricSubscription()
+     * - .toEnableCapacityManager()
      * - .toEnableEbsEncryptionByDefault()
      * - .toEnableFastLaunch()
      * - .toEnableFastSnapshotRestores()
@@ -14642,6 +14816,9 @@ export declare class Ec2 extends PolicyStatement {
      * - .toGetAssociatedEnclaveCertificateIamRoles()
      * - .toGetAssociatedIpv6PoolCidrs()
      * - .toGetAwsNetworkPerformanceData()
+     * - .toGetCapacityManagerAttributes()
+     * - .toGetCapacityManagerMetricData()
+     * - .toGetCapacityManagerMetricDimensions()
      * - .toGetCapacityReservationUsage()
      * - .toGetCoipPoolUsage()
      * - .toGetConsoleOutput()
@@ -14853,6 +15030,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toUnassignPrivateNatGatewayAddress()
      * - .toUnlockSnapshot()
      * - .toUnmonitorInstances()
+     * - .toUpdateCapacityManagerOrganizationsAccess()
      * - .toUpdateSecurityGroupRuleDescriptionsEgress()
      * - .toUpdateSecurityGroupRuleDescriptionsIngress()
      * - .toWithdrawByoipCidr()
@@ -14860,6 +15038,7 @@ export declare class Ec2 extends PolicyStatement {
      * Applies to resource types:
      * - elastic-ip
      * - capacity-block
+     * - capacity-manager-data-export
      * - capacity-reservation-fleet
      * - capacity-reservation
      * - carrier-gateway
@@ -15199,6 +15378,7 @@ export declare class Ec2 extends PolicyStatement {
      * - .toCreateVpcPeeringConnection()
      * - .toCreateVpnConnection()
      * - .toCreateVpnConnectionRoute()
+     * - .toDeleteCapacityManagerDataExport()
      * - .toDeleteCarrierGateway()
      * - .toDeleteClientVpnEndpoint()
      * - .toDeleteClientVpnRoute()
@@ -15529,6 +15709,7 @@ export declare class Ec2 extends PolicyStatement {
      * Applies to resource types:
      * - elastic-ip
      * - capacity-block
+     * - capacity-manager-data-export
      * - capacity-reservation-fleet
      * - capacity-reservation
      * - carrier-gateway
@@ -16281,6 +16462,7 @@ export declare class Ec2 extends PolicyStatement {
      *
      * Applies to actions:
      * - .toAttachVolume()
+     * - .toCopyVolumes()
      * - .toCreateReplaceRootVolumeTask()
      * - .toCreateSnapshot()
      * - .toCreateSnapshots()
@@ -16308,6 +16490,7 @@ export declare class Ec2 extends PolicyStatement {
      *
      * Applies to actions:
      * - .toAttachVolume()
+     * - .toCopyVolumes()
      * - .toCreateFleet()
      * - .toCreateSnapshot()
      * - .toCreateSnapshots()
@@ -16340,6 +16523,7 @@ export declare class Ec2 extends PolicyStatement {
      * Applies to actions:
      * - .toAttachVolume()
      * - .toCopySnapshot()
+     * - .toCopyVolumes()
      * - .toCreateFleet()
      * - .toCreateImage()
      * - .toCreateReplaceRootVolumeTask()
@@ -16390,6 +16574,7 @@ export declare class Ec2 extends PolicyStatement {
      *
      * Applies to actions:
      * - .toAttachVolume()
+     * - .toCopyVolumes()
      * - .toCreateFleet()
      * - .toCreateSnapshot()
      * - .toCreateSnapshots()
@@ -16421,6 +16606,7 @@ export declare class Ec2 extends PolicyStatement {
      *
      * Applies to actions:
      * - .toAttachVolume()
+     * - .toCopyVolumes()
      * - .toCreateFleet()
      * - .toCreateSnapshot()
      * - .toCreateSnapshots()
@@ -16618,6 +16804,37 @@ export declare class Ec2 extends PolicyStatement {
      * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
      */
     ifVpcPeeringConnectionID(value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by multi region of the VPC endpoint service
+     *
+     * https://docs.aws.amazon.com/vpc/latest/userguide/vpc-endpoints-iam.html
+     *
+     * Applies to actions:
+     * - .toAcceptVpcEndpointConnections()
+     * - .toCreateTags()
+     * - .toCreateVpcEndpoint()
+     * - .toCreateVpcEndpointConnectionNotification()
+     * - .toCreateVpcEndpointServiceConfiguration()
+     * - .toDeleteVpcEndpointConnectionNotifications()
+     * - .toDeleteVpcEndpointServiceConfigurations()
+     * - .toDeleteVpcEndpoints()
+     * - .toDescribeVpcEndpointServicePermissions()
+     * - .toModifyVpcEndpoint()
+     * - .toModifyVpcEndpointConnectionNotification()
+     * - .toModifyVpcEndpointServiceConfiguration()
+     * - .toModifyVpcEndpointServicePayerResponsibility()
+     * - .toModifyVpcEndpointServicePermissions()
+     * - .toRejectVpcEndpointConnections()
+     * - .toStartVpcEndpointServicePrivateDnsVerification()
+     *
+     * Applies to resource types:
+     * - vpc-endpoint
+     * - vpc-endpoint-service
+     *
+     * @param value The value(s) to check
+     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+     */
+    ifVpceMultiRegion(value: string | string[], operator?: Operator | string): this;
     /**
      * Filters access by the name of the VPC endpoint service
      *
@@ -16667,6 +16884,52 @@ export declare class Ec2 extends PolicyStatement {
      * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
      */
     ifVpceServicePrivateDnsName(value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by the region of the VPC endpoint service
+     *
+     * https://docs.aws.amazon.com/vpc/latest/userguide/vpc-endpoints-iam.html
+     *
+     * Applies to actions:
+     * - .toCreateTags()
+     * - .toCreateVpcEndpoint()
+     * - .toCreateVpcEndpointConnectionNotification()
+     * - .toCreateVpcEndpointServiceConfiguration()
+     * - .toDeleteVpcEndpoints()
+     * - .toModifyVpcEndpoint()
+     *
+     * Applies to resource types:
+     * - vpc-endpoint
+     * - vpc-endpoint-service
+     *
+     * @param value The value(s) to check
+     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+     */
+    ifVpceServiceRegion(value: string | string[], operator?: Operator | string): this;
+    /**
+     * Filters access by the supported region of the VPC endpoint service
+     *
+     * https://docs.aws.amazon.com/vpc/latest/userguide/vpc-endpoints-iam.html
+     *
+     * Applies to actions:
+     * - .toAcceptVpcEndpointConnections()
+     * - .toCreateTags()
+     * - .toDeleteVpcEndpointConnectionNotifications()
+     * - .toDeleteVpcEndpointServiceConfigurations()
+     * - .toDescribeVpcEndpointServicePermissions()
+     * - .toModifyVpcEndpointConnectionNotification()
+     * - .toModifyVpcEndpointServiceConfiguration()
+     * - .toModifyVpcEndpointServicePayerResponsibility()
+     * - .toModifyVpcEndpointServicePermissions()
+     * - .toRejectVpcEndpointConnections()
+     * - .toStartVpcEndpointServicePrivateDnsVerification()
+     *
+     * Applies to resource types:
+     * - vpc-endpoint-service
+     *
+     * @param value The value(s) to check
+     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
+     */
+    ifVpceSupportedRegion(value: string | string[], operator?: Operator | string): this;
     /**
      * Filters access by the ID of a transit gateway attachment
      *
@@ -16837,83 +17100,6 @@ export declare class Ec2 extends PolicyStatement {
      * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
      */
     ifTransitGatewayRouteTableId(value: string | string[], operator?: Operator | string): this;
-    /**
-     * Filters access by multi region of the VPC endpoint service
-     *
-     * https://docs.aws.amazon.com/vpc/latest/userguide/vpc-endpoints-iam.html
-     *
-     * Applies to actions:
-     * - .toAcceptVpcEndpointConnections()
-     * - .toCreateTags()
-     * - .toCreateVpcEndpoint()
-     * - .toCreateVpcEndpointConnectionNotification()
-     * - .toCreateVpcEndpointServiceConfiguration()
-     * - .toDeleteVpcEndpointConnectionNotifications()
-     * - .toDeleteVpcEndpointServiceConfigurations()
-     * - .toDeleteVpcEndpoints()
-     * - .toDescribeVpcEndpointServicePermissions()
-     * - .toModifyVpcEndpoint()
-     * - .toModifyVpcEndpointConnectionNotification()
-     * - .toModifyVpcEndpointServiceConfiguration()
-     * - .toModifyVpcEndpointServicePayerResponsibility()
-     * - .toModifyVpcEndpointServicePermissions()
-     * - .toRejectVpcEndpointConnections()
-     * - .toStartVpcEndpointServicePrivateDnsVerification()
-     *
-     * Applies to resource types:
-     * - vpc-endpoint
-     * - vpc-endpoint-service
-     *
-     * @param value The value(s) to check
-     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
-     */
-    ifVpceMultiRegion(value: string | string[], operator?: Operator | string): this;
-    /**
-     * Filters access by the region of the VPC endpoint service
-     *
-     * https://docs.aws.amazon.com/vpc/latest/userguide/vpc-endpoints-iam.html
-     *
-     * Applies to actions:
-     * - .toCreateTags()
-     * - .toCreateVpcEndpoint()
-     * - .toCreateVpcEndpointConnectionNotification()
-     * - .toCreateVpcEndpointServiceConfiguration()
-     * - .toDeleteVpcEndpoints()
-     * - .toModifyVpcEndpoint()
-     *
-     * Applies to resource types:
-     * - vpc-endpoint
-     * - vpc-endpoint-service
-     *
-     * @param value The value(s) to check
-     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
-     */
-    ifVpceServiceRegion(value: string | string[], operator?: Operator | string): this;
-    /**
-     * Filters access by the supported region of the VPC endpoint service
-     *
-     * https://docs.aws.amazon.com/vpc/latest/userguide/vpc-endpoints-iam.html
-     *
-     * Applies to actions:
-     * - .toAcceptVpcEndpointConnections()
-     * - .toCreateTags()
-     * - .toDeleteVpcEndpointConnectionNotifications()
-     * - .toDeleteVpcEndpointServiceConfigurations()
-     * - .toDescribeVpcEndpointServicePermissions()
-     * - .toModifyVpcEndpointConnectionNotification()
-     * - .toModifyVpcEndpointServiceConfiguration()
-     * - .toModifyVpcEndpointServicePayerResponsibility()
-     * - .toModifyVpcEndpointServicePermissions()
-     * - .toRejectVpcEndpointConnections()
-     * - .toStartVpcEndpointServicePrivateDnsVerification()
-     *
-     * Applies to resource types:
-     * - vpc-endpoint-service
-     *
-     * @param value The value(s) to check
-     * @param operator Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_String). **Default:** `StringLike`
-     */
-    ifVpceSupportedRegion(value: string | string[], operator?: Operator | string): this;
     /**
      * Statement provider for service [ec2](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonec2.html).
      *