Iam-floyd

**New actions:**

- appconfig:GetLatestConfiguration
- appconfig:StartConfigurationSession
- cloudfront:CreateResponseHeadersPolicy
- cloudfront:DeleteResponseHeadersPolicy
- cloudfront:GetResponseHeadersPolicy
- cloudfront:GetResponseHeadersPolicyConfig
- cloudfront:ListDistributionsByResponseHeadersPolicyId
- cloudfront:ListResponseHeadersPolicies
- cloudfront:UpdateResponseHeadersPolicy
- ec2:AllocateIpamPoolCidr
- ec2:CreateIpam
- ec2:CreateIpamPool
- ec2:CreateIpamScope
- ec2:CreateNetworkInsightsAccessScope
- ec2:CreatePublicIpv4Pool
- ec2:DeleteIpam
- ec2:DeleteIpamPool
- ec2:DeleteIpamScope
- ec2:DeleteNetworkInsightsAccessScope
- ec2:DeleteNetworkInsightsAccessScopeAnalysis
- ec2:DeletePublicIpv4Pool
- ec2:DeprovisionIpamPoolCidr
- ec2:DeprovisionPublicIpv4PoolCidr
- ec2:DescribeIpamPools
- ec2:DescribeIpamScopes
- ec2:DescribeIpams
- ec2:DescribeNetworkInsightsAccessScopeAnalyses
- ec2:DescribeNetworkInsightsAccessScopes
- ec2:DescribeSnapshotTierStatus
- ec2:DisableIpamOrganizationAdminAccount
- ec2:EnableIpamOrganizationAdminAccount
- ec2:GetInstanceTypesFromInstanceRequirements
- ec2:GetIpamAddressHistory
- ec2:GetIpamPoolAllocations
- ec2:GetIpamPoolCidrs
- ec2:GetIpamResourceCidrs
- ec2:GetNetworkInsightsAccessScopeAnalysisFindings
- ec2:GetNetworkInsightsAccessScopeContent
- ec2:GetSpotPlacementScores
- ec2:ListSnapshotsInRecycleBin
- ec2:ModifyIpam
- ec2:ModifyIpamPool
- ec2:ModifyIpamResourceCidr
- ec2:ModifyIpamScope
- ec2:ModifySnapshotTier
- ec2:MoveByoipCidrToIpam
- ec2:ProvisionIpamPoolCidr
- ec2:ProvisionPublicIpv4PoolCidr
- ec2:ReleaseIpamPoolAllocation
- ec2:RestoreSnapshotFromRecycleBin
- ec2:RestoreSnapshotTier
- ec2:StartNetworkInsightsAccessScopeAnalysis
- ssm:RegisterManagedInstance
- textract:AnalyzeID

**Updated action access level:**

- ssm:DescribePatchGroupState: Read -> List
- ssm:ListDocumentMetadataHistory: Read -> List

**New resource types:**

- appconfig:configuration
- cloudfront:response-headers-policy
- ec2:ipam
- ec2:ipam-pool
- ec2:ipam-scope
- ec2:network-insights-access-scope
- ec2:network-insights-access-scope-analysis
- kafka:group
- kafka:topic
- kafka:transactional-id

**New condition keys:**

- ec2:Ipv4IpamPoolId
- ec2:Ipv6IpamPoolId

**New services:**

- amplifyuibuilder
- evidently
- iotfleetwise
- iotroborunner
- iottwinmaker
- rbin
- refactor-spaces
- rum
- serviceextract
- workspaces-web

**New actions:**

- braket:CancelJob
- braket:CreateJob
- braket:GetJob
- braket:SearchJobs
- compute-optimizer:DeleteRecommendationPreferences
- compute-optimizer:GetEffectiveRecommendationPreferences
- compute-optimizer:GetRecommendationPreferences
- compute-optimizer:PutRecommendationPreferences
- dataexchange:SendApiAsset
- ecr:BatchGetRepositoryScanningConfiguration
- ecr:CreatePullThroughCacheRule
- ecr:DeletePullThroughCacheRule
- ecr:DescribePullThroughCacheRules
- ecr:GetRegistryScanningConfiguration
- ecr:PutRegistryScanningConfiguration
- fsx:CreateDataRepositoryAssociation
- fsx:CreateSnapshot
- fsx:DeleteDataRepositoryAssociation
- fsx:DeleteSnapshot
- fsx:DescribeDataRepositoryAssociations
- fsx:DescribeSnapshots
- fsx:RestoreVolumeFromSnapshot
- fsx:UpdateDataRepositoryAssociation
- fsx:UpdateSnapshot
- lex:DescribeBotRecommendation
- lex:ListBotRecommendations
- lex:ListRecommendedIntents
- lex:SearchAssociatedTranscripts
- lex:StartBotRecommendation
- lex:UpdateBotRecommendation
- networkmanager:AcceptAttachment
- networkmanager:AssociateConnectPeer
- networkmanager:CreateConnectAttachment
- networkmanager:CreateConnectPeer
- networkmanager:CreateCoreNetwork
- networkmanager:CreateSiteToSiteVpnAttachment
- networkmanager:CreateVpcAttachment
- networkmanager:DeleteAttachment
- networkmanager:DeleteConnectPeer
- networkmanager:DeleteCoreNetwork
- networkmanager:DeleteCoreNetworkPolicyVersion
- networkmanager:DeleteResourcePolicy
- networkmanager:DisassociateConnectPeer
- networkmanager:ExecuteCoreNetworkChangeSet
- networkmanager:GetConnectAttachment
- networkmanager:GetConnectPeer
- networkmanager:GetConnectPeerAssociations
- networkmanager:GetCoreNetwork
- networkmanager:GetCoreNetworkChangeSet
- networkmanager:GetCoreNetworkPolicy
- networkmanager:GetResourcePolicy
- networkmanager:GetSiteToSiteVpnAttachment
- networkmanager:GetVpcAttachment
- networkmanager:ListAttachments
- networkmanager:ListConnectPeers
- networkmanager:ListCoreNetworkPolicyVersions
- networkmanager:ListCoreNetworks
- networkmanager:PutCoreNetworkPolicy
- networkmanager:PutResourcePolicy
- networkmanager:RejectAttachment
- networkmanager:RestoreCoreNetworkPolicyVersion
- networkmanager:UpdateCoreNetwork
- networkmanager:UpdateVpcAttachment
- personalize:CreateBatchSegmentJob
- personalize:CreateRecommender
- personalize:DeleteRecommender
- personalize:DescribeBatchSegmentJob
- personalize:DescribeRecommender
- personalize:ListBatchSegmentJobs
- personalize:ListRecommenders
- personalize:UpdateRecommender
- sagemaker:CreateInferenceRecommendationsJob
- sagemaker:CreateLineageGroupPolicy
- sagemaker:DeleteLineageGroupPolicy
- sagemaker:DescribeInferenceRecommendationsJob
- sagemaker:DescribeLineageGroup
- sagemaker:GetLineageGroupPolicy
- sagemaker:ListInferenceRecommendationsJobs
- sagemaker:ListLineageGroups
- sagemaker:ListModelMetadata
- sagemaker:PutLineageGroupPolicy
- sagemaker:QueryLineage
- sagemaker:StopInferenceRecommendationsJob
- timestream:CreateScheduledQuery
- timestream:DeleteScheduledQuery
- timestream:DescribeScheduledQuery
- timestream:ExecuteScheduledQuery
- timestream:ListScheduledQueries
- timestream:UpdateScheduledQuery
- wellarchitected:CreateLensShare
- wellarchitected:CreateLensVersion
- wellarchitected:DeleteLens
- wellarchitected:DeleteLensShare
- wellarchitected:ExportLens
- wellarchitected:GetLens
- wellarchitected:ImportLens
- wellarchitected:ListLensShares

**Updated action access level:**

- networkmanager:GetTransitGatewayConnectPeerAssociations: List -> Read

**New resource types:**

- braket:job
- fsx:association
- fsx:snapshot
- networkmanager:attachment
- networkmanager:connect-peer
- networkmanager:core-network
- personalize:batchSegmentJob
- personalize:recommender
- sagemaker:inference-recommendations-job
- sagemaker:lineage-group
- timestream:scheduled-query
- wellarchitected:lens

**New condition keys:**

- compute-optimizer:ResourceType
- fsx:ParentVolumeId
- networkmanager:subnetArns
- networkmanager:vpcArn
- networkmanager:vpnConnectionArn
- s3:x-amz-object-ownership

Breaking changes

Starting with this version, the CDK package is only compatible with AWS CDK v2.

For CDK v1 you can use any version up to 0.285.0:
[](https://www.npmjs.com/package/cdk-iam-floyd/v/0.285.0) [](https://pypi.org/project/cdk-iam-floyd/0.285.0/)

**New actions:**

- iot:DescribeManagedJobTemplate
- iot:ListManagedJobTemplates
- iotsitewise:AssociateTimeSeriesToAssetProperty
- iotsitewise:DeleteTimeSeries
- iotsitewise:DescribeTimeSeries
- iotsitewise:DisassociateTimeSeriesFromAssetProperty
- iotsitewise:GetInterpolatedAssetPropertyValues
- iotsitewise:ListTimeSeries
- quicksight:CreateEmailCustomizationTemplate
- quicksight:DeleteEmailCustomizationTemplate
- quicksight:DescribeEmailCustomizationTemplate
- quicksight:UpdateEmailCustomizationTemplate

**Updated action access level:**

- workspaces:DescribeTags: List -> Read

**New resource types:**

- iotsitewise:time-series
- quicksight:emailCustomizationTemplate

**New condition keys:**

- iotsitewise:isAssociatedWithAssetProperty
- iotsitewise:propertyAlias

**New services:**

- backup-gateway
- ssm-guiconnect

**New actions:**

- connect:CreateContactFlowModule
- connect:DeleteContactFlow
- connect:DeleteContactFlowModule
- connect:DescribeContactFlowModule
- connect:ListContactFlowModules
- connect:UpdateContactFlowMetadata
- connect:UpdateContactFlowModuleMetadata
- connect:UpdatedescribeContent
- dynamodb:RestoreTableFromAwsBackup
- dynamodb:StartAwsBackupJob
- iotwireless:GetNetworkAnalyzerConfiguration
- iotwireless:StartNetworkAnalyzerStream
- iotwireless:UpdateNetworkAnalyzerConfiguration
- profile:GetAutoMergingPreview
- profile:GetIdentityResolutionJob
- profile:ListIdentityResolutionJobs

**New resource types:**

- connect:contact-flow-module
- connect:wildcard-agent-status
- connect:wildcard-contact-flow
- connect:wildcard-phone-number
- connect:wildcard-queue
- connect:wildcard-quick-connect