Iam-floyd

**New actions:**

- cloudformation:DescribeChangeSetHook
- ds:DescribeClientAuthenticationSettings
- medialive:ClaimDevice
- mobiletargeting:CreateInAppTemplate
- mobiletargeting:DeleteInAppTemplate
- mobiletargeting:GetInAppTemplate
- mobiletargeting:UpdateInAppTemplate
- mobiletargeting:VerifyOTPMessage
- outposts:GetOrder
- quicksight:AccountConfigurations
- quicksight:ScopeDownPolicy
- wafv2:ListAvailableManagedRuleGroupVersions

**Updated action access level:**

- ds:ConnectDirectory: Tagging -> Write
- ds:CreateDirectory: Tagging -> Write
- ds:CreateIdentityPoolDirectory: Tagging -> Write
- ds:CreateMicrosoftAD: Tagging -> Write

**New actions:**

- iot:PutVerificationStateOnViolation
- kendra:AssociateEntitiesToExperience
- kendra:AssociatePersonasToEntities
- kendra:CreateExperience
- kendra:DeleteExperience
- kendra:DescribeExperience
- kendra:DisassociateEntitiesFromExperience
- kendra:DisassociatePersonasFromEntities
- kendra:GetSnapshots
- kendra:ListEntityPersonas
- kendra:ListExperienceEntities
- kendra:ListExperiences
- kendra:UpdateExperience
- kinesis:UpdateStreamMode
- proton:ListEnvironmentOutputs
- proton:ListEnvironmentProvisionedResources
- proton:ListServiceInstanceOutputs
- proton:ListServiceInstanceProvisionedResources
- proton:ListServicePipelineOutputs
- proton:ListServicePipelineProvisionedResources

**New resource types:**

- kendra:experience

**New actions:**

- apprunner:CreateVpcConnector
- apprunner:DeleteVpcConnector
- apprunner:DescribeVpcConnector
- apprunner:ListVpcConnectors
- ram:ListPermissionVersions
- s3:InitiateReplication
- ssm:UnlabelParameterVersion
- storagegateway:UpdateSMBLocalGroups

**New resource types:**

- apprunner:vpcconnector

**New condition keys:**

- apprunner:VpcConnectorArn

**New actions:**

- ec2:CreateCoipPoolPermission
- ec2:CreateLocalGatewayRouteTablePermission
- ec2:DeleteCoipPoolPermission
- ec2:DeleteLocalGatewayRouteTablePermission
- ec2:DescribeLocalGatewayRouteTablePermissions

**Updated action access level:**

- ssm:ModifyDocumentPermission: Write -> Permissions management

**New condition keys:**

- ec2:Add/group
- ec2:Add/userId
- ec2:Attribute
- ec2:InsideTunnelIpv6Cidr
- ec2:InstanceAutoRecovery
- ec2:InstanceMetadataTags
- ec2:Remove/group
- ec2:Remove/userId
- ec2:ReplayWindowSizePackets
- synthetics:Names
- synthetics:RequestTag/${TagKey}
- synthetics:TagKeys

**New actions:**

- fis:GetTargetResourceType
- fis:ListTargetResourceTypes

**New actions:**

- comprehend:DeleteResourcePolicy
- comprehend:DescribeResourcePolicy
- comprehend:ImportModel
- comprehend:PutResourcePolicy
- connect:AssociateDefaultVocabulary
- connect:CreateVocabulary
- connect:DeleteVocabulary
- connect:DescribeVocabulary
- connect:ListDefaultVocabularies
- connect:SearchVocabularies
- fsx:ReleaseFileSystemNfsV3Locks
- imagebuilder:ImportVmImage

**New resource types:**

- connect:vocabulary

**New condition keys:**

- secretsmanager:ModifyRotationRules
- secretsmanager:RotateImmediately