Iam-floyd

:warning: **Removed actions:**

- finspace:DeleteUser

**New actions:**

- cognito-idp:RevokeToken
- finspace:ResetUserPassword
- finspace:UpdateUser

:warning: **Removed resource types:**

- iotdeviceadvisor:suitedefinition
- iotdeviceadvisor:suiterun

**New actions:**

- eks:DeregisterCluster
- eks:RegisterCluster
- iotdeviceadvisor:GetEndpoint
- lookoutmetrics:DeactivateAnomalyDetector

**New resource types:**

- iotdeviceadvisor:Suitedefinition
- iotdeviceadvisor:Suiterun

**New condition keys:**

- ssm:DocumentCategories

**New actions:**

- appsync:AssociateApi
- appsync:CreateDomainName
- appsync:DeleteDomainName
- appsync:DisassociateApi
- appsync:GetApiAssociation
- appsync:GetDomainName
- appsync:ListDomainNames
- appsync:UpdateDomainName
- cloudtrail:CancelQuery
- cloudtrail:CreateEventDataStore
- cloudtrail:DeleteEventDataStore
- cloudtrail:DescribeQuery
- cloudtrail:GetEventDataStore
- cloudtrail:GetQueryResults
- cloudtrail:ListEventDataStores
- cloudtrail:ListQueries
- cloudtrail:RestoreEventDataStore
- cloudtrail:StartQuery
- cloudtrail:UpdateEventDataStore
- ec2:DescribeFastLaunchImages
- ec2:DisableFastLaunch
- ec2:EnableFastLaunch
- ec2:ModifyPrivateDnsNameOptions
- ec2:ModifyVpcEndpointServicePayerResponsibility
- glue:BatchGetBlueprints
- glue:CreateBlueprint
- glue:DeleteBlueprint
- glue:GetBlueprint
- glue:GetBlueprintRun
- glue:GetBlueprintRuns
- glue:ListBlueprints
- glue:StartBlueprintRun
- glue:UpdateBlueprint
- network-firewall:DescribeRuleGroupMetadata

**New resource types:**

- appsync:domain
- cloudtrail:eventdatastore
- glue:blueprint
- mediastore:folder
- mediastore:object

**New condition keys:**

- cloudtrail:RequestTag/${TagKey}
- cloudtrail:ResourceTag/${TagKey}
- cloudtrail:TagKeys
- kms:EncryptionContext
- kms:RecipientAttestation
- mediastore:RequestTag/${TagKey}
- mediastore:ResourceTag/${TagKey}
- mediastore:TagKeys

:warning: **Removed resource types:**

- bugbust:ProfilingGroup
- bugbust:codereview

**New actions:**

- appstream:AssociateApplicatonToEntitlement
- appstream:CreateEntitlement
- appstream:DeleteEntitlement
- appstream:DescribeEntitlements
- appstream:DisassociateApplicatonFromEntitlement
- appstream:ListEntitledApplications
- appstream:UpdateEntitlement
- elasticfilesystem:CreateReplicationConfiguration
- elasticfilesystem:DeleteReplicationConfiguration
- elasticfilesystem:DescribeReplicationConfigurations
- geo:SearchPlaceIndexForSuggestions
- geo:UpdateMap
- geo:UpdatePlaceIndex
- geo:UpdateRouteCalculator
- glue:BatchUpdatePartition
- glue:CancelStatement
- glue:CreatePartitionIndex
- glue:CreateSession
- glue:DeleteColumnStatisticsForPartition
- glue:DeleteColumnStatisticsForTable
- glue:DeletePartitionIndex
- glue:DeleteSession
- glue:GetColumnStatisticsForPartition
- glue:GetColumnStatisticsForTable
- glue:GetSession
- glue:GetStatement
- glue:ListSessions
- glue:ListStatements
- glue:RunStatement
- glue:StopSession
- glue:UpdateColumnStatisticsForPartition
- glue:UpdateColumnStatisticsForTable
- iotwireless:DeleteQueuedMessages
- iotwireless:ListQueuedMessages
- lakeformation:CancelTransaction
- lakeformation:CommitTransaction
- lakeformation:CreateDataCellsFilter
- lakeformation:DeleteDataCellsFilter
- lakeformation:DeleteObjectsOnCancel
- lakeformation:DescribeTransaction
- lakeformation:ExtendTransaction
- lakeformation:GetQueryState
- lakeformation:GetQueryStatistics
- lakeformation:GetTableObjects
- lakeformation:GetWorkUnitResults
- lakeformation:GetWorkUnits
- lakeformation:ListDataCellsFilter
- lakeformation:ListTableStorageOptimizers
- lakeformation:ListTransactions
- lakeformation:StartQueryPlanning
- lakeformation:StartTransaction
- lakeformation:UpdateTableObjects
- lakeformation:UpdateTableStorageOptimizer
- lex:CreateCustomVocabulary
- lex:DeleteCustomVocabulary
- lex:DescribeCustomVocabulary
- lex:DescribeCustomVocabularyMetadata
- lex:UpdateCustomVocabulary
- lookoutmetrics:ListAnomalyGroupRelatedMetrics
- pi:GetResourceMetadata
- pi:ListAvailableResourceDimensions
- pi:ListAvailableResourceMetrics
- proton:CreateRepository
- proton:CreateTemplateSyncConfig
- proton:DeleteRepository
- proton:DeleteTemplateSyncConfig
- proton:GetRepository
- proton:GetRepositorySyncStatus
- proton:GetTemplateSyncConfig
- proton:GetTemplateSyncStatus
- proton:ListRepositories
- proton:ListRepositorySyncDefinitions
- proton:UpdateRepository
- proton:UpdateTemplateSyncConfig
- s3:PutAccessPointPublicAccessBlock
- shield:DisableApplicationLayerAutomaticResponse
- shield:EnableApplicationLayerAutomaticResponse
- shield:UpdateApplicationLayerAutomaticResponse

**Updated action access level:**

- aws-marketplace:ListChangeSets: Read -> List
- aws-marketplace:ListEntities: Read -> List

**New resource types:**

- glue:session
- proton:repository

:warning: **Removed actions:**

- sqlworkbench:GetKMSKey
- sqlworkbench:ListBuckets
- sqlworkbench:ListKMSKeyAliases
- sqlworkbench:ListKMSKeys

**New actions:**

- detective:DescribeOrganizationConfiguration
- detective:DisableOrganizationAdminAccount
- detective:EnableOrganizationAdminAccount
- detective:ListOrganizationAdminAccounts
- detective:UpdateOrganizationConfiguration
- lookoutvision:DescribeModelPackagingJob
- lookoutvision:ListModelPackagingJobs
- lookoutvision:StartModelPackagingJob
- outposts:CancelOrder
- outposts:CreateSite
- outposts:GetCatalogItem
- outposts:GetSite
- outposts:GetSiteAddress
- outposts:ListCatalogItems
- outposts:ListOrders
- outposts:UpdateOutpost
- outposts:UpdateSite
- outposts:UpdateSiteAddress
- outposts:UpdateSiteRackPhysicalProperties
- redshift:CreateAuthenticationProfile
- redshift:DeleteAuthenticationProfile
- redshift:DescribeAuthenticationProfiles
- redshift:ModifyAuthenticationProfile
- route53-recovery-control-config:ListTagsForResource
- route53-recovery-control-config:TagResource
- route53-recovery-control-config:UntagResource
- route53domains:DeleteDomain
- route53domains:ListPrices
- sqlworkbench:ListTaggedResources

**Updated action access level:**

- route53domains:ListTagsForDomain: List -> Read

**New condition keys:**

- route53-recovery-control-config:RequestTag/${TagKey}
- route53-recovery-control-config:ResourceTag/${TagKey}
- route53-recovery-control-config:TagKeys