iamdata 0.1.202504261__py3-none-any.whl → 0.1.202511181__py3-none-any.whl

iamdata/data/actions/ec2.json

@@ -63,7 +63,21 @@
     "name": "AcceptReservedInstancesExchangeQuote",
     "description": "Grants permission to accept a Convertible Reserved Instance exchange quote",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "reserved-instances",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:InstanceType",
+          "ec2:ReservedInstancesOfferingType",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "ec2:Region"
     ],
@@ -153,8 +167,8 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -436,6 +450,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -537,6 +552,7 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID"
         ],
@@ -614,6 +630,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -746,6 +763,39 @@
     ],
     "dependentActions": []
   },
+  "associaterouteserver": {
+    "name": "AssociateRouteServer",
+    "description": "Grants permission to associate a route server with a VPC",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "route-server",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "vpc",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:Ipv4IpamPoolId",
+          "ec2:Ipv6IpamPoolId",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:Tenancy",
+          "ec2:VpcID"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "associateroutetable": {
     "name": "AssociateRouteTable",
     "description": "Grants permission to associate a subnet or gateway with a route table",
@@ -772,12 +822,22 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "ipv4pool-ec2",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "subnet",
         "required": false,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -845,6 +905,8 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
+          "ec2:Ipv6IpamPoolId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -877,6 +939,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -1055,6 +1118,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -1146,6 +1210,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -1227,6 +1292,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -1254,11 +1320,14 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
+          "ec2:ParentVolume",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -1519,7 +1588,7 @@
   "cancelimagelaunchpermission": {
     "name": "CancelImageLaunchPermission",
     "description": "Grants permission to remove your AWS account from the launch permissions for the specified AMI",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [
       {
         "name": "image",
@@ -1684,7 +1753,7 @@
   },
   "copysnapshot": {
     "name": "CopySnapshot",
-    "description": "Grants permission to copy a point-in-time snapshot of an EBS volume and store it in Amazon S3. Resource-level permissions specified for this action apply to the new snapshot only. They do not apply to the source snapshot",
+    "description": "Grants permission to copy a point-in-time snapshot of an EBS volume and store it in Amazon S3. Resource-level permissions specified for this action apply to both the snapshot copy and the source snapshot",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -1693,8 +1762,70 @@
         "conditionKeys": [
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
+          "ec2:Encrypted",
           "ec2:OutpostArn",
-          "ec2:SnapshotID"
+          "ec2:Owner",
+          "ec2:ParentSnapshot",
+          "ec2:ParentVolume",
+          "ec2:ProductCode",
+          "ec2:SnapshotID",
+          "ec2:SnapshotTime",
+          "ec2:VolumeSize"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "copyvolumes": {
+    "name": "CopyVolumes",
+    "description": "Grants permission to create a copy of an EBS volume. Resource-level permissions specified for this action apply to the source and copied volume. Condition keys for the copied volume correspond to parameters specified in the CopyVolumes API request",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "volume",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
+          "ec2:Encrypted",
+          "ec2:ManagedResourceOperator",
+          "ec2:ParentSnapshot",
+          "ec2:ParentVolume",
+          "ec2:VolumeInitializationRate",
+          "ec2:VolumeIops",
+          "ec2:VolumeSize",
+          "ec2:VolumeThroughput",
+          "ec2:VolumeType"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "createcapacitymanagerdataexport": {
+    "name": "CreateCapacityManagerDataExport",
+    "description": "Grants permission to create a new S3 Data Export for Capacity Manager",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacity-manager-data-export",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
         ],
         "dependentActions": [
           "ec2:CreateTags"
@@ -1717,7 +1848,20 @@
         "conditionKeys": [
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
-          "ec2:CapacityReservationFleet"
+          "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
+          "ec2:CapacityReservationFleet",
+          "ec2:EbsOptimized",
+          "ec2:EndDate",
+          "ec2:EndDateType",
+          "ec2:EphemeralStorage",
+          "ec2:InstanceCount",
+          "ec2:InstanceMatchCriteria",
+          "ec2:InstancePlatform",
+          "ec2:InstanceType",
+          "ec2:OutpostArn",
+          "ec2:PlacementGroup",
+          "ec2:Tenancy"
         ],
         "dependentActions": [
           "ec2:CreateTags"
@@ -1897,6 +2041,7 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID"
         ],
@@ -1963,7 +2108,7 @@
     "name": "CreateCoipPoolPermission",
     "isPermissionOnly": true,
     "description": "Grants permission to allow a service to access a customer-owned IP (CoIP) pool",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [
       {
         "name": "coip-pool",
@@ -2022,6 +2167,51 @@
     ],
     "dependentActions": []
   },
+  "createdelegatemacvolumeownershiptask": {
+    "name": "CreateDelegateMacVolumeOwnershipTask",
+    "description": "Grants permission to create a volume ownership delegation task for an Apple silicon Mac instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "instance",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
+          "ec2:EbsOptimized",
+          "ec2:InstanceAutoRecovery",
+          "ec2:InstanceBandwidthWeighting",
+          "ec2:InstanceMarketType",
+          "ec2:InstanceMetadataTags",
+          "ec2:InstanceProfile",
+          "ec2:InstanceType",
+          "ec2:MetadataHttpEndpoint",
+          "ec2:MetadataHttpPutResponseHopLimit",
+          "ec2:MetadataHttpTokens",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:RootDeviceType",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      },
+      {
+        "name": "mac-modification-task",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "createdhcpoptions": {
     "name": "CreateDhcpOptions",
     "description": "Grants permission to create a set of DHCP options for a VPC",
@@ -2101,6 +2291,7 @@
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceBandwidthWeighting",
@@ -2153,6 +2344,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -2166,6 +2358,7 @@
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:KmsKeyId",
           "ec2:ParentSnapshot",
@@ -2293,7 +2486,7 @@
   },
   "createimage": {
     "name": "CreateImage",
-    "description": "Grants permission to create an Amazon EBS-backed AMI from a stopped or running Amazon EBS-backed instance",
+    "description": "Grants permission to create an Amazon EBS-backed AMI from a stopped or running Amazon EBS-backed instance. This action can reboot instances as part of the image creation process, even without RebootInstances permissions. To prevent instance reboots during image creation, use the NoReboot parameter",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -2315,6 +2508,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -2324,6 +2518,7 @@
           "ec2:InstanceMetadataTags",
           "ec2:InstanceProfile",
           "ec2:InstanceType",
+          "ec2:ManagedResourceOperator",
           "ec2:MetadataHttpEndpoint",
           "ec2:MetadataHttpPutResponseHopLimit",
           "ec2:MetadataHttpTokens",
@@ -2356,6 +2551,42 @@
     ],
     "dependentActions": []
   },
+  "createimageusagereport": {
+    "name": "CreateImageUsageReport",
+    "description": "Grants permission to create an AMI usage report",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "image",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ImageID",
+          "ec2:ImageType",
+          "ec2:Owner",
+          "ec2:Public",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:RootDeviceType"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      },
+      {
+        "name": "image-usage-report",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "createinstanceconnectendpoint": {
     "name": "CreateInstanceConnectEndpoint",
     "description": "Grants permission to create an EC2 Instance Connect Endpoint that allows you to connect to an instance without a public IPv4 address",
@@ -2379,6 +2610,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -2446,6 +2678,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -2455,6 +2688,7 @@
           "ec2:InstanceMetadataTags",
           "ec2:InstanceProfile",
           "ec2:InstanceType",
+          "ec2:ManagedResourceOperator",
           "ec2:MetadataHttpEndpoint",
           "ec2:MetadataHttpPutResponseHopLimit",
           "ec2:MetadataHttpTokens",
@@ -2689,6 +2923,7 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:ManagedResourceOperator",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": [
@@ -2787,7 +3022,7 @@
     "name": "CreateLocalGatewayRouteTablePermission",
     "isPermissionOnly": true,
     "description": "Grants permission to allow a service to access a local gateway route table",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [
       {
         "name": "local-gateway-route-table",
@@ -2886,6 +3121,122 @@
     ],
     "dependentActions": []
   },
+  "createlocalgatewayvirtualinterface": {
+    "name": "CreateLocalGatewayVirtualInterface",
+    "description": "Grants permission to create a local gateway virtual interface",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "local-gateway-virtual-interface",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      },
+      {
+        "name": "local-gateway-virtual-interface-group",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "outpost-lag",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "createlocalgatewayvirtualinterfacegroup": {
+    "name": "CreateLocalGatewayVirtualInterfaceGroup",
+    "description": "Grants permission to create a local gateway virtual interface group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "local-gateway",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      },
+      {
+        "name": "local-gateway-virtual-interface-group",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "createmacsystemintegrityprotectionmodificationtask": {
+    "name": "CreateMacSystemIntegrityProtectionModificationTask",
+    "description": "Grants permission to create a System Integrity Protection (SIP) modification task for an Amazon EC2 Mac instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "instance",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
+          "ec2:EbsOptimized",
+          "ec2:InstanceAutoRecovery",
+          "ec2:InstanceBandwidthWeighting",
+          "ec2:InstanceMarketType",
+          "ec2:InstanceMetadataTags",
+          "ec2:InstanceProfile",
+          "ec2:InstanceType",
+          "ec2:MetadataHttpEndpoint",
+          "ec2:MetadataHttpPutResponseHopLimit",
+          "ec2:MetadataHttpTokens",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:RootDeviceType",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      },
+      {
+        "name": "mac-modification-task",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "createmanagedprefixlist": {
     "name": "CreateManagedPrefixList",
     "description": "Grants permission to create a managed prefix list",
@@ -2930,6 +3281,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -3054,6 +3406,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -3175,6 +3528,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -3211,6 +3565,7 @@
           "ec2:AuthorizedService",
           "ec2:AuthorizedUser",
           "ec2:AvailabilityZone",
+          "ec2:ManagedResourceOperator",
           "ec2:NetworkInterfaceID",
           "ec2:Permission",
           "ec2:ResourceTag/${TagKey}",
@@ -3282,6 +3637,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -3291,6 +3647,7 @@
           "ec2:InstanceMetadataTags",
           "ec2:InstanceProfile",
           "ec2:InstanceType",
+          "ec2:ManagedResourceOperator",
           "ec2:MetadataHttpEndpoint",
           "ec2:MetadataHttpPutResponseHopLimit",
           "ec2:MetadataHttpTokens",
@@ -3319,7 +3676,8 @@
         "conditionKeys": [
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
-          "ec2:VolumeID"
+          "ec2:VolumeID",
+          "ec2:VolumeInitializationRate"
         ],
         "dependentActions": []
       },
@@ -3413,6 +3771,113 @@
     ],
     "dependentActions": []
   },
+  "createrouteserver": {
+    "name": "CreateRouteServer",
+    "description": "Grants permission to create a route server",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "route-server",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags",
+          "sns:CreateTopic"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "createrouteserverendpoint": {
+    "name": "CreateRouteServerEndpoint",
+    "description": "Grants permission to create a route server endpoint",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "route-server",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": [
+          "ec2:AuthorizeSecurityGroupIngress",
+          "ec2:CreateNetworkInterface",
+          "ec2:CreateNetworkInterfacePermission",
+          "ec2:CreateSecurityGroup",
+          "ec2:CreateTags",
+          "ec2:DescribeSecurityGroups"
+        ]
+      },
+      {
+        "name": "route-server-endpoint",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:AvailabilityZone"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "subnet",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SubnetID",
+          "ec2:Vpc"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "createrouteserverpeer": {
+    "name": "CreateRouteServerPeer",
+    "description": "Grants permission to create a route server peer",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "route-server-endpoint",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": [
+          "ec2:AuthorizeSecurityGroupIngress",
+          "ec2:CreateTags"
+        ]
+      },
+      {
+        "name": "route-server-peer",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:AvailabilityZone"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "createroutetable": {
     "name": "CreateRouteTable",
     "description": "Grants permission to create a route table for a VPC",
@@ -3509,9 +3974,13 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
+          "ec2:ManagedResourceOperator",
+          "ec2:ParentVolume",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -3575,6 +4044,7 @@
           "ec2:Encrypted",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -3634,6 +4104,8 @@
         "conditionKeys": [
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
+          "ec2:Ipv4IpamPoolId",
+          "ec2:Ipv6IpamPoolId",
           "ec2:SubnetID"
         ],
         "dependentActions": [
@@ -3670,7 +4142,23 @@
     "name": "CreateSubnetCidrReservation",
     "description": "Grants permission to create a subnet CIDR reservation",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "subnet",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SubnetID",
+          "ec2:Vpc"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      }
+    ],
     "conditionKeys": [
       "ec2:Region"
     ],
@@ -3681,6 +4169,28 @@
     "description": "Grants permission to add or overwrite one or more tags for Amazon EC2 resources",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "capacity-block",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "capacity-manager-data-export",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "capacity-reservation",
         "required": false,
@@ -3903,6 +4413,17 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "image-usage-report",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "import-image-task",
         "required": false,
@@ -3933,6 +4454,7 @@
           "aws:ResourceTag/${TagKey}",
           "aws:TagKeys",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -3942,6 +4464,7 @@
           "ec2:InstanceMetadataTags",
           "ec2:InstanceProfile",
           "ec2:InstanceType",
+          "ec2:ManagedResourceOperator",
           "ec2:MetadataHttpEndpoint",
           "ec2:MetadataHttpPutResponseHopLimit",
           "ec2:MetadataHttpTokens",
@@ -4096,6 +4619,7 @@
           "aws:RequestTag/${TagKey}",
           "aws:ResourceTag/${TagKey}",
           "aws:TagKeys",
+          "ec2:ManagedResourceOperator",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -4243,6 +4767,7 @@
           "aws:TagKeys",
           "ec2:AuthorizedUser",
           "ec2:AvailabilityZone",
+          "ec2:ManagedResourceOperator",
           "ec2:NetworkInterfaceID",
           "ec2:Permission",
           "ec2:ResourceTag/${TagKey}",
@@ -4301,6 +4826,39 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "route-server",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "route-server-endpoint",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "route-server-peer",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "route-table",
         "required": false,
@@ -4385,6 +4943,7 @@
           "aws:ResourceTag/${TagKey}",
           "aws:TagKeys",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -4604,10 +5163,14 @@
           "aws:ResourceTag/${TagKey}",
           "aws:TagKeys",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
+          "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
+          "ec2:ParentVolume",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -4669,9 +5232,9 @@
           "aws:ResourceTag/${TagKey}",
           "aws:TagKeys",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceServiceRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceServiceRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       },
@@ -4822,6 +5385,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:ManagedResourceOperator",
           "ec2:NetworkInterfaceID",
           "ec2:ResourceTag/${TagKey}",
           "ec2:Subnet",
@@ -5345,6 +5909,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -5444,10 +6009,12 @@
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:KmsKeyId",
           "ec2:ParentSnapshot",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -5542,6 +6109,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -5582,6 +6150,9 @@
         ],
         "dependentActions": [
           "ec2:CreateTags",
+          "ec2:DescribeSecurityGroups",
+          "ec2:DescribeSubnets",
+          "ec2:DescribeVpcs",
           "route53:AssociateVPCWithHostedZone"
         ]
       },
@@ -5591,8 +6162,10 @@
         "conditionKeys": [
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
+          "ec2:VpceMultiRegion",
           "ec2:VpceServiceName",
-          "ec2:VpceServiceOwner"
+          "ec2:VpceServiceOwner",
+          "ec2:VpceServiceRegion"
         ],
         "dependentActions": []
       },
@@ -5652,8 +6225,8 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceServiceRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceServiceRegion"
         ],
         "dependentActions": []
       }
@@ -5674,9 +6247,9 @@
         "conditionKeys": [
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
+          "ec2:VpceMultiRegion",
           "ec2:VpceServicePrivateDnsName",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceServiceRegion"
+          "ec2:VpceServiceRegion"
         ],
         "dependentActions": [
           "ec2:CreateTags"
@@ -5844,6 +6417,26 @@
     ],
     "dependentActions": []
   },
+  "deletecapacitymanagerdataexport": {
+    "name": "DeleteCapacityManagerDataExport",
+    "description": "Grants permission to delete an existing Capacity Manager data export configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacity-manager-data-export",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "deletecarriergateway": {
     "name": "DeleteCarrierGateway",
     "description": "Grants permission to delete a carrier gateway",
@@ -5916,6 +6509,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -5972,7 +6566,7 @@
     "name": "DeleteCoipPoolPermission",
     "isPermissionOnly": true,
     "description": "Grants permission to deny a service from accessing a customer-owned IP (CoIP) pool",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [
       {
         "name": "coip-pool",
@@ -6112,6 +6706,26 @@
     ],
     "dependentActions": []
   },
+  "deleteimageusagereport": {
+    "name": "DeleteImageUsageReport",
+    "description": "Grants permission to delete an AMI usage report",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "image-usage-report",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "deleteinstanceconnectendpoint": {
     "name": "DeleteInstanceConnectEndpoint",
     "description": "Grants permission to delete an EC2 Instance Connect Endpoint",
@@ -6391,7 +7005,7 @@
     "name": "DeleteLocalGatewayRouteTablePermission",
     "isPermissionOnly": true,
     "description": "Grants permission to deny a service from accessing a local gateway route table",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [
       {
         "name": "local-gateway-route-table",
@@ -6448,6 +7062,46 @@
     ],
     "dependentActions": []
   },
+  "deletelocalgatewayvirtualinterface": {
+    "name": "DeleteLocalGatewayVirtualInterface",
+    "description": "Grants permission to delete a local gateway virtual interface",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "local-gateway-virtual-interface",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "deletelocalgatewayvirtualinterfacegroup": {
+    "name": "DeleteLocalGatewayVirtualInterfaceGroup",
+    "description": "Grants permission to delete a local gateway virtual interface group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "local-gateway-virtual-interface-group",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "deletemanagedprefixlist": {
     "name": "DeleteManagedPrefixList",
     "description": "Grants permission to delete a managed prefix list",
@@ -6708,7 +7362,20 @@
     "name": "DeleteQueuedReservedInstances",
     "description": "Grants permission to delete the queued purchases for the specified Reserved Instances",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "reserved-instances",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:InstanceType",
+          "ec2:ReservedInstancesOfferingType",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "ec2:Region"
     ],
@@ -6718,7 +7385,7 @@
     "name": "DeleteResourcePolicy",
     "isPermissionOnly": true,
     "description": "Grants permission to remove an IAM policy that enables cross-account sharing from a resource",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [
       {
         "name": "ipam-pool",
@@ -6777,6 +7444,76 @@
     ],
     "dependentActions": []
   },
+  "deleterouteserver": {
+    "name": "DeleteRouteServer",
+    "description": "Grants permission to delete a route server",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "route-server",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": [
+          "sns:DeleteTopic"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "deleterouteserverendpoint": {
+    "name": "DeleteRouteServerEndpoint",
+    "description": "Grants permission to delete a route server endpoint",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "route-server-endpoint",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": [
+          "ec2:DeleteNetworkInterface",
+          "ec2:DeleteSecurityGroup",
+          "ec2:RevokeSecurityGroupIngress"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "deleterouteserverpeer": {
+    "name": "DeleteRouteServerPeer",
+    "description": "Grants permission to delete a route server peer",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "route-server-peer",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": [
+          "ec2:RevokeSecurityGroupIngress"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "deleteroutetable": {
     "name": "DeleteRouteTable",
     "description": "Grants permission to delete a route table",
@@ -6869,6 +7606,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -6896,6 +7634,28 @@
     "description": "Grants permission to delete one or more tags from Amazon EC2 resources",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "capacity-block",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "capacity-manager-data-export",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "capacity-reservation",
         "required": false,
@@ -7094,6 +7854,17 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "image-usage-report",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "import-image-task",
         "required": false,
@@ -7457,6 +8228,39 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "route-server",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "route-server-endpoint",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "route-server-peer",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "route-table",
         "required": false,
@@ -8280,11 +9084,14 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
+          "ec2:ParentVolume",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -8360,8 +9167,8 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -8382,8 +9189,8 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -8404,7 +9211,9 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:VpceServiceName"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceServiceName",
+          "ec2:VpceServiceRegion"
         ],
         "dependentActions": []
       }
@@ -8742,56 +9551,31 @@
     ],
     "dependentActions": []
   },
-  "describebundletasks": {
-    "name": "DescribeBundleTasks",
-    "description": "Grants permission to describe one or more bundling tasks",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "ec2:Region"
-    ],
-    "dependentActions": []
-  },
-  "describebyoipcidrs": {
-    "name": "DescribeByoipCidrs",
-    "description": "Grants permission to describe the IP address ranges that were provisioned through bring your own IP addresses (BYOIP)",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "ec2:Region"
-    ],
-    "dependentActions": []
-  },
-  "describecapacityblockextensionhistory": {
-    "name": "DescribeCapacityBlockExtensionHistory",
-    "description": "Grants permission to describe Capacity Block extensions history",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "capacity-reservation",
-        "required": false,
-        "conditionKeys": [
-          "aws:ResourceTag/${TagKey}",
-          "ec2:AvailabilityZone",
-          "ec2:CapacityReservationFleet",
-          "ec2:CreateDate",
-          "ec2:DestinationCapacityReservationId",
-          "ec2:EbsOptimized",
-          "ec2:EndDate",
-          "ec2:EndDateType",
-          "ec2:InstanceCount",
-          "ec2:InstanceMatchCriteria",
-          "ec2:InstancePlatform",
-          "ec2:InstanceType",
-          "ec2:OutpostArn",
-          "ec2:PlacementGroup",
-          "ec2:ResourceTag/${TagKey}",
-          "ec2:SourceCapacityReservationId",
-          "ec2:Tenancy"
-        ],
-        "dependentActions": []
-      }
+  "describebundletasks": {
+    "name": "DescribeBundleTasks",
+    "description": "Grants permission to describe one or more bundling tasks",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "describebyoipcidrs": {
+    "name": "DescribeByoipCidrs",
+    "description": "Grants permission to describe the IP address ranges that were provisioned through bring your own IP addresses (BYOIP)",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
     ],
+    "dependentActions": []
+  },
+  "describecapacityblockextensionhistory": {
+    "name": "DescribeCapacityBlockExtensionHistory",
+    "description": "Grants permission to describe Capacity Block extensions history",
+    "accessLevel": "List",
+    "resourceTypes": [],
     "conditionKeys": [
       "ec2:Region"
     ],
@@ -8842,6 +9626,36 @@
     ],
     "dependentActions": []
   },
+  "describecapacityblockstatus": {
+    "name": "DescribeCapacityBlockStatus",
+    "description": "Grants permission to describe the availability of capacity for the specified Capacity blocks, or all of your Capacity Blocks",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "describecapacityblocks": {
+    "name": "DescribeCapacityBlocks",
+    "description": "Grants permission to describe details about Capacity Blocks in the AWS Region that you're currently using",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "describecapacitymanagerdataexports": {
+    "name": "DescribeCapacityManagerDataExports",
+    "description": "Grants permission to describe one or more Capacity Manager data export configurations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describecapacityreservationbillingrequests": {
     "name": "DescribeCapacityReservationBillingRequests",
     "description": "Grants permission to describe one or more requests to assign the billing of the unused capacity of a Capacity Reservation",
@@ -8942,23 +9756,7 @@
     "name": "DescribeClientVpnEndpoints",
     "description": "Grants permission to describe one or more Client VPN endpoints",
     "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "client-vpn-endpoint",
-        "required": false,
-        "conditionKeys": [
-          "aws:ResourceTag/${TagKey}",
-          "ec2:ClientRootCertificateChainArn",
-          "ec2:CloudwatchLogGroupArn",
-          "ec2:CloudwatchLogStreamArn",
-          "ec2:DirectoryArn",
-          "ec2:ResourceTag/${TagKey}",
-          "ec2:SamlProviderArn",
-          "ec2:ServerCertificateArn"
-        ],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [
       "ec2:Region"
     ],
@@ -9302,6 +10100,36 @@
     ],
     "dependentActions": []
   },
+  "describeimagereferences": {
+    "name": "DescribeImageReferences",
+    "description": "Grants permission to describe your AWS resources that are referencing specified images",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "describeimageusagereportentries": {
+    "name": "DescribeImageUsageReportEntries",
+    "description": "Grants permission to describe the entries of an AMI usage report",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "describeimageusagereports": {
+    "name": "DescribeImageUsageReports",
+    "description": "Grants permission to describe the configuration and status of an AMI usage report",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describeimages": {
     "name": "DescribeImages",
     "description": "Grants permission to describe one or more images (AMIs, AKIs, and ARIs)",
@@ -9343,6 +10171,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -9683,6 +10512,16 @@
     ],
     "dependentActions": []
   },
+  "describemacmodificationtasks": {
+    "name": "DescribeMacModificationTasks",
+    "description": "Grants permission to describe a System Integrity Protection (SIP) modification task or volume ownership delegation task for an Amazon EC2 Mac instance",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describemanagedprefixlists": {
     "name": "DescribeManagedPrefixLists",
     "description": "Grants permission to describe your managed prefix lists and any AWS-managed prefix lists",
@@ -9793,6 +10632,16 @@
     ],
     "dependentActions": []
   },
+  "describeoutpostlags": {
+    "name": "DescribeOutpostLags",
+    "description": "Grants permission to describe Outpost LAGs",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describeplacementgroups": {
     "name": "DescribePlacementGroups",
     "description": "Grants permission to describe one or more placement groups",
@@ -9893,6 +10742,36 @@
     ],
     "dependentActions": []
   },
+  "describerouteserverendpoints": {
+    "name": "DescribeRouteServerEndpoints",
+    "description": "Grants permission to describe one or more route server endpoints",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "describerouteserverpeers": {
+    "name": "DescribeRouteServerPeers",
+    "description": "Grants permission to describe one or more route server peers",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "describerouteservers": {
+    "name": "DescribeRouteServers",
+    "description": "Grants permission to describe one or more route servers",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describeroutetables": {
     "name": "DescribeRouteTables",
     "description": "Grants permission to describe one or more route tables",
@@ -9975,6 +10854,16 @@
     ],
     "dependentActions": []
   },
+  "describeservicelinkvirtualinterfaces": {
+    "name": "DescribeServiceLinkVirtualInterfaces",
+    "description": "Grants permission to describe service link virtual interfaces",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describesnapshotattribute": {
     "name": "DescribeSnapshotAttribute",
     "description": "Grants permission to describe an attribute of a snapshot",
@@ -10365,11 +11254,14 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
+          "ec2:ParentVolume",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -10479,19 +11371,7 @@
     "name": "DescribeVpcEndpointAssociations",
     "description": "Grants permission to describe the VPC endpoint associations",
     "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "vpc-endpoint",
-        "required": false,
-        "conditionKeys": [
-          "aws:ResourceTag/${TagKey}",
-          "ec2:ResourceTag/${TagKey}",
-          "ec2:VpceServiceName",
-          "ec2:VpceServiceOwner"
-        ],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [
       "ec2:Region"
     ],
@@ -10538,8 +11418,8 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -10698,6 +11578,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -10779,11 +11660,14 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
+          "ec2:ParentVolume",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -10797,6 +11681,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -10898,6 +11783,16 @@
     ],
     "dependentActions": []
   },
+  "disablecapacitymanager": {
+    "name": "DisableCapacityManager",
+    "description": "Grants permission to disable EC2 Capacity Manager for your account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "disableebsencryptionbydefault": {
     "name": "DisableEbsEncryptionByDefault",
     "description": "Grants permission to disable EBS encryption by default for your account",
@@ -10988,7 +11883,7 @@
   "disableimageblockpublicaccess": {
     "name": "DisableImageBlockPublicAccess",
     "description": "Grants permission to disable block public access for AMIs at the account level in the specified AWS Region",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [],
     "conditionKeys": [
       "ec2:Region"
@@ -11057,6 +11952,37 @@
       "organizations:DeregisterDelegatedAdministrator"
     ]
   },
+  "disablerouteserverpropagation": {
+    "name": "DisableRouteServerPropagation",
+    "description": "Grants permission to disable route server propagation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "route-server",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "route-table",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:RouteTableID",
+          "ec2:Vpc"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "disableserialconsoleaccess": {
     "name": "DisableSerialConsoleAccess",
     "description": "Grants permission to disable access to the EC2 serial console of all instances for your account",
@@ -11070,7 +11996,7 @@
   "disablesnapshotblockpublicaccess": {
     "name": "DisableSnapshotBlockPublicAccess",
     "description": "Grants permission to disable the block public access for snapshots setting for a Region",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [],
     "conditionKeys": [
       "ec2:Region"
@@ -11325,6 +12251,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -11430,7 +12357,7 @@
       },
       {
         "name": "network-interface",
-        "required": true,
+        "required": false,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AuthorizedUser",
@@ -11450,6 +12377,39 @@
     ],
     "dependentActions": []
   },
+  "disassociaterouteserver": {
+    "name": "DisassociateRouteServer",
+    "description": "Grants permission to disassociate a route server from a VPC",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "route-server",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "vpc",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:Ipv4IpamPoolId",
+          "ec2:Ipv6IpamPoolId",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:Tenancy",
+          "ec2:VpcID"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "disassociateroutetable": {
     "name": "DisassociateRouteTable",
     "description": "Grants permission to disassociate a subnet from a route table",
@@ -11500,6 +12460,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -11567,6 +12528,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -11590,6 +12552,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -11780,6 +12743,16 @@
     ],
     "dependentActions": []
   },
+  "enablecapacitymanager": {
+    "name": "EnableCapacityManager",
+    "description": "Grants permission to enable EC2 Capacity Manager for your account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "enableebsencryptionbydefault": {
     "name": "EnableEbsEncryptionByDefault",
     "description": "Grants permission to enable EBS encryption by default for your account",
@@ -11898,7 +12871,7 @@
   "enableimageblockpublicaccess": {
     "name": "EnableImageBlockPublicAccess",
     "description": "Grants permission to enable block public access for AMIs at the account level in the specified AWS Region",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [],
     "conditionKeys": [
       "ec2:Region"
@@ -11963,24 +12936,55 @@
     "conditionKeys": [
       "ec2:Region"
     ],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole",
-      "organizations:EnableAWSServiceAccess",
-      "organizations:RegisterDelegatedAdministrator"
-    ]
-  },
-  "enablereachabilityanalyzerorganizationsharing": {
-    "name": "EnableReachabilityAnalyzerOrganizationSharing",
-    "description": "Grants permission to enable organization sharing of reachability analyzer",
-    "accessLevel": "Write",
-    "resourceTypes": [],
+    "dependentActions": [
+      "iam:CreateServiceLinkedRole",
+      "organizations:EnableAWSServiceAccess",
+      "organizations:RegisterDelegatedAdministrator"
+    ]
+  },
+  "enablereachabilityanalyzerorganizationsharing": {
+    "name": "EnableReachabilityAnalyzerOrganizationSharing",
+    "description": "Grants permission to enable organization sharing of reachability analyzer",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": [
+      "iam:CreateServiceLinkedRole",
+      "organizations:EnableAWSServiceAccess"
+    ]
+  },
+  "enablerouteserverpropagation": {
+    "name": "EnableRouteServerPropagation",
+    "description": "Grants permission to enable route server propagation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "route-server",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "route-table",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:RouteTableID",
+          "ec2:Vpc"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "ec2:Region"
     ],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole",
-      "organizations:EnableAWSServiceAccess"
-    ]
+    "dependentActions": []
   },
   "enableserialconsoleaccess": {
     "name": "EnableSerialConsoleAccess",
@@ -11995,7 +12999,7 @@
   "enablesnapshotblockpublicaccess": {
     "name": "EnableSnapshotBlockPublicAccess",
     "description": "Grants permission to enable or modify the block public access for snapshots setting for a Region",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [],
     "conditionKeys": [
       "ec2:Region"
@@ -12085,6 +13089,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
@@ -12265,6 +13270,25 @@
     ],
     "dependentActions": []
   },
+  "getactivevpntunnelstatus": {
+    "name": "GetActiveVpnTunnelStatus",
+    "description": "Grants permission to retrieve the current security parameters for an active VPN tunnel",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "vpn-connection",
+        "required": true,
+        "conditionKeys": [
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "getallowedimagessettings": {
     "name": "GetAllowedImagesSettings",
     "description": "Grants permission to get the allowed settings for images",
@@ -12296,7 +13320,17 @@
     "name": "GetAssociatedIpv6PoolCidrs",
     "description": "Grants permission to get information about the IPv6 CIDR block associations for a specified IPv6 address pool",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "ipv6pool-ec2",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "ec2:Region"
     ],
@@ -12312,6 +13346,36 @@
     ],
     "dependentActions": []
   },
+  "getcapacitymanagerattributes": {
+    "name": "GetCapacityManagerAttributes",
+    "description": "Grants permission to retrieve the current configuration and status of EC2 Capacity Manager",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "getcapacitymanagermetricdata": {
+    "name": "GetCapacityManagerMetricData",
+    "description": "Grants permission to retrieve capacity usage metrics for your EC2 resources",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "getcapacitymanagermetricdimensions": {
+    "name": "GetCapacityManagerMetricDimensions",
+    "description": "Grants permission to retrieve the available dimension values for capacity metrics within a specified time range",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "getcapacityreservationusage": {
     "name": "GetCapacityReservationUsage",
     "description": "Grants permission to get usage information about a Capacity Reservation",
@@ -12363,6 +13427,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -12401,6 +13466,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -12560,6 +13626,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -12606,6 +13673,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -12794,6 +13862,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -12912,6 +13981,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -12943,7 +14013,21 @@
     "name": "GetReservedInstancesExchangeQuote",
     "description": "Grants permission to return a quote and exchange information for exchanging one or more Convertible Reserved Instances for a new Convertible Reserved Instance",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "reserved-instances",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:InstanceType",
+          "ec2:ReservedInstancesOfferingType",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "ec2:Region"
     ],
@@ -12990,6 +14074,77 @@
     ],
     "dependentActions": []
   },
+  "getrouteserverassociations": {
+    "name": "GetRouteServerAssociations",
+    "description": "Grants permission to get associations for a route server",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "route-server",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "getrouteserverpropagations": {
+    "name": "GetRouteServerPropagations",
+    "description": "Grants permission to get propagations for a route server",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "route-server",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "route-table",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:RouteTableID",
+          "ec2:Vpc"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "getrouteserverroutingdatabase": {
+    "name": "GetRouteServerRoutingDatabase",
+    "description": "Grants permission to get the routing database for a route server",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "route-server",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "getsecuritygroupsforvpc": {
     "name": "GetSecurityGroupsForVpc",
     "description": "Grants permission to retrieve a list of security groups for a specified VPC",
@@ -13524,6 +14679,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
@@ -13800,6 +14956,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -13918,6 +15075,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -13956,11 +15114,13 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -13987,6 +15147,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14022,6 +15183,39 @@
     ],
     "dependentActions": []
   },
+  "modifyinstanceconnectendpoint": {
+    "name": "ModifyInstanceConnectEndpoint",
+    "description": "Grants permission to modify an existing EC2 Instance Connect Endpoint",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "instance-connect-endpoint",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "security-group",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SecurityGroupID",
+          "ec2:Vpc"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "modifyinstancecpuoptions": {
     "name": "ModifyInstanceCpuOptions",
     "description": "Grants permission to modify the CPU options on an instance",
@@ -14035,6 +15229,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14075,6 +15270,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14114,6 +15310,7 @@
           "aws:ResourceTag/${TagKey}",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14151,6 +15348,8 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -14174,6 +15373,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14225,6 +15425,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14265,6 +15466,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14305,6 +15507,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14428,6 +15631,8 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -14493,6 +15698,7 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -14586,6 +15792,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14617,6 +15824,18 @@
           "ec2:Vpc"
         ],
         "dependentActions": []
+      },
+      {
+        "name": "subnet",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:Vpc"
+        ],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -14637,6 +15856,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14665,6 +15885,31 @@
     ],
     "dependentActions": []
   },
+  "modifypublicipdnsnameoptions": {
+    "name": "ModifyPublicIpDnsNameOptions",
+    "description": "Grants permission to modify public hostname options for a network interface",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "network-interface",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
+          "ec2:AvailabilityZone",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:Subnet",
+          "ec2:Vpc"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "modifyreservedinstances": {
     "name": "ModifyReservedInstances",
     "description": "Grants permission to modify attributes of one or more Reserved Instances",
@@ -14691,6 +15936,26 @@
     ],
     "dependentActions": []
   },
+  "modifyrouteserver": {
+    "name": "ModifyRouteServer",
+    "description": "Grants permission to modify a route server",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "route-server",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "modifysecuritygrouprules": {
     "name": "ModifySecurityGroupRules",
     "description": "Grants permission to modify the rules of a security group",
@@ -14823,6 +16088,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -14848,6 +16114,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -15055,6 +16322,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -15077,6 +16345,7 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -15087,6 +16356,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -15118,6 +16388,7 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -15138,6 +16409,8 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -15167,6 +16440,7 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -15187,6 +16461,8 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -15207,6 +16483,7 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -15227,6 +16504,8 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -15250,11 +16529,14 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
+          "ec2:ParentVolume",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -15281,11 +16563,14 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
+          "ec2:ParentVolume",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -15333,6 +16618,8 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -15365,7 +16652,9 @@
           "aws:ResourceTag/${TagKey}",
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
-          "ec2:ResourceTag/${TagKey}"
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:VpceMultiRegion",
+          "ec2:VpceServiceRegion"
         ],
         "dependentActions": []
       },
@@ -15396,6 +16685,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -15428,8 +16718,8 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -15452,9 +16742,9 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}",
+          "ec2:VpceMultiRegion",
           "ec2:VpceServicePrivateDnsName",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -15477,8 +16767,8 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -15501,8 +16791,8 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -15696,6 +16986,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -15800,6 +17091,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
@@ -16020,7 +17312,7 @@
     "name": "PutResourcePolicy",
     "isPermissionOnly": true,
     "description": "Grants permission to attach an IAM policy that enables cross-account sharing to a resource",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [
       {
         "name": "ipam-pool",
@@ -16068,6 +17360,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -16334,8 +17627,8 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -16442,6 +17735,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -16504,6 +17798,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -16610,6 +17905,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -16691,6 +17987,7 @@
         "name": "instance",
         "required": true,
         "conditionKeys": [
+          "ec2:AvailabilityZoneId",
           "ec2:InstanceBandwidthWeighting",
           "ec2:InstanceID"
         ],
@@ -16797,6 +18094,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -16911,6 +18209,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -17020,6 +18319,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -17307,6 +18607,7 @@
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -17366,6 +18667,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:IsLaunchTemplateResource",
           "ec2:LaunchTemplate",
           "ec2:ResourceTag/${TagKey}",
@@ -17475,12 +18777,14 @@
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:IsLaunchTemplateResource",
           "ec2:LaunchTemplate",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -17789,6 +19093,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -17826,6 +19131,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -17872,6 +19178,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceBandwidthWeighting",
@@ -17975,8 +19282,8 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -17997,6 +19304,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -18060,6 +19368,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -18196,6 +19505,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -18223,6 +19533,16 @@
     ],
     "dependentActions": []
   },
+  "updatecapacitymanagerorganizationsaccess": {
+    "name": "UpdateCapacityManagerOrganizationsAccess",
+    "description": "Grants permission to update the Organizations access setting for EC2 Capacity Manager",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "updatesecuritygroupruledescriptionsegress": {
     "name": "UpdateSecurityGroupRuleDescriptionsEgress",
     "description": "Grants permission to update descriptions for one or more outbound rules in a VPC security group",