Iam-floyd

**New actions:**

- codestar:VerifyServiceRole
- datasync:UpdateLocationNfs
- datasync:UpdateLocationObjectStorage
- datasync:UpdateLocationSmb

**Updated action access level:**

- datasync:TagResource: Write -> Tagging
- iotthingsgraph:CreateSystemInstance: Tagging -> Write
- robomaker:TagResource: Write -> Tagging
- robomaker:UntagResource: Write -> Tagging

**New actions:**

- chime:StartMeetingTranscription
- chime:StopMeetingTranscription
- iotsitewise:DescribeStorageConfiguration
- iotsitewise:PutStorageConfiguration
- medialive:CreatePartnerInput
- mediatailor:CreateChannel
- mediatailor:CreateProgram
- mediatailor:CreateSourceLocation
- mediatailor:CreateVodSource
- mediatailor:DeleteChannel
- mediatailor:DeleteChannelPolicy
- mediatailor:DeleteProgram
- mediatailor:DeleteSourceLocation
- mediatailor:DeleteVodSource
- mediatailor:DescribeChannel
- mediatailor:DescribeProgram
- mediatailor:DescribeSourceLocation
- mediatailor:DescribeVodSource
- mediatailor:GetChannelPolicy
- mediatailor:GetChannelSchedule
- mediatailor:ListAlerts
- mediatailor:ListChannels
- mediatailor:ListSourceLocations
- mediatailor:ListVodSources
- mediatailor:PutChannelPolicy
- mediatailor:StartChannel
- mediatailor:StopChannel
- mediatailor:UpdateChannel
- mediatailor:UpdateSourceLocation
- mediatailor:UpdateVodSource
- personalize:StopSolutionVersionCreation
- quicksight:CreateFolder
- quicksight:CreateFolderMembership
- quicksight:DeleteFolder
- quicksight:DeleteFolderMembership
- quicksight:DescribeFolder
- quicksight:DescribeFolderPermissions
- quicksight:DescribeFolderResolvedPermissions
- quicksight:ListFolderMembers
- quicksight:ListFolders
- quicksight:SearchFolders
- quicksight:UpdateFolder
- quicksight:UpdateFolderPermissions

**New resource types:**

- mediatailor:channel
- mediatailor:program
- mediatailor:sourceLocation
- mediatailor:vodSource
- quicksight:folder

**New actions:**

- personalize:CreateDatasetExportJob
- personalize:DescribeDatasetExportJob
- personalize:ListDatasetExportJobs
- s3:CreateMultiRegionAccessPoint
- s3:DeleteMultiRegionAccessPoint
- s3:DescribeMultiRegionAccessPointOperation
- s3:GetMultiRegionAccessPoint
- s3:GetMultiRegionAccessPointPolicy
- s3:GetMultiRegionAccessPointPolicyStatus
- s3:ListMultiRegionAccessPoints
- s3:PutMultiRegionAccessPointPolicy

**Updated action access level:**

- acm-pca:CreateCertificateAuthority: Tagging -> Write
acm-pca:CreateCertificateAuthorityAuditReport;Write
-s3:ListAccessPoints;Read
- s3:ListAccessPointsForObjectLambda: Read -> List
+s3:ListAccessPointsForObjectLambda;List
- s3:ListAccessPointsForObjectLambda: Read -> List

**New resource types:**

- personalize:datasetExportJob
- s3:multiregionaccesspoint
- s3:multiregionaccesspointrequestarn

**New condition keys:**

- s3:RequestedRegion

**New actions:**

- cloud9:ActivateEC2Remote
- cloud9:CreateEnvironmentSSH
- cloud9:CreateEnvironmentToken
- cloud9:DescribeEC2Remote
- cloud9:DescribeSSHRemote
- cloud9:GetEnvironmentConfig
- cloud9:GetEnvironmentSettings
- cloud9:GetMembershipSettings
- cloud9:GetUserPublicKey
- cloud9:ModifyTemporaryCredentialsOnEnvironmentEC2
- cloud9:UpdateEnvironmentSettings
- cloud9:UpdateMembershipSettings
- cloud9:UpdateSSHRemote
- cloud9:ValidateEnvironmentName
- kinesisanalytics:DescribeApplicationVersion
- kinesisanalytics:ListApplicationVersions
- kinesisanalytics:RollbackApplication
- kinesisanalytics:UpdateApplicationMaintenanceConfiguration
- profile:GetMatches
- profile:MergeProfiles
- sagemaker:InvokeEndpointAsync

**Updated action access level:**

- cloud9:TagResource: Write -> Tagging
- cloud9:UntagResource: Write -> Tagging
- profile:ListTagsForResource: List -> Read
- route53resolver:PutFirewallRuleGroupPolicy: Write -> Permissions management
- route53resolver:PutResolverQueryLogConfigPolicy: Write -> Permissions management
- route53resolver:PutResolverRulePolicy: Write -> Permissions management

**New actions:**

- directconnect:AssociateMacSecKey
- directconnect:DisassociateMacSecKey
- directconnect:UpdateConnection
- ec2:AssociateInstanceEventWindow
- ec2:AssociateTrunkInterface
- ec2:CreateInstanceEventWindow
- ec2:CreateSubnetCidrReservation
- ec2:DeleteInstanceEventWindow
- ec2:DeleteSubnetCidrReservation
- ec2:DescribeInstanceEventWindows
- ec2:DescribeTrunkInterfaceAssociations
- ec2:DisassociateInstanceEventWindow
- ec2:DisassociateTrunkInterface
- ec2:GetSubnetCidrReservations
- ec2:ModifyInstanceEventWindow
- fsx:CreateStorageVirtualMachine
- fsx:CreateVolume
- fsx:CreateVolumeFromBackup
- fsx:DeleteStorageVirtualMachine
- fsx:DeleteVolume
- fsx:DescribeStorageVirtualMachines
- fsx:DescribeVolumes
- fsx:UpdateStorageVirtualMachine
- fsx:UpdateVolume
- iotevents:DescribeDetectorModelAnalysis
- iotevents:GetDetectorModelAnalysisResults
- iotevents:StartDetectorModelAnalysis
- lex:GetMigration
- lex:GetMigrations
- lex:StartMigration
- servicediscovery:UpdateHttpNamespace
- servicediscovery:UpdatePrivateDnsNamespace
- servicediscovery:UpdatePublicDnsNamespace

**Updated action access level:**

- devicefarm:CreateProject: Tagging -> Write
- ec2:ExportClientVpnClientCertificateRevocationList: List -> Read
- ec2:ExportClientVpnClientConfiguration: List -> Read
- ram:EnableSharingWithAwsOrganization: Write -> Permissions management

**New resource types:**

- ec2:instance-event-window
- fsx:storage-virtual-machine
- fsx:volume

**New condition keys:**

- fsx:StorageVirtualMachineId

:warning: **Removed actions:**

- aws-marketplace:CreatePrivateMarketplace
- aws-marketplace:DescribePrivateMarketplaceStatus

**New actions:**

- cloudformation:ImportStacksToStackSet
- codepipeline:GetActionType
- codepipeline:UpdateActionType
- grafana:DescribeWorkspaceAuthentication
- grafana:UpdateWorkspaceAuthentication

**Updated action access level:**

- chime:ListChannelMessages: List -> Write
- chime:RetrieveDataExports: List -> Write
- codepipeline:CreateCustomActionType: Tagging -> Write
- codepipeline:CreatePipeline: Tagging -> Write
- codepipeline:PutWebhook: Tagging -> Write
- events:PutRule: Tagging -> Write
- logs:DeleteResourcePolicy: Write -> Permissions management
- logs:PutResourcePolicy: Write -> Permissions management

**New condition keys:**

- kms:KeySpec
- kms:KeyUsage