iamdata 0.1.202505111__py3-none-any.whl → 0.1.202511181__py3-none-any.whl

iamdata/data/actions/ec2.json

@@ -63,7 +63,21 @@
     "name": "AcceptReservedInstancesExchangeQuote",
     "description": "Grants permission to accept a Convertible Reserved Instance exchange quote",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "reserved-instances",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:InstanceType",
+          "ec2:ReservedInstancesOfferingType",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "ec2:Region"
     ],
@@ -153,8 +167,8 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -436,6 +450,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -537,6 +552,7 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID"
         ],
@@ -614,6 +630,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -805,12 +822,22 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "ipv4pool-ec2",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "subnet",
         "required": false,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -878,6 +905,8 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
+          "ec2:Ipv6IpamPoolId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -910,6 +939,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -1088,6 +1118,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -1179,6 +1210,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -1260,6 +1292,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -1287,11 +1320,14 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
+          "ec2:ParentVolume",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -1552,7 +1588,7 @@
   "cancelimagelaunchpermission": {
     "name": "CancelImageLaunchPermission",
     "description": "Grants permission to remove your AWS account from the launch permissions for the specified AMI",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [
       {
         "name": "image",
@@ -1717,7 +1753,7 @@
   },
   "copysnapshot": {
     "name": "CopySnapshot",
-    "description": "Grants permission to copy a point-in-time snapshot of an EBS volume and store it in Amazon S3. Resource-level permissions specified for this action apply to the new snapshot only. They do not apply to the source snapshot",
+    "description": "Grants permission to copy a point-in-time snapshot of an EBS volume and store it in Amazon S3. Resource-level permissions specified for this action apply to both the snapshot copy and the source snapshot",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -1726,8 +1762,70 @@
         "conditionKeys": [
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
+          "ec2:Encrypted",
           "ec2:OutpostArn",
-          "ec2:SnapshotID"
+          "ec2:Owner",
+          "ec2:ParentSnapshot",
+          "ec2:ParentVolume",
+          "ec2:ProductCode",
+          "ec2:SnapshotID",
+          "ec2:SnapshotTime",
+          "ec2:VolumeSize"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "copyvolumes": {
+    "name": "CopyVolumes",
+    "description": "Grants permission to create a copy of an EBS volume. Resource-level permissions specified for this action apply to the source and copied volume. Condition keys for the copied volume correspond to parameters specified in the CopyVolumes API request",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "volume",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
+          "ec2:Encrypted",
+          "ec2:ManagedResourceOperator",
+          "ec2:ParentSnapshot",
+          "ec2:ParentVolume",
+          "ec2:VolumeInitializationRate",
+          "ec2:VolumeIops",
+          "ec2:VolumeSize",
+          "ec2:VolumeThroughput",
+          "ec2:VolumeType"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "createcapacitymanagerdataexport": {
+    "name": "CreateCapacityManagerDataExport",
+    "description": "Grants permission to create a new S3 Data Export for Capacity Manager",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacity-manager-data-export",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
         ],
         "dependentActions": [
           "ec2:CreateTags"
@@ -1943,6 +2041,7 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID"
         ],
@@ -2009,7 +2108,7 @@
     "name": "CreateCoipPoolPermission",
     "isPermissionOnly": true,
     "description": "Grants permission to allow a service to access a customer-owned IP (CoIP) pool",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [
       {
         "name": "coip-pool",
@@ -2068,6 +2167,51 @@
     ],
     "dependentActions": []
   },
+  "createdelegatemacvolumeownershiptask": {
+    "name": "CreateDelegateMacVolumeOwnershipTask",
+    "description": "Grants permission to create a volume ownership delegation task for an Apple silicon Mac instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "instance",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
+          "ec2:EbsOptimized",
+          "ec2:InstanceAutoRecovery",
+          "ec2:InstanceBandwidthWeighting",
+          "ec2:InstanceMarketType",
+          "ec2:InstanceMetadataTags",
+          "ec2:InstanceProfile",
+          "ec2:InstanceType",
+          "ec2:MetadataHttpEndpoint",
+          "ec2:MetadataHttpPutResponseHopLimit",
+          "ec2:MetadataHttpTokens",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:RootDeviceType",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      },
+      {
+        "name": "mac-modification-task",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "createdhcpoptions": {
     "name": "CreateDhcpOptions",
     "description": "Grants permission to create a set of DHCP options for a VPC",
@@ -2147,6 +2291,7 @@
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceBandwidthWeighting",
@@ -2199,6 +2344,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -2212,6 +2358,7 @@
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:KmsKeyId",
           "ec2:ParentSnapshot",
@@ -2339,7 +2486,7 @@
   },
   "createimage": {
     "name": "CreateImage",
-    "description": "Grants permission to create an Amazon EBS-backed AMI from a stopped or running Amazon EBS-backed instance",
+    "description": "Grants permission to create an Amazon EBS-backed AMI from a stopped or running Amazon EBS-backed instance. This action can reboot instances as part of the image creation process, even without RebootInstances permissions. To prevent instance reboots during image creation, use the NoReboot parameter",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -2361,6 +2508,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -2370,6 +2518,7 @@
           "ec2:InstanceMetadataTags",
           "ec2:InstanceProfile",
           "ec2:InstanceType",
+          "ec2:ManagedResourceOperator",
           "ec2:MetadataHttpEndpoint",
           "ec2:MetadataHttpPutResponseHopLimit",
           "ec2:MetadataHttpTokens",
@@ -2402,6 +2551,42 @@
     ],
     "dependentActions": []
   },
+  "createimageusagereport": {
+    "name": "CreateImageUsageReport",
+    "description": "Grants permission to create an AMI usage report",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "image",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ImageID",
+          "ec2:ImageType",
+          "ec2:Owner",
+          "ec2:Public",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:RootDeviceType"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      },
+      {
+        "name": "image-usage-report",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "createinstanceconnectendpoint": {
     "name": "CreateInstanceConnectEndpoint",
     "description": "Grants permission to create an EC2 Instance Connect Endpoint that allows you to connect to an instance without a public IPv4 address",
@@ -2425,6 +2610,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -2492,6 +2678,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -2501,6 +2688,7 @@
           "ec2:InstanceMetadataTags",
           "ec2:InstanceProfile",
           "ec2:InstanceType",
+          "ec2:ManagedResourceOperator",
           "ec2:MetadataHttpEndpoint",
           "ec2:MetadataHttpPutResponseHopLimit",
           "ec2:MetadataHttpTokens",
@@ -2735,6 +2923,7 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:ManagedResourceOperator",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": [
@@ -2833,7 +3022,7 @@
     "name": "CreateLocalGatewayRouteTablePermission",
     "isPermissionOnly": true,
     "description": "Grants permission to allow a service to access a local gateway route table",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [
       {
         "name": "local-gateway-route-table",
@@ -2932,6 +3121,122 @@
     ],
     "dependentActions": []
   },
+  "createlocalgatewayvirtualinterface": {
+    "name": "CreateLocalGatewayVirtualInterface",
+    "description": "Grants permission to create a local gateway virtual interface",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "local-gateway-virtual-interface",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      },
+      {
+        "name": "local-gateway-virtual-interface-group",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "outpost-lag",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "createlocalgatewayvirtualinterfacegroup": {
+    "name": "CreateLocalGatewayVirtualInterfaceGroup",
+    "description": "Grants permission to create a local gateway virtual interface group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "local-gateway",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      },
+      {
+        "name": "local-gateway-virtual-interface-group",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "createmacsystemintegrityprotectionmodificationtask": {
+    "name": "CreateMacSystemIntegrityProtectionModificationTask",
+    "description": "Grants permission to create a System Integrity Protection (SIP) modification task for an Amazon EC2 Mac instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "instance",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
+          "ec2:EbsOptimized",
+          "ec2:InstanceAutoRecovery",
+          "ec2:InstanceBandwidthWeighting",
+          "ec2:InstanceMarketType",
+          "ec2:InstanceMetadataTags",
+          "ec2:InstanceProfile",
+          "ec2:InstanceType",
+          "ec2:MetadataHttpEndpoint",
+          "ec2:MetadataHttpPutResponseHopLimit",
+          "ec2:MetadataHttpTokens",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:RootDeviceType",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      },
+      {
+        "name": "mac-modification-task",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "createmanagedprefixlist": {
     "name": "CreateManagedPrefixList",
     "description": "Grants permission to create a managed prefix list",
@@ -2976,6 +3281,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -3100,6 +3406,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -3221,6 +3528,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -3257,6 +3565,7 @@
           "ec2:AuthorizedService",
           "ec2:AuthorizedUser",
           "ec2:AvailabilityZone",
+          "ec2:ManagedResourceOperator",
           "ec2:NetworkInterfaceID",
           "ec2:Permission",
           "ec2:ResourceTag/${TagKey}",
@@ -3328,6 +3637,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -3337,6 +3647,7 @@
           "ec2:InstanceMetadataTags",
           "ec2:InstanceProfile",
           "ec2:InstanceType",
+          "ec2:ManagedResourceOperator",
           "ec2:MetadataHttpEndpoint",
           "ec2:MetadataHttpPutResponseHopLimit",
           "ec2:MetadataHttpTokens",
@@ -3365,7 +3676,8 @@
         "conditionKeys": [
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
-          "ec2:VolumeID"
+          "ec2:VolumeID",
+          "ec2:VolumeInitializationRate"
         ],
         "dependentActions": []
       },
@@ -3519,6 +3831,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -3661,9 +3974,13 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
+          "ec2:ManagedResourceOperator",
+          "ec2:ParentVolume",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -3727,6 +4044,7 @@
           "ec2:Encrypted",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -3786,6 +4104,8 @@
         "conditionKeys": [
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
+          "ec2:Ipv4IpamPoolId",
+          "ec2:Ipv6IpamPoolId",
           "ec2:SubnetID"
         ],
         "dependentActions": [
@@ -3822,7 +4142,23 @@
     "name": "CreateSubnetCidrReservation",
     "description": "Grants permission to create a subnet CIDR reservation",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "subnet",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SubnetID",
+          "ec2:Vpc"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      }
+    ],
     "conditionKeys": [
       "ec2:Region"
     ],
@@ -3833,6 +4169,28 @@
     "description": "Grants permission to add or overwrite one or more tags for Amazon EC2 resources",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "capacity-block",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "capacity-manager-data-export",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "capacity-reservation",
         "required": false,
@@ -4055,6 +4413,17 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "image-usage-report",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "import-image-task",
         "required": false,
@@ -4085,6 +4454,7 @@
           "aws:ResourceTag/${TagKey}",
           "aws:TagKeys",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -4094,6 +4464,7 @@
           "ec2:InstanceMetadataTags",
           "ec2:InstanceProfile",
           "ec2:InstanceType",
+          "ec2:ManagedResourceOperator",
           "ec2:MetadataHttpEndpoint",
           "ec2:MetadataHttpPutResponseHopLimit",
           "ec2:MetadataHttpTokens",
@@ -4248,6 +4619,7 @@
           "aws:RequestTag/${TagKey}",
           "aws:ResourceTag/${TagKey}",
           "aws:TagKeys",
+          "ec2:ManagedResourceOperator",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -4395,6 +4767,7 @@
           "aws:TagKeys",
           "ec2:AuthorizedUser",
           "ec2:AvailabilityZone",
+          "ec2:ManagedResourceOperator",
           "ec2:NetworkInterfaceID",
           "ec2:Permission",
           "ec2:ResourceTag/${TagKey}",
@@ -4453,6 +4826,39 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "route-server",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "route-server-endpoint",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "route-server-peer",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "route-table",
         "required": false,
@@ -4537,6 +4943,7 @@
           "aws:ResourceTag/${TagKey}",
           "aws:TagKeys",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -4756,10 +5163,14 @@
           "aws:ResourceTag/${TagKey}",
           "aws:TagKeys",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
+          "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
+          "ec2:ParentVolume",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -4821,9 +5232,9 @@
           "aws:ResourceTag/${TagKey}",
           "aws:TagKeys",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceServiceRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceServiceRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       },
@@ -4974,6 +5385,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:ManagedResourceOperator",
           "ec2:NetworkInterfaceID",
           "ec2:ResourceTag/${TagKey}",
           "ec2:Subnet",
@@ -5497,6 +5909,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -5596,10 +6009,12 @@
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:KmsKeyId",
           "ec2:ParentSnapshot",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -5694,6 +6109,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -5734,6 +6150,9 @@
         ],
         "dependentActions": [
           "ec2:CreateTags",
+          "ec2:DescribeSecurityGroups",
+          "ec2:DescribeSubnets",
+          "ec2:DescribeVpcs",
           "route53:AssociateVPCWithHostedZone"
         ]
       },
@@ -5743,8 +6162,10 @@
         "conditionKeys": [
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
+          "ec2:VpceMultiRegion",
           "ec2:VpceServiceName",
-          "ec2:VpceServiceOwner"
+          "ec2:VpceServiceOwner",
+          "ec2:VpceServiceRegion"
         ],
         "dependentActions": []
       },
@@ -5804,8 +6225,8 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceServiceRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceServiceRegion"
         ],
         "dependentActions": []
       }
@@ -5826,9 +6247,9 @@
         "conditionKeys": [
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
+          "ec2:VpceMultiRegion",
           "ec2:VpceServicePrivateDnsName",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceServiceRegion"
+          "ec2:VpceServiceRegion"
         ],
         "dependentActions": [
           "ec2:CreateTags"
@@ -5996,6 +6417,26 @@
     ],
     "dependentActions": []
   },
+  "deletecapacitymanagerdataexport": {
+    "name": "DeleteCapacityManagerDataExport",
+    "description": "Grants permission to delete an existing Capacity Manager data export configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacity-manager-data-export",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "deletecarriergateway": {
     "name": "DeleteCarrierGateway",
     "description": "Grants permission to delete a carrier gateway",
@@ -6068,6 +6509,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -6124,7 +6566,7 @@
     "name": "DeleteCoipPoolPermission",
     "isPermissionOnly": true,
     "description": "Grants permission to deny a service from accessing a customer-owned IP (CoIP) pool",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [
       {
         "name": "coip-pool",
@@ -6264,6 +6706,26 @@
     ],
     "dependentActions": []
   },
+  "deleteimageusagereport": {
+    "name": "DeleteImageUsageReport",
+    "description": "Grants permission to delete an AMI usage report",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "image-usage-report",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "deleteinstanceconnectendpoint": {
     "name": "DeleteInstanceConnectEndpoint",
     "description": "Grants permission to delete an EC2 Instance Connect Endpoint",
@@ -6543,7 +7005,7 @@
     "name": "DeleteLocalGatewayRouteTablePermission",
     "isPermissionOnly": true,
     "description": "Grants permission to deny a service from accessing a local gateway route table",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [
       {
         "name": "local-gateway-route-table",
@@ -6600,6 +7062,46 @@
     ],
     "dependentActions": []
   },
+  "deletelocalgatewayvirtualinterface": {
+    "name": "DeleteLocalGatewayVirtualInterface",
+    "description": "Grants permission to delete a local gateway virtual interface",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "local-gateway-virtual-interface",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "deletelocalgatewayvirtualinterfacegroup": {
+    "name": "DeleteLocalGatewayVirtualInterfaceGroup",
+    "description": "Grants permission to delete a local gateway virtual interface group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "local-gateway-virtual-interface-group",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "deletemanagedprefixlist": {
     "name": "DeleteManagedPrefixList",
     "description": "Grants permission to delete a managed prefix list",
@@ -6860,7 +7362,20 @@
     "name": "DeleteQueuedReservedInstances",
     "description": "Grants permission to delete the queued purchases for the specified Reserved Instances",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "reserved-instances",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:InstanceType",
+          "ec2:ReservedInstancesOfferingType",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "ec2:Region"
     ],
@@ -6870,7 +7385,7 @@
     "name": "DeleteResourcePolicy",
     "isPermissionOnly": true,
     "description": "Grants permission to remove an IAM policy that enables cross-account sharing from a resource",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [
       {
         "name": "ipam-pool",
@@ -7091,6 +7606,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -7118,6 +7634,28 @@
     "description": "Grants permission to delete one or more tags from Amazon EC2 resources",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "capacity-block",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "capacity-manager-data-export",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "capacity-reservation",
         "required": false,
@@ -7316,6 +7854,17 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "image-usage-report",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "import-image-task",
         "required": false,
@@ -7679,6 +8228,39 @@
         ],
         "dependentActions": []
       },
+      {
+        "name": "route-server",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "route-server-endpoint",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "route-server-peer",
+        "required": false,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "route-table",
         "required": false,
@@ -8502,11 +9084,14 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
+          "ec2:ParentVolume",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -8582,8 +9167,8 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -8604,8 +9189,8 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -8626,7 +9211,9 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:VpceServiceName"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceServiceName",
+          "ec2:VpceServiceRegion"
         ],
         "dependentActions": []
       }
@@ -9039,6 +9626,36 @@
     ],
     "dependentActions": []
   },
+  "describecapacityblockstatus": {
+    "name": "DescribeCapacityBlockStatus",
+    "description": "Grants permission to describe the availability of capacity for the specified Capacity blocks, or all of your Capacity Blocks",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "describecapacityblocks": {
+    "name": "DescribeCapacityBlocks",
+    "description": "Grants permission to describe details about Capacity Blocks in the AWS Region that you're currently using",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "describecapacitymanagerdataexports": {
+    "name": "DescribeCapacityManagerDataExports",
+    "description": "Grants permission to describe one or more Capacity Manager data export configurations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describecapacityreservationbillingrequests": {
     "name": "DescribeCapacityReservationBillingRequests",
     "description": "Grants permission to describe one or more requests to assign the billing of the unused capacity of a Capacity Reservation",
@@ -9483,6 +10100,36 @@
     ],
     "dependentActions": []
   },
+  "describeimagereferences": {
+    "name": "DescribeImageReferences",
+    "description": "Grants permission to describe your AWS resources that are referencing specified images",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "describeimageusagereportentries": {
+    "name": "DescribeImageUsageReportEntries",
+    "description": "Grants permission to describe the entries of an AMI usage report",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "describeimageusagereports": {
+    "name": "DescribeImageUsageReports",
+    "description": "Grants permission to describe the configuration and status of an AMI usage report",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describeimages": {
     "name": "DescribeImages",
     "description": "Grants permission to describe one or more images (AMIs, AKIs, and ARIs)",
@@ -9524,6 +10171,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -9864,6 +10512,16 @@
     ],
     "dependentActions": []
   },
+  "describemacmodificationtasks": {
+    "name": "DescribeMacModificationTasks",
+    "description": "Grants permission to describe a System Integrity Protection (SIP) modification task or volume ownership delegation task for an Amazon EC2 Mac instance",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describemanagedprefixlists": {
     "name": "DescribeManagedPrefixLists",
     "description": "Grants permission to describe your managed prefix lists and any AWS-managed prefix lists",
@@ -9974,6 +10632,16 @@
     ],
     "dependentActions": []
   },
+  "describeoutpostlags": {
+    "name": "DescribeOutpostLags",
+    "description": "Grants permission to describe Outpost LAGs",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describeplacementgroups": {
     "name": "DescribePlacementGroups",
     "description": "Grants permission to describe one or more placement groups",
@@ -10186,6 +10854,16 @@
     ],
     "dependentActions": []
   },
+  "describeservicelinkvirtualinterfaces": {
+    "name": "DescribeServiceLinkVirtualInterfaces",
+    "description": "Grants permission to describe service link virtual interfaces",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describesnapshotattribute": {
     "name": "DescribeSnapshotAttribute",
     "description": "Grants permission to describe an attribute of a snapshot",
@@ -10576,11 +11254,14 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
+          "ec2:ParentVolume",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -10737,8 +11418,8 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -10897,6 +11578,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -10978,11 +11660,14 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
+          "ec2:ParentVolume",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -10996,6 +11681,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -11097,6 +11783,16 @@
     ],
     "dependentActions": []
   },
+  "disablecapacitymanager": {
+    "name": "DisableCapacityManager",
+    "description": "Grants permission to disable EC2 Capacity Manager for your account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "disableebsencryptionbydefault": {
     "name": "DisableEbsEncryptionByDefault",
     "description": "Grants permission to disable EBS encryption by default for your account",
@@ -11187,7 +11883,7 @@
   "disableimageblockpublicaccess": {
     "name": "DisableImageBlockPublicAccess",
     "description": "Grants permission to disable block public access for AMIs at the account level in the specified AWS Region",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [],
     "conditionKeys": [
       "ec2:Region"
@@ -11300,7 +11996,7 @@
   "disablesnapshotblockpublicaccess": {
     "name": "DisableSnapshotBlockPublicAccess",
     "description": "Grants permission to disable the block public access for snapshots setting for a Region",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [],
     "conditionKeys": [
       "ec2:Region"
@@ -11555,6 +12251,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -11660,7 +12357,7 @@
       },
       {
         "name": "network-interface",
-        "required": true,
+        "required": false,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AuthorizedUser",
@@ -11763,6 +12460,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -11830,6 +12528,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -11853,6 +12552,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -12043,6 +12743,16 @@
     ],
     "dependentActions": []
   },
+  "enablecapacitymanager": {
+    "name": "EnableCapacityManager",
+    "description": "Grants permission to enable EC2 Capacity Manager for your account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "enableebsencryptionbydefault": {
     "name": "EnableEbsEncryptionByDefault",
     "description": "Grants permission to enable EBS encryption by default for your account",
@@ -12161,7 +12871,7 @@
   "enableimageblockpublicaccess": {
     "name": "EnableImageBlockPublicAccess",
     "description": "Grants permission to enable block public access for AMIs at the account level in the specified AWS Region",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [],
     "conditionKeys": [
       "ec2:Region"
@@ -12289,7 +12999,7 @@
   "enablesnapshotblockpublicaccess": {
     "name": "EnableSnapshotBlockPublicAccess",
     "description": "Grants permission to enable or modify the block public access for snapshots setting for a Region",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [],
     "conditionKeys": [
       "ec2:Region"
@@ -12379,6 +13089,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
@@ -12559,6 +13270,25 @@
     ],
     "dependentActions": []
   },
+  "getactivevpntunnelstatus": {
+    "name": "GetActiveVpnTunnelStatus",
+    "description": "Grants permission to retrieve the current security parameters for an active VPN tunnel",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "vpn-connection",
+        "required": true,
+        "conditionKeys": [
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "getallowedimagessettings": {
     "name": "GetAllowedImagesSettings",
     "description": "Grants permission to get the allowed settings for images",
@@ -12590,7 +13320,17 @@
     "name": "GetAssociatedIpv6PoolCidrs",
     "description": "Grants permission to get information about the IPv6 CIDR block associations for a specified IPv6 address pool",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "ipv6pool-ec2",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "ec2:Region"
     ],
@@ -12606,6 +13346,36 @@
     ],
     "dependentActions": []
   },
+  "getcapacitymanagerattributes": {
+    "name": "GetCapacityManagerAttributes",
+    "description": "Grants permission to retrieve the current configuration and status of EC2 Capacity Manager",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "getcapacitymanagermetricdata": {
+    "name": "GetCapacityManagerMetricData",
+    "description": "Grants permission to retrieve capacity usage metrics for your EC2 resources",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
+  "getcapacitymanagermetricdimensions": {
+    "name": "GetCapacityManagerMetricDimensions",
+    "description": "Grants permission to retrieve the available dimension values for capacity metrics within a specified time range",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "getcapacityreservationusage": {
     "name": "GetCapacityReservationUsage",
     "description": "Grants permission to get usage information about a Capacity Reservation",
@@ -12657,6 +13427,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -12695,6 +13466,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -12854,6 +13626,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -12900,6 +13673,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -13088,6 +13862,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -13206,6 +13981,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -13237,7 +14013,21 @@
     "name": "GetReservedInstancesExchangeQuote",
     "description": "Grants permission to return a quote and exchange information for exchanging one or more Convertible Reserved Instances for a new Convertible Reserved Instance",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "reserved-instances",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:InstanceType",
+          "ec2:ReservedInstancesOfferingType",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "ec2:Region"
     ],
@@ -13889,6 +14679,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
@@ -14165,6 +14956,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -14283,6 +15075,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14321,11 +15114,13 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -14352,6 +15147,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14387,6 +15183,39 @@
     ],
     "dependentActions": []
   },
+  "modifyinstanceconnectendpoint": {
+    "name": "ModifyInstanceConnectEndpoint",
+    "description": "Grants permission to modify an existing EC2 Instance Connect Endpoint",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "instance-connect-endpoint",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "security-group",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SecurityGroupID",
+          "ec2:Vpc"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "modifyinstancecpuoptions": {
     "name": "ModifyInstanceCpuOptions",
     "description": "Grants permission to modify the CPU options on an instance",
@@ -14400,6 +15229,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14440,6 +15270,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14479,6 +15310,7 @@
           "aws:ResourceTag/${TagKey}",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14516,6 +15348,8 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -14539,6 +15373,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14590,6 +15425,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14630,6 +15466,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14670,6 +15507,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14793,6 +15631,8 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -14858,6 +15698,7 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -14951,6 +15792,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -14982,6 +15824,18 @@
           "ec2:Vpc"
         ],
         "dependentActions": []
+      },
+      {
+        "name": "subnet",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:Vpc"
+        ],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -15002,6 +15856,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -15030,6 +15885,31 @@
     ],
     "dependentActions": []
   },
+  "modifypublicipdnsnameoptions": {
+    "name": "ModifyPublicIpDnsNameOptions",
+    "description": "Grants permission to modify public hostname options for a network interface",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "network-interface",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
+          "ec2:AvailabilityZone",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:Subnet",
+          "ec2:Vpc"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "modifyreservedinstances": {
     "name": "ModifyReservedInstances",
     "description": "Grants permission to modify attributes of one or more Reserved Instances",
@@ -15208,6 +16088,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -15233,6 +16114,7 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -15440,6 +16322,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -15462,6 +16345,7 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -15472,6 +16356,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -15503,6 +16388,7 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -15523,6 +16409,8 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -15552,6 +16440,7 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -15572,6 +16461,8 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -15592,6 +16483,7 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -15612,6 +16504,8 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -15635,11 +16529,14 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
+          "ec2:ParentVolume",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -15666,11 +16563,14 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
+          "ec2:ParentVolume",
           "ec2:ResourceTag/${TagKey}",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -15718,6 +16618,8 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
@@ -15750,7 +16652,9 @@
           "aws:ResourceTag/${TagKey}",
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
-          "ec2:ResourceTag/${TagKey}"
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:VpceMultiRegion",
+          "ec2:VpceServiceRegion"
         ],
         "dependentActions": []
       },
@@ -15781,6 +16685,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -15813,8 +16718,8 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -15837,9 +16742,9 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}",
+          "ec2:VpceMultiRegion",
           "ec2:VpceServicePrivateDnsName",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -15862,8 +16767,8 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -15886,8 +16791,8 @@
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -16081,6 +16986,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -16185,6 +17091,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
@@ -16405,7 +17312,7 @@
     "name": "PutResourcePolicy",
     "isPermissionOnly": true,
     "description": "Grants permission to attach an IAM policy that enables cross-account sharing to a resource",
-    "accessLevel": "Write",
+    "accessLevel": "Permissions management",
     "resourceTypes": [
       {
         "name": "ipam-pool",
@@ -16453,6 +17360,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -16719,8 +17627,8 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -16827,6 +17735,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -16889,6 +17798,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -16995,6 +17905,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -17076,6 +17987,7 @@
         "name": "instance",
         "required": true,
         "conditionKeys": [
+          "ec2:AvailabilityZoneId",
           "ec2:InstanceBandwidthWeighting",
           "ec2:InstanceID"
         ],
@@ -17182,6 +18094,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -17296,6 +18209,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:ResourceTag/${TagKey}",
           "ec2:SubnetID",
           "ec2:Vpc"
@@ -17405,6 +18319,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -17692,6 +18607,7 @@
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -17751,6 +18667,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:IsLaunchTemplateResource",
           "ec2:LaunchTemplate",
           "ec2:ResourceTag/${TagKey}",
@@ -17860,12 +18777,14 @@
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:Encrypted",
           "ec2:IsLaunchTemplateResource",
           "ec2:LaunchTemplate",
           "ec2:ManagedResourceOperator",
           "ec2:ParentSnapshot",
           "ec2:VolumeID",
+          "ec2:VolumeInitializationRate",
           "ec2:VolumeIops",
           "ec2:VolumeSize",
           "ec2:VolumeThroughput",
@@ -18174,6 +19093,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -18211,6 +19131,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -18257,6 +19178,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceBandwidthWeighting",
@@ -18360,8 +19282,8 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:ResourceTag/${TagKey}",
-          "ec2:vpceMultiRegion",
-          "ec2:vpceSupportedRegion"
+          "ec2:VpceMultiRegion",
+          "ec2:VpceSupportedRegion"
         ],
         "dependentActions": []
       }
@@ -18382,6 +19304,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -18445,6 +19368,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -18581,6 +19505,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:AvailabilityZone",
+          "ec2:AvailabilityZoneId",
           "ec2:CpuOptionsAmdSevSnp",
           "ec2:EbsOptimized",
           "ec2:InstanceAutoRecovery",
@@ -18608,6 +19533,16 @@
     ],
     "dependentActions": []
   },
+  "updatecapacitymanagerorganizationsaccess": {
+    "name": "UpdateCapacityManagerOrganizationsAccess",
+    "description": "Grants permission to update the Organizations access setting for EC2 Capacity Manager",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "updatesecuritygroupruledescriptionsegress": {
     "name": "UpdateSecurityGroupRuleDescriptionsEgress",
     "description": "Grants permission to update descriptions for one or more outbound rules in a VPC security group",